$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/iFX3f46gOA6pvKRPUlIpusMU7RU.roa File: iFX3f46gOA6pvKRPUlIpusMU7RU.roa (raw, json) Hash identifier: HcElz0c3B7Dg9C6cG9MGk7dU51aSdJd61lscfSp51Ng= Subject key identifier: 88:55:F7:7F:8E:A0:38:0E:A9:BC:A4:4F:52:52:29:BA:C3:14:ED:15 Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Certificate serial: D1 Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/iFX3f46gOA6pvKRPUlIpusMU7RU.roa Signing time: Sat 01 Nov 2025 01:29:13 +0000 ROA not before: Sat 01 Nov 2025 01:29:13 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 9351 IP address blocks: 210.236.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Validity Not Before: Nov 1 01:29:13 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=8855F77F8EA0380EA9BCA44F525229BAC314ED15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:0e:83:6a:88:6c:1a:71:cc:fa:5e:55:9a: ec:d9:5f:ec:24:31:4b:f8:06:12:e3:56:4b:06:6e: bc:a4:7e:b3:bb:7e:ad:93:6f:6f:29:39:1f:80:ec: 97:c9:0d:6a:13:4d:93:86:a7:68:42:8f:be:f2:36: a4:28:b4:22:93:49:24:eb:fa:0b:0e:83:60:e8:2d: 95:2e:ee:9e:c5:e9:3b:87:a7:b9:8c:f0:fa:00:6f: 17:e5:f2:04:e8:a0:45:fd:cc:f5:63:c6:aa:ae:a7: fd:a1:9d:c2:2f:30:29:e5:ce:7c:47:dc:b9:49:57: b5:a7:62:f4:5f:d5:6b:9b:ea:e1:f8:ea:52:4a:55: ec:17:f9:f4:a0:7f:57:ec:21:67:de:16:c7:3d:18: ef:12:0b:b1:ab:b1:ca:40:a5:40:ff:29:fb:4c:83: a9:86:76:12:1e:15:d3:4f:f7:43:4d:41:1e:b4:80: 11:6d:d5:7f:7b:ae:0f:ae:50:04:2a:cd:df:c7:1d: c9:3d:9c:93:22:4c:63:7c:96:2b:95:80:3d:68:50: 2f:89:a4:2c:fa:ae:27:32:20:3b:48:21:3e:29:5c: ff:fa:a2:9b:f4:40:a2:93:04:f3:b8:0b:a2:9e:03: d7:86:b7:60:84:c1:72:bc:1a:5a:65:5b:ed:68:0a: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:55:F7:7F:8E:A0:38:0E:A9:BC:A4:4F:52:52:29:BA:C3:14:ED:15 X509v3 Authority Key Identifier: keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/iFX3f46gOA6pvKRPUlIpusMU7RU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.236.160.0/19 Signature Algorithm: sha256WithRSAEncryption 40:7b:7a:b2:0a:d1:9e:13:68:36:5b:0b:07:75:18:e7:2e:3a: a7:cd:a1:d8:91:95:1c:1f:d8:50:28:29:0e:0b:0c:c4:82:98: b8:04:30:54:da:72:0a:14:bb:54:dd:18:80:5f:4f:4f:9d:6c: 59:a0:2e:9f:65:a9:84:47:bc:11:a5:e7:22:62:6b:09:80:9d: c7:94:67:09:26:24:c8:14:63:5c:bd:2c:c8:0d:df:b1:21:4e: ea:cc:c7:29:e9:8b:bd:2f:ee:cc:9a:0a:de:54:60:d0:19:28: 48:46:a6:67:c8:67:b2:19:28:23:97:ff:8a:2f:a8:90:4a:30: 65:6f:8c:c6:c6:5b:2a:b4:87:c3:12:04:96:4a:13:ca:c7:e1: 17:68:45:1c:a4:b1:57:dd:8c:21:89:de:48:74:6f:72:33:f1: 8d:dc:0b:a8:10:2f:cf:8d:18:0d:4d:a8:f9:8d:2e:e0:71:53: 2f:5b:b1:a0:72:1c:1d:73:d7:60:f4:4d:d0:3d:d5:7e:9d:a6: bf:78:86:08:a3:6d:55:78:f1:ee:46:46:21:7f:ae:e1:8b:15: d6:c6:a2:c3:3e:51:0d:7a:bf:fa:87:44:88:5c:9a:f4:50:e9: e9:3a:5e:80:0f:cf:26:b3:1e:f5:13:94:be:01:6d:96:54:36: db:f7:49:a5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNTExMDEw MTI5MTNaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg4NTVGNzdGOEVBMDM4 MEVBOUJDQTQ0RjUyNTIyOUJBQzMxNEVEMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAmg6DaohsGnHM+l5VmuzZX+wkMUv4BhLjVksGbrykfrO7fq2T b28pOR+A7JfJDWoTTZOGp2hCj77yNqQotCKTSSTr+gsOg2DoLZUu7p7F6TuHp7mM 8PoAbxfl8gTooEX9zPVjxqqup/2hncIvMCnlznxH3LlJV7WnYvRf1Wub6uH46lJK VewX+fSgf1fsIWfeFsc9GO8SC7GrscpApUD/KftMg6mGdhIeFdNP90NNQR60gBFt 1X97rg+uUAQqzd/HHck9nJMiTGN8liuVgD1oUC+JpCz6ricyIDtIIT4pXP/6opv0 QKKTBPO4C6KeA9eGt2CEwXK8GlplW+1oCvr/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiFX3f46gOA6pvKRPUlIpusMU7RUwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM0L2lGWDNmNDZnT0E2cHZLUlBVbElwdXNNVTdSVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXS7KAwDQYJKoZIhvcNAQELBQADggEBAEB7erIK0Z4TaDZbCwd1GOcuOqfN odiRlRwf2FAoKQ4LDMSCmLgEMFTacgoUu1TdGIBfT0+dbFmgLp9lqYRHvBGl5yJi awmAnceUZwkmJMgUY1y9LMgN37EhTurMxynpi70v7syaCt5UYNAZKEhGpmfIZ7IZ KCOX/4ovqJBKMGVvjMbGWyq0h8MSBJZKE8rH4RdoRRyksVfdjCGJ3kh0b3Iz8Y3c C6gQL8+NGA1NqPmNLuBxUy9bsaByHB1z12D0TdA91X6dpr94hgijbVV48e5GRiF/ ruGLFdbGosM+UQ16v/qHRIhcmvRQ6ek6XoAPzyazHvUTlL4BbZZUNtv3SaU= -----END CERTIFICATE-----Generated at Wed Nov 5 19:58:09 2025 by rpki-client