$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/HgYVRPtqMjsb5Oc1bnjIn-nAmZY.roa File: HgYVRPtqMjsb5Oc1bnjIn-nAmZY.roa (raw, json) Hash identifier: 3e/TfA8nV1RqG6eX0hzi2wCuaZbEo8on84FokTIR6rM= Subject key identifier: 1E:06:15:44:FB:6A:32:3B:1B:E4:E7:35:6E:78:C8:9F:E9:C0:99:96 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: EC Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/HgYVRPtqMjsb5Oc1bnjIn-nAmZY.roa Signing time: Thu 24 Jul 2025 01:58:21 +0000 ROA not before: Thu 24 Jul 2025 01:58:21 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.252.100.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:58:21 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=1E061544FB6A323B1BE4E7356E78C89FE9C09996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:52:8e:0b:d8:42:ab:8f:11:a4:9f:0a:6c:7f: 94:1d:43:a8:99:9b:df:d4:9a:3c:10:b1:fe:72:98: d1:7b:cd:9f:81:93:69:4c:cb:7e:9f:91:84:ed:c9: 71:a9:89:5d:86:e7:e9:8d:0c:94:bd:0a:1d:6c:d6: 7d:f9:08:86:18:53:70:97:52:fe:6d:4d:12:98:85: a1:64:3e:8d:2d:63:0a:c1:af:f2:ce:1f:97:e6:1f: ab:b8:2a:bd:dc:44:f4:6a:52:67:30:a3:b6:69:95: cc:a4:b7:85:03:6f:ab:0e:b6:86:9b:dd:f7:ba:2e: d1:a6:7b:96:51:46:ff:56:48:1f:e6:ea:47:27:c0: 2e:94:dc:4e:28:26:9b:dc:67:9f:16:b2:9a:9f:34: ca:88:0d:eb:d1:53:74:35:f6:5f:89:58:d0:19:06: e8:75:75:91:5b:38:99:ed:44:17:3e:3f:13:5f:75: 64:d9:65:56:07:bc:77:dc:3b:a0:89:ea:87:1e:dc: 29:72:6b:6a:68:28:3e:22:53:74:e7:13:0d:d1:ec: e0:6a:7e:0a:eb:ce:33:82:18:cd:7d:12:a2:63:cf: d2:56:98:6e:04:a8:59:5f:bc:00:ae:e7:03:bb:20: 48:14:90:dd:ca:bb:76:7f:3b:47:f4:d5:b7:88:3d: da:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:15:44:FB:6A:32:3B:1B:E4:E7:35:6E:78:C8:9F:E9:C0:99:96 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/HgYVRPtqMjsb5Oc1bnjIn-nAmZY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.252.100.0/23 Signature Algorithm: sha256WithRSAEncryption b7:96:91:88:a1:9d:d4:f0:28:f7:b4:9b:eb:58:49:43:4f:8e: ea:c5:12:65:5b:72:5a:4a:ea:33:c0:9e:79:ae:2a:39:c5:e8: 63:07:a2:6f:fd:c0:c1:e4:a1:cc:54:57:48:bd:81:c2:cf:62: f3:d0:82:b0:40:62:71:70:1b:16:50:8b:23:8c:03:ee:5a:ad: 79:d6:09:2b:9d:8a:f2:c0:78:d5:51:4b:61:90:49:91:26:aa: 7a:e6:e4:91:fb:16:f8:64:2a:81:f7:cf:74:16:bb:d7:6c:a2: b7:7b:1d:f2:0a:55:b1:fd:6a:51:93:30:3b:2b:1d:db:af:6a: f5:10:28:3c:c5:93:0d:f8:e3:1a:ed:96:a3:13:c2:15:3a:d3: 65:f4:bc:63:1b:4e:98:44:78:3b:e5:b6:41:65:72:39:44:8a: ae:70:10:70:0f:a9:14:64:c8:c3:16:75:0d:d9:30:93:96:84: 9f:63:89:9e:8f:fd:bf:52:22:8d:6b:21:e3:91:dd:d4:1e:0e: 9a:cd:af:48:95:09:0b:1e:b6:c3:78:32:1e:37:fb:3c:41:bf: 10:da:d9:b4:1a:cf:b0:c2:3d:ed:89:d7:11:eb:2e:6f:22:3c: 3f:7c:f9:c8:ca:06:9e:6f:58:f0:9f:e9:fd:2c:41:4b:2d:d1: 9a:34:88:80 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTU4MjFaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDFFMDYxNTQ0RkI2QTMy M0IxQkU0RTczNTZFNzhDODlGRTlDMDk5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7Uo4L2EKrjxGknwpsf5QdQ6iZm9/UmjwQsf5ymNF7zZ+Bk2lM y36fkYTtyXGpiV2G5+mNDJS9Ch1s1n35CIYYU3CXUv5tTRKYhaFkPo0tYwrBr/LO H5fmH6u4Kr3cRPRqUmcwo7Zplcykt4UDb6sOtoab3fe6LtGme5ZRRv9WSB/m6kcn wC6U3E4oJpvcZ58WspqfNMqIDevRU3Q19l+JWNAZBuh1dZFbOJntRBc+PxNfdWTZ ZVYHvHfcO6CJ6oce3Clya2poKD4iU3TnEw3R7OBqfgrrzjOCGM19EqJjz9JWmG4E qFlfvACu5wO7IEgUkN3Ku3Z/O0f01beIPdoBAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUHgYVRPtqMjsb5Oc1bnjIn+nAmZYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9IZ1lWUlB0cU1qc2I1T2MxYm5qSW4tbkFtWlku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB0vxkMA0GCSqGSIb3DQEBCwUAA4IBAQC3lpGIoZ3U8Cj3tJvrWElD T47qxRJlW3JaSuozwJ55rio5xehjB6Jv/cDB5KHMVFdIvYHCz2Lz0IKwQGJxcBsW UIsjjAPuWq151gkrnYrywHjVUUthkEmRJqp65uSR+xb4ZCqB9890FrvXbKK3ex3y ClWx/WpRkzA7Kx3br2r1ECg8xZMN+OMa7ZajE8IVOtNl9LxjG06YRHg75bZBZXI5 RIqucBBwD6kUZMjDFnUN2TCTloSfY4mej/2/UiKNayHjkd3UHg6aza9IlQkLHrbD eDIeN/s8Qb8Q2tm0Gs+wwj3tidcR6y5vIjw/fPnIygaeb1jwn+n9LEFLLdGaNIiA -----END CERTIFICATE-----Generated at Wed Nov 5 19:51:37 2025 by rpki-client