$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/rNiL0CikRoMZGyohDi1nsXz4gtY.roa File: rNiL0CikRoMZGyohDi1nsXz4gtY.roa (raw, json) Hash identifier: tlB5fKKAvoRKajBBzQslsKlDq1rb6rQTkMPm13jtJhs= Subject key identifier: AC:D8:8B:D0:28:A4:46:83:19:1B:2A:21:0E:2D:67:B1:7C:F8:82:D6 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0108 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/rNiL0CikRoMZGyohDi1nsXz4gtY.roa Signing time: Thu 24 Jul 2025 02:12:57 +0000 ROA not before: Thu 24 Jul 2025 02:12:57 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 61.215.208.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:12:57 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=ACD88BD028A44683191B2A210E2D67B17CF882D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:f1:11:e9:ed:c0:ab:0f:84:c2:7e:39:8e: 7d:fc:98:9e:5c:ad:a0:53:ce:a1:e7:3f:b2:89:ed: 1c:7c:22:18:01:7d:f6:13:f2:64:4d:98:ad:5e:63: 6f:97:57:97:2f:2e:75:94:35:b0:8a:ee:12:9f:48: 20:e4:43:2a:aa:b4:7f:4b:ef:47:09:8f:8b:5b:97: 51:e6:76:21:bb:02:57:fd:01:88:97:a2:06:45:da: ed:ab:01:ab:64:5d:d0:59:68:c7:85:e8:99:99:6e: 9a:16:a4:f3:ba:d8:91:ab:07:b7:e9:83:00:37:c1: ec:cc:9c:00:d1:e9:7d:71:29:3d:07:0d:6f:9b:3a: 2a:e1:f1:08:1e:85:b0:c1:c8:cf:97:67:8e:38:b1: b8:61:ab:5f:25:c0:ad:2f:be:d7:65:17:87:91:bf: e6:a5:59:54:c5:c9:9a:84:d2:86:5c:4c:82:c3:0e: c7:9a:8a:da:3a:a3:91:65:b8:03:8a:b6:ba:ec:3f: 7c:7c:fd:12:c2:17:b2:f1:a4:f8:fd:6d:06:9e:79: d3:56:a8:e5:d2:3e:f7:e1:c4:a3:02:fc:cb:b9:2a: 0c:75:c6:42:82:c0:ab:22:82:b2:79:5b:75:37:34: 2f:b5:39:0d:4a:e1:c1:b3:9e:d7:42:ec:00:74:15: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D8:8B:D0:28:A4:46:83:19:1B:2A:21:0E:2D:67:B1:7C:F8:82:D6 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/rNiL0CikRoMZGyohDi1nsXz4gtY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.215.208.0/20 Signature Algorithm: sha256WithRSAEncryption 73:0c:0e:d6:a5:f8:4c:20:60:14:ca:d6:a5:92:d5:34:f1:78: 90:bb:d2:f0:e8:e7:50:4a:4e:29:d9:e5:2a:fd:2c:22:d6:a1: ee:e9:ec:5b:81:64:44:5d:b7:d0:9b:ab:40:e1:30:a3:cb:93: db:4a:00:72:c0:b6:52:fb:fa:1d:18:e3:06:d3:82:a9:81:ea: fc:2f:b6:5d:32:21:1a:a8:ce:9d:27:9e:ba:eb:50:05:ff:db: 4a:cc:cb:59:37:26:58:0b:5c:a0:c7:68:f3:11:d7:7a:85:80: 7c:29:9f:95:ad:e4:10:91:77:3a:d7:db:06:a2:10:12:32:76: b3:c7:35:68:5a:b5:a9:eb:e9:40:09:9e:df:cb:3b:0d:9c:d5: 86:3f:91:2b:b0:53:49:7c:9f:76:53:ab:dc:aa:7f:df:f5:88: 79:8b:60:44:c4:e9:07:ff:30:ad:3c:e8:d5:d2:6a:15:4d:ac: 6e:95:5b:23:2c:95:29:bb:2f:e8:a1:03:84:88:ef:11:13:64: e7:f4:ff:b3:48:92:a5:65:2c:77:97:46:9b:de:54:5b:63:88: 0a:de:05:61:e3:27:19:fe:70:8b:b8:85:a2:e6:92:4a:cd:9b: a8:45:41:1a:3c:fb:e8:51:b5:2c:50:43:32:48:77:bf:cd:20: 25:58:80:29 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjEyNTdaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEFDRDg4QkQwMjhBNDQ2 ODMxOTFCMkEyMTBFMkQ2N0IxN0NGODgyRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1I/ER6e3Aqw+Ewn45jn38mJ5craBTzqHnP7KJ7Rx8IhgBffYT 8mRNmK1eY2+XV5cvLnWUNbCK7hKfSCDkQyqqtH9L70cJj4tbl1HmdiG7Alf9AYiX ogZF2u2rAatkXdBZaMeF6JmZbpoWpPO62JGrB7fpgwA3wezMnADR6X1xKT0HDW+b Oirh8QgehbDByM+XZ444sbhhq18lwK0vvtdlF4eRv+alWVTFyZqE0oZcTILDDsea ito6o5FluAOKtrrsP3x8/RLCF7LxpPj9bQaeedNWqOXSPvfhxKMC/Mu5Kgx1xkKC wKsigrJ5W3U3NC+1OQ1K4cGzntdC7AB0FUhHAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUrNiL0CikRoMZGyohDi1nsXz4gtYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9yTmlMMENpa1JvTVpHeW9oRGkxbnNYejRndFku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEPdfQMA0GCSqGSIb3DQEBCwUAA4IBAQBzDA7WpfhMIGAUytalktU0 8XiQu9Lw6OdQSk4p2eUq/Swi1qHu6exbgWREXbfQm6tA4TCjy5PbSgBywLZS+/od GOMG04Kpger8L7ZdMiEaqM6dJ56661AF/9tKzMtZNyZYC1ygx2jzEdd6hYB8KZ+V reQQkXc619sGohASMnazxzVoWrWp6+lACZ7fyzsNnNWGP5ErsFNJfJ92U6vcqn/f 9Yh5i2BExOkH/zCtPOjV0moVTaxulVsjLJUpuy/ooQOEiO8RE2Tn9P+zSJKlZSx3 l0ab3lRbY4gK3gVh4ycZ/nCLuIWi5pJKzZuoRUEaPPvoUbUsUEMySHe/zSAlWIAp -----END CERTIFICATE-----Generated at Wed Nov 5 19:54:45 2025 by rpki-client