$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/AxOGLRIoNsBJVyBPUGoI5VoiCE0.roa File: AxOGLRIoNsBJVyBPUGoI5VoiCE0.roa (raw, json) Hash identifier: RFHGvuzfE8rODkB/a9yX7DKZwvp9o4P1S1KwaG8fRaI= Subject key identifier: 03:13:86:2D:12:28:36:C0:49:57:20:4F:50:6A:08:E5:5A:22:08:4D Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0104 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/AxOGLRIoNsBJVyBPUGoI5VoiCE0.roa Signing time: Thu 24 Jul 2025 02:05:32 +0000 ROA not before: Thu 24 Jul 2025 02:05:32 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 211.133.248.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:05:32 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=0313862D122836C04957204F506A08E55A22084D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:ac:e9:86:ee:48:7f:3b:58:b0:4f:ef:c5: d3:ea:48:c8:26:18:70:7d:bf:79:6f:e9:45:6c:50: 22:3d:f5:bc:76:16:2a:14:2c:3c:7d:02:da:1f:a4: dd:20:d0:06:e0:07:54:53:f4:e6:e2:75:52:84:50: 9d:5d:82:5c:e0:59:46:9d:3a:22:eb:98:40:fa:3c: de:05:33:9e:d8:45:82:20:97:9c:c7:57:67:78:1e: d2:a4:df:be:8c:24:06:95:bd:df:fd:de:53:68:9e: 4c:36:4a:9f:81:2b:73:2e:af:e8:94:2f:03:16:e9: 7e:3e:7d:6e:b8:31:a2:8c:e3:88:fa:d3:3e:4e:9b: d0:a4:2c:1e:a3:52:20:85:b1:ea:06:88:94:da:4c: 4b:50:31:ba:0b:cf:79:8c:b6:fc:ba:07:a8:2a:04: 5e:9c:1e:1f:7e:35:f2:f5:10:34:df:7b:3b:64:f2: 52:24:5d:be:73:1f:d3:34:31:32:c0:60:95:2a:04: 01:a7:2a:97:48:be:8e:14:00:7d:b3:e6:81:7c:d8: b2:6f:21:3e:07:c0:13:90:fd:2c:f1:ce:94:04:c0: eb:cd:38:e4:e8:f3:a2:e8:3d:62:fd:7a:bf:93:26: 3f:89:c1:25:3f:e4:d7:c9:98:b8:dd:37:41:16:1f: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:13:86:2D:12:28:36:C0:49:57:20:4F:50:6A:08:E5:5A:22:08:4D X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/AxOGLRIoNsBJVyBPUGoI5VoiCE0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.133.248.0/22 Signature Algorithm: sha256WithRSAEncryption cd:a1:cb:c7:0f:d6:9e:3b:99:0d:e5:7c:56:dc:8a:4a:e1:45: cd:99:63:f2:f1:3d:d0:eb:74:9d:54:0c:98:42:3f:ba:cf:6e: 42:02:26:df:ce:24:e7:79:d3:cb:6f:06:c5:4d:e7:d7:12:0e: c4:4f:fc:28:f8:22:01:59:60:e7:f0:f1:2f:0d:2b:7c:b4:28: 11:be:73:01:9a:af:07:03:fc:32:55:1a:f9:a0:d0:64:59:16: 03:05:75:7a:a5:96:cf:27:de:1f:f1:f8:b9:f2:c7:2d:0a:6b: 65:ad:5d:04:ee:dc:2d:ba:4b:d4:97:fc:6a:15:8a:32:cb:26: fd:49:a4:af:97:9d:af:8e:e7:67:87:be:7e:37:41:72:93:8f: 4b:98:fe:ac:8e:7b:76:8a:11:68:c8:cc:05:26:45:13:37:74: 7b:5f:1c:f9:39:c3:bf:e5:93:5c:0e:9e:8e:dd:6b:b0:02:08: d0:7f:d2:65:67:ff:54:2e:c8:74:0f:b5:aa:73:cb:c6:fe:ef: 6b:c8:46:3a:9e:3a:17:b4:cc:72:d6:f1:b2:9e:3a:8c:61:43: b2:48:f8:86:e8:19:3f:3b:7f:e0:8b:96:a3:54:56:8a:cf:56: b6:46:fb:04:8e:72:1d:92:f3:26:24:64:47:12:07:e0:fb:a7: 23:3c:d1:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjA1MzJaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDAzMTM4NjJEMTIyODM2 QzA0OTU3MjA0RjUwNkEwOEU1NUEyMjA4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdKKzphu5IfztYsE/vxdPqSMgmGHB9v3lv6UVsUCI99bx2FioU LDx9AtofpN0g0AbgB1RT9ObidVKEUJ1dglzgWUadOiLrmED6PN4FM57YRYIgl5zH V2d4HtKk376MJAaVvd/93lNonkw2Sp+BK3Mur+iULwMW6X4+fW64MaKM44j60z5O m9CkLB6jUiCFseoGiJTaTEtQMboLz3mMtvy6B6gqBF6cHh9+NfL1EDTfeztk8lIk Xb5zH9M0MTLAYJUqBAGnKpdIvo4UAH2z5oF82LJvIT4HwBOQ/SzxzpQEwOvNOOTo 86LoPWL9er+TJj+JwSU/5NfJmLjdN0EWH6JDAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUAxOGLRIoNsBJVyBPUGoI5VoiCE0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9BeE9HTFJJb05zQkpWeUJQVUdvSTVWb2lDRTAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC04X4MA0GCSqGSIb3DQEBCwUAA4IBAQDNocvHD9aeO5kN5XxW3IpK 4UXNmWPy8T3Q63SdVAyYQj+6z25CAibfziTnedPLbwbFTefXEg7ET/wo+CIBWWDn 8PEvDSt8tCgRvnMBmq8HA/wyVRr5oNBkWRYDBXV6pZbPJ94f8fi58sctCmtlrV0E 7twtukvUl/xqFYoyyyb9SaSvl52vjudnh75+N0Fyk49LmP6sjnt2ihFoyMwFJkUT N3R7Xxz5OcO/5ZNcDp6O3WuwAgjQf9JlZ/9ULsh0D7Wqc8vG/u9ryEY6njoXtMxy 1vGynjqMYUOySPiG6Bk/O3/gi5ajVFaKz1a2RvsEjnIdkvMmJGRHEgfg+6cjPNF5 -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:21 2025 by rpki-client