$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/6gRM3zZltqc0O-trdPtmt0kicaA.roa File: 6gRM3zZltqc0O-trdPtmt0kicaA.roa (raw, json) Hash identifier: aBSlh6qu3GD+NRHiQ4fGQ8rsS50ndTQ0zJx7xeNtfQs= Subject key identifier: EA:04:4C:DF:36:65:B6:A7:34:3B:EB:6B:74:FB:66:B7:49:22:71:A0 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 94 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/6gRM3zZltqc0O-trdPtmt0kicaA.roa Signing time: Fri 01 Aug 2025 01:30:01 +0000 ROA not before: Fri 01 Aug 2025 01:30:01 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 219.122.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:30:01 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=EA044CDF3665B6A7343BEB6B74FB66B7492271A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:53:c8:86:e5:60:61:6e:29:05:7c:7c:91: 38:76:c8:67:2f:1c:f0:d5:ea:66:0c:69:d2:31:14: 89:23:40:f4:d2:32:b2:dd:83:2c:2e:59:ef:9f:3b: 53:b6:33:f0:49:cf:04:be:19:b2:39:a1:6e:7a:64: fa:f3:d9:f7:08:75:f5:96:0d:6c:a7:be:57:84:59: 0a:56:cf:da:05:59:85:0c:4e:3b:03:67:ba:b4:5f: 79:ad:69:05:b4:63:14:07:13:f5:93:f3:8c:4e:af: 72:dd:06:ca:b2:f4:e1:3a:55:fd:65:0c:3d:63:f1: 99:58:54:d1:40:3d:53:60:9e:df:0e:58:28:9f:bf: 05:c6:80:e7:4e:21:bc:84:9b:44:cd:ae:2d:7f:31: 76:f1:53:fb:24:a3:50:92:3c:2d:c8:8f:4b:e5:a0: 32:e0:d3:3a:c0:ea:10:dc:d5:15:3c:15:a7:98:e4: 08:2b:9d:ef:99:d7:96:af:13:f1:e8:d7:9e:96:38: 33:0c:97:22:c4:fc:9c:c2:ee:d6:19:86:70:c2:78: 02:1c:27:56:17:80:78:0b:74:5d:e4:5b:3d:39:e7: c9:0f:35:6b:44:df:de:da:34:97:2c:90:06:86:68: c9:a0:3e:79:30:4b:2e:8d:2c:5c:01:80:f8:b7:ef: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:04:4C:DF:36:65:B6:A7:34:3B:EB:6B:74:FB:66:B7:49:22:71:A0 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/6gRM3zZltqc0O-trdPtmt0kicaA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.0.0/20 Signature Algorithm: sha256WithRSAEncryption 79:76:4f:0c:54:fa:da:60:6b:12:9a:36:55:7c:f1:c6:89:eb: f1:d7:fb:de:f9:34:3d:02:be:e9:3f:2c:a5:fd:06:b2:e9:3b: 16:5b:39:01:e7:b8:a0:31:3b:22:52:16:06:80:1a:80:4c:99: 1a:56:61:7e:98:45:14:47:51:ff:9b:d4:9b:b1:6e:67:06:24: 88:5a:0e:d2:0d:16:03:bb:73:52:e0:d5:04:e4:ec:2b:90:80: c5:42:45:d6:17:db:d6:87:a2:d3:61:25:21:cd:17:a2:2a:fc: d5:c7:ee:de:5a:db:9c:ea:42:65:9e:f1:c9:a4:0b:34:8d:d1: e0:5a:69:41:b2:bb:e2:2f:f5:07:b2:09:b0:7d:18:78:e5:0b: 49:4d:f9:f1:9c:92:7d:ef:c4:c0:c8:41:4b:ae:b6:35:b0:20: 61:e4:dc:b6:d9:7a:0e:45:27:42:12:ec:13:98:17:64:25:b4: 70:a5:45:6c:17:c8:33:da:71:08:7d:cc:e2:58:ad:5d:d7:8b: 84:e8:3e:d1:c5:07:ed:cb:46:ba:33:25:89:f3:97:cc:a0:06: ee:45:3e:99:16:8f:d3:e0:e0:24:12:f6:ae:b0:50:f9:d6:55: c0:a9:20:7f:c3:a4:c4:6d:0e:ce:8b:3a:47:85:8c:dc:58:81: 09:8f:fa:09 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTMwMDFaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEVBMDQ0Q0RGMzY2NUI2 QTczNDNCRUI2Qjc0RkI2NkI3NDkyMjcxQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL9FPIhuVgYW4pBXx8kTh2yGcvHPDV6mYMadIxFIkjQPTSMrLd gywuWe+fO1O2M/BJzwS+GbI5oW56ZPrz2fcIdfWWDWynvleEWQpWz9oFWYUMTjsD Z7q0X3mtaQW0YxQHE/WT84xOr3LdBsqy9OE6Vf1lDD1j8ZlYVNFAPVNgnt8OWCif vwXGgOdOIbyEm0TNri1/MXbxU/sko1CSPC3Ij0vloDLg0zrA6hDc1RU8FaeY5Agr ne+Z15avE/Ho156WODMMlyLE/JzC7tYZhnDCeAIcJ1YXgHgLdF3kWz0558kPNWtE 397aNJcskAaGaMmgPnkwSy6NLFwBgPi37ywdAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU6gRM3zZltqc0O+trdPtmt0kicaAwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi82Z1JNM3pabHRxYzBPLXRyZFB0bXQwa2ljYUEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQE23oAMA0GCSqGSIb3DQEBCwUAA4IBAQB5dk8MVPraYGsSmjZVfPHG ievx1/ve+TQ9Ar7pPyyl/Qay6TsWWzkB57igMTsiUhYGgBqATJkaVmF+mEUUR1H/ m9SbsW5nBiSIWg7SDRYDu3NS4NUE5OwrkIDFQkXWF9vWh6LTYSUhzReiKvzVx+7e Wtuc6kJlnvHJpAs0jdHgWmlBsrviL/UHsgmwfRh45QtJTfnxnJJ978TAyEFLrrY1 sCBh5Ny22XoORSdCEuwTmBdkJbRwpUVsF8gz2nEIfcziWK1d14uE6D7RxQfty0a6 MyWJ85fMoAbuRT6ZFo/T4OAkEvausFD51lXAqSB/w6TEbQ7OizpHhYzcWIEJj/oJ -----END CERTIFICATE-----Generated at Wed Nov 5 17:25:14 2025 by rpki-client