$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/R57_okmPbqWaW1_Fx2lj5UD6iSk.roa File: R57_okmPbqWaW1_Fx2lj5UD6iSk.roa (raw, json) Hash identifier: Vr1XWuUKXoGxkD8GcH6HRoMJNeZNiVpNFaWu7vAmEbI= Subject key identifier: 47:9E:FF:A2:49:8F:6E:A5:9A:5B:5F:C5:C7:69:63:E5:40:FA:89:29 Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 3F Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/R57_okmPbqWaW1_Fx2lj5UD6iSk.roa Signing time: Thu 01 May 2025 01:33:01 +0000 ROA not before: Thu 01 May 2025 01:33:01 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 7672 IP address blocks: 110.232.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: May 1 01:33:01 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=479EFFA2498F6EA59A5B5FC5C76963E540FA8929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:6d:2e:27:f9:ad:dd:a6:6a:92:18:42:cb: 95:5b:ca:cd:61:01:86:53:64:40:a8:49:00:4a:98: 50:b6:3f:79:3c:55:f9:a2:ea:8a:c8:8a:68:99:e9: f4:d6:22:bc:11:59:3c:8a:46:1f:0e:24:cd:5d:b8: 7f:bb:4c:0a:64:98:6c:0a:a2:0c:8c:9f:f6:05:7c: 20:fb:c3:57:80:27:47:c7:4a:6e:0c:7f:3a:6e:9f: a7:d3:3d:3e:9c:a1:3a:9c:de:46:fc:5a:53:4e:da: 12:42:1a:e5:af:e4:25:f1:af:3a:a8:fb:f2:43:9c: bd:99:1c:71:67:f2:74:7c:09:f6:30:54:a6:52:a8: d5:bb:65:43:62:29:7f:8f:e7:ae:3e:d5:ec:3e:3a: 80:1b:c6:1b:b7:ac:79:74:34:1c:ff:a0:b4:24:21: c9:aa:5e:df:6d:d6:b2:8f:b2:e5:e0:19:74:f5:9c: c0:03:e2:f5:4c:10:80:01:93:10:35:f1:c8:5e:94: 82:23:8d:b2:4a:38:4e:80:ca:fb:24:4a:e6:03:31: b7:fb:52:89:fc:8c:1f:12:05:a3:2e:51:b7:83:0f: eb:cf:75:97:88:4e:ae:f1:14:48:81:9d:5b:32:aa: 9e:10:64:cb:3d:80:b8:94:e8:63:ec:b1:7b:71:9f: 66:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9E:FF:A2:49:8F:6E:A5:9A:5B:5F:C5:C7:69:63:E5:40:FA:89:29 X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/R57_okmPbqWaW1_Fx2lj5UD6iSk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.232.232.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:6a:02:06:f9:c0:9b:1c:c9:c1:17:17:c2:17:54:9e:78:31: f7:29:af:70:7d:15:25:07:63:c1:75:82:4f:15:be:05:85:f1: 6f:5b:0d:f0:79:c5:3d:57:a7:82:8f:19:77:ef:e1:31:59:b0: 13:80:fd:7b:74:53:53:d8:c9:e3:6a:fa:5e:9f:da:57:ed:b6: 9d:ca:2f:f3:6d:ca:f7:2c:20:08:e6:95:04:3e:e1:4d:70:42: 94:84:1d:4e:55:2b:01:73:7e:93:7f:55:3f:66:67:ce:f8:86: 98:26:3d:dd:e9:c3:bc:ed:4c:f1:13:15:88:d0:f3:d0:d2:2d: 75:4f:2e:72:10:b6:90:fa:3f:b4:eb:53:04:81:25:f9:35:12: 35:e8:eb:24:95:32:f4:46:0f:5d:f9:c4:95:91:48:9f:6f:bd: 9f:73:f8:89:05:e7:33:aa:5a:7e:44:8f:01:96:86:49:53:ef: b2:04:5b:da:c6:56:2f:bc:35:c0:f9:d5:02:42:f9:ac:4f:e3: c7:02:4f:b7:5b:76:90:0f:45:80:7a:bc:b4:56:f1:ef:a9:bb: 35:12:95:fc:ed:6c:23:58:06:c8:01:6c:4f:f9:87:91:b8:16: c2:60:77:83:f9:cb:bb:8c:c0:7c:21:b9:8c:d5:cc:50:4a:65: c9:de:dc:13 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI1MDUwMTAx MzMwMVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNDc5RUZGQTI0OThGNkVB NTlBNUI1RkM1Qzc2OTYzRTU0MEZBODkyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM0sbS4n+a3dpmqSGELLlVvKzWEBhlNkQKhJAEqYULY/eTxV+aLq isiKaJnp9NYivBFZPIpGHw4kzV24f7tMCmSYbAqiDIyf9gV8IPvDV4AnR8dKbgx/ Om6fp9M9PpyhOpzeRvxaU07aEkIa5a/kJfGvOqj78kOcvZkccWfydHwJ9jBUplKo 1btlQ2Ipf4/nrj7V7D46gBvGG7eseXQ0HP+gtCQhyape323Wso+y5eAZdPWcwAPi 9UwQgAGTEDXxyF6UgiONsko4ToDK+yRK5gMxt/tSifyMHxIFoy5Rt4MP6891l4hO rvEUSIGdWzKqnhBkyz2AuJToY+yxe3GfZuUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRHnv+iSY9upZpbX8XHaWPlQPqJKTAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIvUjU3X29rbVBicVdhVzFfRngybGo1VUQ2aVNrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAm7o6DANBgkqhkiG9w0BAQsFAAOCAQEATmoCBvnAmxzJwRcXwhdUnngx9ymv cH0VJQdjwXWCTxW+BYXxb1sN8HnFPVengo8Zd+/hMVmwE4D9e3RTU9jJ42r6Xp/a V+22ncov823K9ywgCOaVBD7hTXBClIQdTlUrAXN+k39VP2ZnzviGmCY93enDvO1M 8RMViNDz0NItdU8uchC2kPo/tOtTBIEl+TUSNejrJJUy9EYPXfnElZFIn2+9n3P4 iQXnM6pafkSPAZaGSVPvsgRb2sZWL7w1wPnVAkL5rE/jxwJPt1t2kA9FgHq8tFbx 76m7NRKV/O1sI1gGyAFsT/mHkbgWwmB3g/nLu4zAfCG5jNXMUEplyd7cEw== -----END CERTIFICATE-----Generated at Wed Nov 5 21:02:15 2025 by rpki-client