$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1EGl1rBy2gn-pGox14Gdpx6dCTA.roa File: 1EGl1rBy2gn-pGox14Gdpx6dCTA.roa (raw, json) Hash identifier: cLgaCun2EiCGFkgV7cKC5cpK49RwNgtB/BvIqUKacus= Subject key identifier: D4:41:A5:D6:B0:72:DA:09:FE:A4:6A:31:D7:81:9D:A7:1E:9D:09:30 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 058D Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1EGl1rBy2gn-pGox14Gdpx6dCTA.roa Signing time: Tue 01 Jul 2025 07:01:48 +0000 ROA not before: Tue 01 Jul 2025 07:01:48 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 23624 IP address blocks: 14.14.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Jul 1 07:01:48 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=D441A5D6B072DA09FEA46A31D7819DA71E9D0930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:2b:98:75:72:59:60:e2:1b:12:81:12:6f: a1:51:08:fc:7c:3d:4b:a5:02:0c:65:ea:5f:8d:eb: da:e5:4c:53:bb:27:9b:c8:9b:a0:7f:db:73:4c:3e: de:e4:66:08:16:0f:07:31:34:fa:4f:f3:f2:41:23: ff:e0:05:c2:f2:8b:e3:de:b5:fc:28:d5:0c:d1:c6: db:b3:68:ce:b2:0f:13:8f:f1:f9:5f:cc:02:a6:cb: 03:1e:46:a9:12:77:1c:6d:db:a7:50:a9:37:43:b4: e0:e6:4f:c8:f8:59:36:c4:b5:97:7a:4e:8a:c6:10: e8:0b:19:c9:30:81:a6:92:fd:4e:21:9a:dc:45:73: 91:08:27:b5:41:40:44:8d:92:4e:85:8f:13:20:6f: c6:7e:c1:57:17:ba:77:b9:fa:e1:34:c6:ff:d3:49: 18:9a:1a:5e:f8:b9:0a:e4:aa:8d:e1:16:e4:da:5d: 87:57:6f:9f:be:79:a8:47:dc:2a:c4:5b:57:44:6b: ca:1c:33:7b:be:ba:11:64:2a:dd:1d:6a:26:8e:c9: d1:2e:c3:aa:f1:c8:fc:13:22:a2:5c:d4:a6:f9:2b: 19:b3:6b:6f:f7:99:49:2e:f5:db:35:6a:d9:5a:21: 77:84:cf:59:46:64:c3:2d:31:40:7a:38:71:5b:67: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:41:A5:D6:B0:72:DA:09:FE:A4:6A:31:D7:81:9D:A7:1E:9D:09:30 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1EGl1rBy2gn-pGox14Gdpx6dCTA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.14.112.0/20 Signature Algorithm: sha256WithRSAEncryption b2:2f:5f:a8:22:e0:50:bd:e7:1a:02:f2:63:a2:ad:a2:2e:78: 90:75:18:ca:7d:5e:4e:a8:72:3d:96:55:59:03:d2:65:ee:b4: 97:ab:00:4d:fe:84:0a:ff:85:6b:aa:6f:e3:9a:d7:9f:9e:9c: bf:f4:91:47:9d:ab:bd:a6:e6:89:6a:1c:e9:f8:1b:04:6e:2e: 52:88:74:1c:e5:f9:29:38:f4:c1:66:db:82:36:ec:d2:d8:7e: fc:1b:ea:de:90:b5:48:8d:9a:56:27:20:b9:f7:4c:9a:8f:4b: 2e:8b:6c:27:e9:3b:a7:05:42:ba:4c:20:aa:0d:e6:0b:e9:e0: c9:70:6e:ed:5c:e6:48:56:54:a8:00:62:23:d1:2a:ea:99:e4: 91:e7:6a:19:7e:c7:92:aa:8c:b0:ed:2a:c7:e1:ba:71:41:e1: 0f:6d:33:4b:89:78:49:5b:4f:0d:7e:e0:85:f7:45:5f:97:a1: 72:0d:8f:b2:7b:1a:2e:6b:1b:da:4a:02:cb:6c:ed:68:9f:f9: 45:bc:bf:03:a1:09:8b:e2:ff:2c:9a:10:b0:f6:3b:74:a6:d0: 86:54:2c:12:ae:70:e2:e0:87:c1:65:45:cf:90:1c:6d:27:41: 42:b6:21:9e:bc:9f:1e:e1:a0:f5:e1:76:d9:e3:8c:27:0a:28: 75:65:d3:5e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTA3MDEw NzAxNDhaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0NDFBNUQ2QjA3MkRB MDlGRUE0NkEzMUQ3ODE5REE3MUU5RDA5MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2WyuYdXJZYOIbEoESb6FRCPx8PUulAgxl6l+N69rlTFO7J5vI m6B/23NMPt7kZggWDwcxNPpP8/JBI//gBcLyi+Petfwo1QzRxtuzaM6yDxOP8flf zAKmywMeRqkSdxxt26dQqTdDtODmT8j4WTbEtZd6TorGEOgLGckwgaaS/U4hmtxF c5EIJ7VBQESNkk6FjxMgb8Z+wVcXune5+uE0xv/TSRiaGl74uQrkqo3hFuTaXYdX b5++eahH3CrEW1dEa8ocM3u+uhFkKt0daiaOydEuw6rxyPwTIqJc1Kb5Kxmza2/3 mUku9ds1atlaIXeEz1lGZMMtMUB6OHFbZ5GRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1EGl1rBy2gn+pGox14Gdpx6dCTAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzFFR2wxckJ5MmduLXBHb3gxNEdkcHg2ZENUQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQODnAwDQYJKoZIhvcNAQELBQADggEBALIvX6gi4FC95xoC8mOiraIueJB1 GMp9Xk6ocj2WVVkD0mXutJerAE3+hAr/hWuqb+Oa15+enL/0kUedq72m5olqHOn4 GwRuLlKIdBzl+Sk49MFm24I27NLYfvwb6t6QtUiNmlYnILn3TJqPSy6LbCfpO6cF QrpMIKoN5gvp4Mlwbu1c5khWVKgAYiPRKuqZ5JHnahl+x5KqjLDtKsfhunFB4Q9t M0uJeElbTw1+4IX3RV+XoXINj7J7Gi5rG9pKAsts7Wif+UW8vwOhCYvi/yyaELD2 O3Sm0IZULBKucOLgh8FlRc+QHG0nQUK2IZ68nx7hoPXhdtnjjCcKKHVl014= -----END CERTIFICATE-----Generated at Wed Nov 5 22:10:53 2025 by rpki-client