$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/RRpKgRbV9plR34_Xh3F1dSpoyVU.roa File: RRpKgRbV9plR34_Xh3F1dSpoyVU.roa (raw, json) Hash identifier: Y34qWV1m0G0YPETBbNvUzvKVy269wxN5LwR7k6dtwaA= Subject key identifier: 45:1A:4A:81:16:D5:F6:99:51:DF:8F:D7:87:71:75:75:2A:68:C9:55 Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 45 Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/RRpKgRbV9plR34_Xh3F1dSpoyVU.roa Signing time: Thu 01 May 2025 01:33:04 +0000 ROA not before: Thu 01 May 2025 01:33:04 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 7672 IP address blocks: 211.19.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: May 1 01:33:04 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=451A4A8116D5F69951DF8FD7877175752A68C955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:19:cf:2d:4e:75:f7:3c:a4:65:d1:5c:24: 78:bf:ff:3e:73:d8:cc:c8:08:57:c2:65:74:b6:8e: 8a:0d:9f:cd:8b:82:19:93:57:ba:3b:d5:38:1d:68: 52:39:07:50:b3:8f:46:01:a4:d0:4a:9c:6d:98:95: 1d:0b:09:93:55:dc:ea:24:a3:c8:c3:77:59:1f:fd: 65:cc:68:9e:90:58:12:c3:76:2b:a9:d0:80:d9:e2: e1:10:7e:a1:d2:8a:aa:f5:fd:4e:26:3f:28:78:2a: 5b:69:81:37:bf:59:62:aa:9a:0c:cc:32:03:f2:5c: de:6f:47:f5:0f:4a:dc:e4:44:e1:c0:43:3e:8b:63: 82:8c:b3:16:a0:f2:7a:da:d0:0e:2d:85:f0:02:b1: 52:cc:bc:e4:c6:d8:41:8d:1c:d3:c7:07:27:76:11: 12:cd:56:11:82:fb:10:94:63:4c:2b:62:40:cb:67: 1a:dc:bf:df:12:01:b9:a8:85:dd:68:10:90:e4:93: 10:a9:13:89:9c:8a:cc:1a:50:8a:4b:a9:cf:54:d0: dc:44:b9:1e:75:d7:aa:ac:22:eb:01:4d:36:29:b2: 9e:63:ba:ab:53:b4:1f:f0:f8:49:b2:6e:5f:14:da: cc:5f:1b:db:69:4a:33:94:7f:74:c8:1f:21:29:7f: 97:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1A:4A:81:16:D5:F6:99:51:DF:8F:D7:87:71:75:75:2A:68:C9:55 X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/RRpKgRbV9plR34_Xh3F1dSpoyVU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.19.192.0/22 Signature Algorithm: sha256WithRSAEncryption 04:af:b4:4f:8f:3d:2a:bc:37:73:82:03:d9:fc:f2:6a:24:45: 94:b1:f1:ce:0b:e9:ed:2a:42:79:09:60:4f:5d:e5:ac:ec:40: 73:97:96:64:1d:43:a5:47:22:cb:68:cc:82:ab:0c:4b:09:59: da:ef:ae:86:e4:8d:56:b9:41:a7:c3:8b:15:10:33:4d:f4:60: 61:8c:c3:a4:71:44:1c:60:05:8b:1b:ae:09:3d:ea:a7:fc:63: b4:bf:54:e1:f4:d0:19:09:8c:29:5c:f3:9b:f6:28:40:b3:a4: 2f:05:cf:be:21:dc:76:69:8b:6a:55:9f:be:ec:f6:cb:a3:1f: b5:a4:c4:5a:5d:9d:13:a0:85:58:d9:fc:f2:4c:6e:90:cd:27: 6c:ac:04:85:85:1d:62:a5:0f:bd:a4:42:f4:f0:2f:43:28:ca: c5:1e:ee:5c:13:ff:97:9d:4e:8c:39:9f:b8:b6:24:db:42:0f: 30:64:d8:f1:ad:45:d2:1e:f5:d9:98:34:36:f9:f3:2a:4d:fa: 72:2a:ff:3a:14:b4:bb:4c:63:46:58:c6:e3:a1:b2:8b:95:97: 7c:b2:28:7b:35:83:e1:a6:39:df:00:81:2e:4b:32:22:2b:ab: d3:0d:1d:ae:5d:74:45:59:a6:ec:00:40:6b:a6:04:eb:e2:84: 09:4e:33:f4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI1MDUwMTAx MzMwNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNDUxQTRBODExNkQ1RjY5 OTUxREY4RkQ3ODc3MTc1NzUyQTY4Qzk1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALwQGc8tTnX3PKRl0VwkeL//PnPYzMgIV8JldLaOig2fzYuCGZNX ujvVOB1oUjkHULOPRgGk0EqcbZiVHQsJk1Xc6iSjyMN3WR/9ZcxonpBYEsN2K6nQ gNni4RB+odKKqvX9TiY/KHgqW2mBN79ZYqqaDMwyA/Jc3m9H9Q9K3ORE4cBDPotj goyzFqDyetrQDi2F8AKxUsy85MbYQY0c08cHJ3YREs1WEYL7EJRjTCtiQMtnGty/ 3xIBuaiF3WgQkOSTEKkTiZyKzBpQikupz1TQ3ES5HnXXqqwi6wFNNimynmO6q1O0 H/D4SbJuXxTazF8b22lKM5R/dMgfISl/lzUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRFGkqBFtX2mVHfj9eHcXV1KmjJVTAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIvUlJwS2dSYlY5cGxSMzRfWGgzRjFkU3BveVZVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtMTwDANBgkqhkiG9w0BAQsFAAOCAQEABK+0T489Krw3c4ID2fzyaiRFlLHx zgvp7SpCeQlgT13lrOxAc5eWZB1DpUciy2jMgqsMSwlZ2u+uhuSNVrlBp8OLFRAz TfRgYYzDpHFEHGAFixuuCT3qp/xjtL9U4fTQGQmMKVzzm/YoQLOkLwXPviHcdmmL alWfvuz2y6MftaTEWl2dE6CFWNn88kxukM0nbKwEhYUdYqUPvaRC9PAvQyjKxR7u XBP/l51OjDmfuLYk20IPMGTY8a1F0h712Zg0NvnzKk36cir/OhS0u0xjRljG46Gy i5WXfLIoezWD4aY53wCBLksyIiur0w0drl10RVmm7ABAa6YE6+KECU4z9A== -----END CERTIFICATE-----Generated at Wed Nov 5 21:02:17 2025 by rpki-client