$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/y3WricNVG5X9R2pWH0qOTYGhDEc.roa File: y3WricNVG5X9R2pWH0qOTYGhDEc.roa (raw, json) Hash identifier: kN80uQUuemd2/xxFZF72dJ9b0byseQ94kARv/kNXuu4= Subject key identifier: CB:75:AB:89:C3:55:1B:95:FD:47:6A:56:1F:4A:8E:4D:81:A1:0C:47 Certificate issuer: /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063 Certificate serial: 17 Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/y3WricNVG5X9R2pWH0qOTYGhDEc.roa Signing time: Wed 07 May 2025 06:22:32 +0000 ROA not before: Wed 07 May 2025 06:22:32 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131960 IP address blocks: 103.198.160.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063 Validity Not Before: May 7 06:22:32 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=CB75AB89C3551B95FD476A561F4A8E4D81A10C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:8e:59:9c:94:3e:72:1d:68:05:3f:d4:ba: 2d:30:98:78:9d:be:32:02:b9:31:90:86:58:2a:7d: b4:7a:b1:db:41:61:82:69:65:2f:e5:ce:05:58:a6: e4:ca:4c:61:48:35:55:99:ba:e5:3c:b4:0a:fd:99: 68:8d:f7:29:b1:9a:ae:00:04:56:c7:90:87:b3:4c: 0f:cb:b8:e1:a2:6f:05:59:f4:88:30:fc:6c:bb:81: 20:8d:14:38:95:ca:1b:a5:78:3f:b4:8f:1d:b4:73: d8:f2:b0:1e:0c:ec:da:f8:31:75:5d:72:77:a6:5f: 7c:dd:79:02:2d:d4:b0:3e:ed:45:4e:de:00:04:a4: e3:2e:90:da:60:ce:4c:56:e9:d6:e8:dd:13:ef:01: 35:24:45:94:06:e2:ae:f3:92:7d:96:15:7d:95:ed: 13:92:69:09:68:3f:3c:43:dd:5c:ab:b8:9e:5f:ff: d9:b3:90:89:ef:a4:1a:9f:74:f0:42:6e:d4:a9:ab: 70:d8:3b:e5:c9:ce:01:35:46:c6:23:05:e9:e8:fd: 06:ed:89:e9:1e:80:25:cc:c3:e7:bf:61:aa:97:89: 65:51:77:78:df:9a:c2:0b:6a:ea:06:25:36:a3:1e: c1:4e:31:4a:3d:82:64:96:dd:97:93:4b:5f:84:a2: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:75:AB:89:C3:55:1B:95:FD:47:6A:56:1F:4A:8E:4D:81:A1:0C:47 X509v3 Authority Key Identifier: keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/y3WricNVG5X9R2pWH0qOTYGhDEc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.160.0/22 Signature Algorithm: sha256WithRSAEncryption 33:aa:e4:be:c2:45:d8:24:fe:ee:c9:2f:91:8c:83:99:71:86: 3f:eb:82:11:f9:fe:96:a6:d7:57:c9:5e:ed:ba:f5:88:3a:33: cf:17:25:28:4b:f8:11:3d:a0:49:40:6c:1c:cf:f2:d0:04:bb: 7c:21:21:03:96:48:03:fd:a0:6a:51:79:9e:0e:27:a7:d5:82: fb:59:fa:2b:d9:db:1d:8f:35:64:f0:5a:84:bd:cc:bc:0e:1c: e6:8f:34:41:e2:83:64:94:99:23:ff:24:65:12:9e:1c:79:fc: 71:58:74:11:df:b5:91:08:76:1f:c9:56:e6:ff:f8:42:59:ca: 8c:63:bc:d5:de:f8:c8:d6:e3:19:37:fa:db:9e:64:6f:0f:37: 30:0a:cd:ad:9f:35:70:c6:53:fa:05:29:9c:bd:99:76:ac:b2: 82:1b:57:20:b1:17:0d:c6:7c:af:47:05:d0:7f:17:bf:bd:0e: 13:68:89:a3:f3:ee:47:18:27:57:b9:04:3f:52:4f:fb:41:89: 21:1a:52:ee:bd:5e:30:cf:f3:e7:47:72:fd:bc:d1:0b:7a:d3: 45:93:82:a2:14:c9:90:2f:be:07:e0:dc:36:84:02:64:9a:78: de:46:fc:e5:0c:d1:b5:70:37:41:98:29:8e:24:bc:b5:86:fc: b9:7c:ec:4b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDJB OUE2NTJCODdDOTY5NTdDOURBRkQ2RkZBRTcyNDQxODhFMDYzMB4XDTI1MDUwNzA2 MjIzMloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQ0I3NUFCODlDMzU1MUI5 NUZENDc2QTU2MUY0QThFNEQ4MUExMEM0NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKb9jlmclD5yHWgFP9S6LTCYeJ2+MgK5MZCGWCp9tHqx20Fhgmll L+XOBVim5MpMYUg1VZm65Ty0Cv2ZaI33KbGargAEVseQh7NMD8u44aJvBVn0iDD8 bLuBII0UOJXKG6V4P7SPHbRz2PKwHgzs2vgxdV1yd6ZffN15Ai3UsD7tRU7eAASk 4y6Q2mDOTFbp1ujdE+8BNSRFlAbirvOSfZYVfZXtE5JpCWg/PEPdXKu4nl//2bOQ ie+kGp908EJu1KmrcNg75cnOATVGxiMF6ej9Bu2J6R6AJczD579hqpeJZVF3eN+a wgtq6gYlNqMewU4xSj2CZJbdl5NLX4Si3IECAwEAAaOCAigwggIkMB0GA1UdDgQW BBTLdauJw1Ublf1HalYfSo5NgaEMRzAfBgNVHSMEGDAWgBTQKpplK4fJaVfJ2v1v +uckQYjgYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMzQvMENxYVpTdUh5V2xYeWRyOWJfcm5KRUdJNEdNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMENxYVpTdUh5V2xYeWRyOWJfcm5K RUdJNEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTM0L3kzV3JpY05WRzVYOVIycFdIMHFPVFlHaERFYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnxqAwDQYJKoZIhvcNAQELBQADggEBADOq5L7CRdgk/u7JL5GMg5lx hj/rghH5/pam11fJXu269Yg6M88XJShL+BE9oElAbBzP8tAEu3whIQOWSAP9oGpR eZ4OJ6fVgvtZ+ivZ2x2PNWTwWoS9zLwOHOaPNEHig2SUmSP/JGUSnhx5/HFYdBHf tZEIdh/JVub/+EJZyoxjvNXe+MjW4xk3+tueZG8PNzAKza2fNXDGU/oFKZy9mXas soIbVyCxFw3GfK9HBdB/F7+9DhNoiaPz7kcYJ1e5BD9ST/tBiSEaUu69XjDP8+dH cv280Qt600WTgqIUyZAvvgfg3DaEAmSaeN5G/OUM0bVwN0GYKY4kvLWG/Ll87Es= -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:48 2025 by rpki-client