$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/MCXLyYQGaaCi2WIXA9SEzXd3aF0.roa File: MCXLyYQGaaCi2WIXA9SEzXd3aF0.roa (raw, json) Hash identifier: TSrW56KTu4XpfFvG3k6yAT44eA0izd5/TSbEkHSCYs8= Subject key identifier: 30:25:CB:C9:84:06:69:A0:A2:D9:62:17:03:D4:84:CD:77:77:68:5D Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0121 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/MCXLyYQGaaCi2WIXA9SEzXd3aF0.roa Signing time: Thu 24 Jul 2025 02:22:08 +0000 ROA not before: Thu 24 Jul 2025 02:22:08 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.168.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:22:08 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=3025CBC9840669A0A2D9621703D484CD7777685D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:c7:45:d9:d0:4b:88:21:2f:5f:64:11:f2: 15:b2:10:5d:e0:9c:88:17:a4:9a:d3:39:9d:a3:92: 21:72:8c:ed:e5:90:d5:31:6f:a7:9a:ff:f6:7c:8e: 45:49:0e:78:5a:a4:f7:1e:19:b9:aa:98:81:b2:98: 7e:c0:bb:f2:94:fd:e9:df:31:ec:c6:5a:4c:c7:81: 8a:d0:ad:0c:5a:d4:7d:ac:c9:e1:13:1b:8a:5c:56: 69:de:18:ba:6c:31:a6:66:38:d5:85:e0:98:93:fa: e2:fc:92:b5:1c:6e:d0:c6:28:b4:b5:96:52:0f:8a: 11:e4:20:b7:a5:aa:7c:c7:45:97:d6:41:f0:ba:ba: ec:32:71:57:6a:62:d7:55:01:3c:6d:c6:19:4b:33: ba:7d:11:fa:20:bc:9f:99:81:31:2b:f1:3c:3e:56: bf:b2:16:85:34:c0:10:3d:79:d8:c4:87:cb:ce:3a: 4b:ed:f3:a1:12:97:a3:bc:4b:eb:ba:6b:7e:f1:be: 8c:71:c3:d6:f3:42:e4:91:49:5d:d0:72:b8:c5:10: 77:c6:e4:6d:9e:07:6a:e3:6e:9b:d6:41:0a:a9:0c: 1f:3f:b4:67:16:1f:90:8b:ce:d0:04:91:8e:37:19: 4f:3d:40:16:d4:65:19:3d:86:2a:e8:70:db:58:5a: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:25:CB:C9:84:06:69:A0:A2:D9:62:17:03:D4:84:CD:77:77:68:5D X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/MCXLyYQGaaCi2WIXA9SEzXd3aF0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.168.0.0/17 Signature Algorithm: sha256WithRSAEncryption 88:c5:03:c3:cc:20:f4:34:44:40:08:18:14:9f:0d:56:a8:b1: 80:b3:14:92:f5:a8:f2:32:5f:83:d4:84:ab:ab:5a:18:2e:e9: 23:b4:0a:e5:61:86:44:e3:a2:84:ff:6b:a9:cf:7d:99:1d:ba: 75:69:99:a7:48:2e:86:df:df:b9:5f:5d:1b:7a:a3:08:f7:8a: a4:d6:8a:45:ff:9d:1a:0c:bd:e9:02:57:4c:d1:c6:7b:38:ca: 3e:99:eb:35:79:44:5c:c8:51:87:77:c2:89:31:1b:f3:0d:20: b6:af:ce:10:ae:08:f2:46:63:d7:39:27:dd:f9:71:46:20:7e: b9:36:77:68:15:89:53:4a:e2:0c:c6:d5:af:de:f6:57:c0:04: c7:bf:bd:4c:c7:6a:04:cd:3f:8b:79:7c:07:9b:f0:50:f7:0f: ad:bf:2b:ff:45:46:04:e3:be:81:6f:f0:57:db:31:7d:5f:35: e6:fa:0f:43:37:b5:19:d3:de:ba:71:bf:81:f4:93:cc:c7:21: f8:64:3a:be:ce:43:bf:df:d6:45:46:77:21:94:93:20:d0:bc: b6:06:98:34:7f:cf:07:5d:2e:f8:60:90:51:81:8d:b5:b8:ee: 2e:41:6c:60:8d:19:86:a6:05:46:0c:c1:51:0d:d6:f9:14:c1: 11:97:c1:28 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICASEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjIyMDhaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDMwMjVDQkM5ODQwNjY5 QTBBMkQ5NjIxNzAzRDQ4NENENzc3NzY4NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPS8dF2dBLiCEvX2QR8hWyEF3gnIgXpJrTOZ2jkiFyjO3lkNUx b6ea//Z8jkVJDnhapPceGbmqmIGymH7Au/KU/enfMezGWkzHgYrQrQxa1H2syeET G4pcVmneGLpsMaZmONWF4JiT+uL8krUcbtDGKLS1llIPihHkILelqnzHRZfWQfC6 uuwycVdqYtdVATxtxhlLM7p9EfogvJ+ZgTEr8Tw+Vr+yFoU0wBA9edjEh8vOOkvt 86ESl6O8S+u6a37xvoxxw9bzQuSRSV3QcrjFEHfG5G2eB2rjbpvWQQqpDB8/tGcW H5CLztAEkY43GU89QBbUZRk9hirocNtYWh2xAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUMCXLyYQGaaCi2WIXA9SEzXd3aF0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9NQ1hMeVlRR2FhQ2kyV0lYQTlTRXpYZDNhRjAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQH0qgAMA0GCSqGSIb3DQEBCwUAA4IBAQCIxQPDzCD0NERACBgUnw1W qLGAsxSS9ajyMl+D1ISrq1oYLukjtArlYYZE46KE/2upz32ZHbp1aZmnSC6G39+5 X10beqMI94qk1opF/50aDL3pAldM0cZ7OMo+mes1eURcyFGHd8KJMRvzDSC2r84Q rgjyRmPXOSfd+XFGIH65NndoFYlTSuIMxtWv3vZXwATHv71Mx2oEzT+LeXwHm/BQ 9w+tvyv/RUYE476Bb/BX2zF9XzXm+g9DN7UZ0966cb+B9JPMxyH4ZDq+zkO/39ZF RnchlJMg0Ly2Bpg0f88HXS74YJBRgY21uO4uQWxgjRmGpgVGDMFRDdb5FMERl8Eo -----END CERTIFICATE-----Generated at Wed Nov 5 21:18:43 2025 by rpki-client