$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/2aJ1CN6HuZRapLwHQFAJsaaPpbU.roa File: 2aJ1CN6HuZRapLwHQFAJsaaPpbU.roa (raw, json) Hash identifier: HuMCP4TV9GfFoId/btn0mrCAhiegBDjRFBaO9fI+jwQ= Subject key identifier: D9:A2:75:08:DE:87:B9:94:5A:A4:BC:07:40:50:09:B1:A6:8F:A5:B5 Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Certificate serial: 5F Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/2aJ1CN6HuZRapLwHQFAJsaaPpbU.roa Signing time: Fri 01 Aug 2025 01:34:31 +0000 ROA not before: Fri 01 Aug 2025 01:34:31 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 23637 IP address blocks: 202.226.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Validity Not Before: Aug 1 01:34:31 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=D9A27508DE87B9945AA4BC07405009B1A68FA5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ff:8a:44:52:85:b6:4e:c6:15:fe:88:b9:f0: a0:16:fc:1f:d3:fe:fb:aa:aa:5b:b3:f6:c6:0f:34: d2:49:11:fd:3d:4a:0c:99:b9:3e:f2:0c:cb:09:b3: 49:16:fe:cc:4f:d6:da:49:12:21:03:ac:72:94:fb: 61:96:f2:f1:f9:e3:88:d9:d4:8a:6b:ab:ab:2d:62: 42:85:54:e2:78:9f:99:bf:1e:fe:d1:76:2b:7b:e4: d1:97:4c:57:1f:40:d3:c9:c9:e1:ac:9c:3b:46:a7: 1f:b5:34:a2:56:62:a7:82:44:57:b0:c4:c6:bd:63: a5:7e:0b:96:ba:e4:cf:e9:d7:e1:f6:61:05:a9:6e: 80:a6:4f:92:ae:8a:9d:3f:3d:8b:15:77:6c:76:95: 90:26:da:83:07:eb:1b:34:23:44:b2:82:80:2f:bf: b5:79:bf:63:41:18:37:8a:4d:4c:01:d5:49:a0:26: 32:8d:d9:d6:73:8e:93:9c:1f:fb:1f:e0:52:85:c4: 46:39:4a:6f:29:ad:40:81:63:88:2c:15:db:41:d2: 09:b8:18:a5:af:27:35:18:62:03:19:02:81:b4:63: 5e:82:38:cd:b8:e3:b9:80:ab:46:e8:d4:a3:16:64: 55:53:01:61:6a:3d:32:6e:e4:40:0c:d9:3c:0b:af: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A2:75:08:DE:87:B9:94:5A:A4:BC:07:40:50:09:B1:A6:8F:A5:B5 X509v3 Authority Key Identifier: keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/2aJ1CN6HuZRapLwHQFAJsaaPpbU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.226.52.0/22 Signature Algorithm: sha256WithRSAEncryption 72:00:9e:2d:e3:88:8a:ce:e3:f2:5a:85:69:24:1e:5b:7e:36: 90:cf:9b:72:f5:d0:97:8f:85:e8:6c:28:6f:e9:71:4d:eb:fa: 4d:03:48:a6:fa:83:dd:44:39:06:66:6a:69:06:89:71:94:bf: ad:ed:7d:c7:c2:5e:be:a9:b3:66:92:ea:86:2f:c2:12:98:01: 58:d3:a6:9e:04:09:d5:9a:7f:0d:aa:3d:07:0f:68:7d:01:eb: b4:a8:b5:3e:42:eb:e2:07:23:af:f2:81:b6:8d:9e:a6:77:18: 87:34:c9:c4:e6:c7:ee:87:8e:6c:80:11:9b:8e:0b:23:77:1a: 33:57:11:7e:b0:00:95:cb:50:87:3e:de:c4:da:08:5d:62:5d: 73:53:60:bf:87:47:fa:3b:65:8d:10:8b:a6:b9:53:78:92:74: ab:74:cd:92:7a:de:af:4b:57:7d:81:86:f6:5a:66:1e:cf:4f: 17:32:41:cc:74:1b:41:08:39:9a:5d:db:1f:90:88:79:80:da: a0:f8:a4:ee:9c:92:cb:e0:f5:20:36:11:a8:d1:cd:9c:50:e5: d1:01:06:90:27:11:f2:e2:40:79:fa:97:d7:22:9d:d5:83:fa: c7:c2:f2:df:87:5c:60:6a:1c:31:b4:9c:00:af:f1:93:38:c3: 83:1f:d6:48 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI1MDgwMTAx MzQzMVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoRDlBMjc1MDhERTg3Qjk5 NDVBQTRCQzA3NDA1MDA5QjFBNjhGQTVCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPH/ikRShbZOxhX+iLnwoBb8H9P++6qqW7P2xg800kkR/T1KDJm5 PvIMywmzSRb+zE/W2kkSIQOscpT7YZby8fnjiNnUimurqy1iQoVU4nifmb8e/tF2 K3vk0ZdMVx9A08nJ4aycO0anH7U0olZip4JEV7DExr1jpX4Llrrkz+nX4fZhBalu gKZPkq6KnT89ixV3bHaVkCbagwfrGzQjRLKCgC+/tXm/Y0EYN4pNTAHVSaAmMo3Z 1nOOk5wf+x/gUoXERjlKbymtQIFjiCwV20HSCbgYpa8nNRhiAxkCgbRjXoI4zbjj uYCrRujUoxZkVVMBYWo9Mm7kQAzZPAuv3K0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBTZonUI3oe5lFqkvAdAUAmxpo+ltTAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIxMDQyLzJhSjFDTjZIdVpSYXBMd0hRRkFKc2FhUHBiVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALK4jQwDQYJKoZIhvcNAQELBQADggEBAHIAni3jiIrO4/JahWkkHlt+ NpDPm3L10JePhehsKG/pcU3r+k0DSKb6g91EOQZmamkGiXGUv63tfcfCXr6ps2aS 6oYvwhKYAVjTpp4ECdWafw2qPQcPaH0B67SotT5C6+IHI6/ygbaNnqZ3GIc0ycTm x+6HjmyAEZuOCyN3GjNXEX6wAJXLUIc+3sTaCF1iXXNTYL+HR/o7ZY0Qi6a5U3iS dKt0zZJ63q9LV32BhvZaZh7PTxcyQcx0G0EIOZpd2x+QiHmA2qD4pO6cksvg9SA2 EajRzZxQ5dEBBpAnEfLiQHn6l9cindWD+sfC8t+HXGBqHDG0nACv8ZM4w4Mf1kg= -----END CERTIFICATE-----Generated at Wed Nov 5 23:08:20 2025 by rpki-client