$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/ifRn08i8gEOi5S6hhZAAcMO7kJs.roa File: ifRn08i8gEOi5S6hhZAAcMO7kJs.roa (raw, json) Hash identifier: V5VIhrquQ2Icvjv2LsAkyYpW4svHEqRtLVvvrB0e3u0= Subject key identifier: 89:F4:67:D3:C8:BC:80:43:A2:E5:2E:A1:85:90:00:70:C3:BB:90:9B Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: 011E Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/ifRn08i8gEOi5S6hhZAAcMO7kJs.roa Signing time: Mon 01 Sep 2025 01:29:26 +0000 ROA not before: Mon 01 Sep 2025 01:29:26 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 9370 IP address blocks: 210.229.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: Sep 1 01:29:26 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=89F467D3C8BC8043A2E52EA185900070C3BB909B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:10:9b:39:cc:36:5d:12:5e:e7:39:de:51: f6:d9:35:3e:f5:37:a9:35:08:0c:c1:21:6c:75:be: d7:c2:89:b2:05:8d:f3:21:7d:8a:00:84:32:f1:8c: 54:5c:fb:2a:84:3c:bf:96:11:d9:28:d6:db:1d:72: 58:6f:a4:6a:54:c8:99:c3:68:96:81:1e:19:fe:9b: f2:7e:0e:36:6d:9f:13:58:5f:8b:a0:ec:bb:94:fa: 2b:6a:6e:f8:7b:78:82:25:db:60:38:9e:3e:ce:96: 74:26:55:cb:b8:a1:d5:2a:fa:25:33:35:6a:9c:37: 69:4c:ce:84:d8:a6:72:e8:86:12:bb:99:5d:fa:1e: b0:6c:4b:9e:24:d9:0c:3f:dd:90:5e:35:7f:35:8f: 87:ea:c0:b3:fa:2a:f8:23:9e:23:2d:93:d3:34:92: 93:ca:fb:f0:4f:7f:65:a9:36:0d:22:bd:70:63:70: 12:7a:ad:11:5a:90:b1:27:39:fe:0b:78:2e:b3:0c: 47:6d:fa:2b:24:22:24:c2:00:83:da:5e:a1:2b:67: 7b:aa:c4:ed:43:ec:e2:54:fe:23:41:0e:3f:ec:cc: a0:c2:8d:6e:66:65:72:51:64:9c:68:ee:a3:00:6a: ed:e8:e8:86:eb:55:8a:c3:36:5c:32:4b:81:2c:db: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:67:D3:C8:BC:80:43:A2:E5:2E:A1:85:90:00:70:C3:BB:90:9B X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/ifRn08i8gEOi5S6hhZAAcMO7kJs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.229.64.0/21 Signature Algorithm: sha256WithRSAEncryption 26:d3:2b:49:f1:57:70:f5:93:dc:10:e9:fd:88:0c:f0:b5:44: 7a:c5:8e:e7:da:a3:50:fa:e9:87:e4:25:32:5c:3a:62:81:ac: 60:be:6f:2e:dc:c7:8b:24:14:f6:c1:30:82:67:ae:2e:55:80: e9:4e:83:e2:97:96:0a:c6:04:37:9b:cc:ff:5c:e5:df:29:3c: c1:a0:a4:2b:e9:65:8b:e3:c8:1c:e1:36:b3:d6:8e:f1:98:c5: 7d:aa:fe:34:61:c1:bf:bf:bc:f3:62:e1:8b:5b:4a:bb:cf:96: 75:f2:73:c2:bd:a4:b6:56:a8:00:db:75:be:38:5e:37:6f:de: 55:44:b0:06:98:c2:8c:ba:49:74:af:72:1c:5e:87:d3:93:83: 06:8b:e3:04:77:e1:3b:f0:53:13:22:6f:cb:ac:4e:45:2d:9e: 07:72:0f:0a:cd:50:1b:25:9f:7e:6d:56:78:2e:0d:ee:0e:71: b2:59:27:46:cc:34:fa:88:0c:7d:2f:b8:1d:63:f7:d6:22:79: 64:b0:d0:8e:1d:aa:f8:05:ae:85:e0:99:f6:5f:61:1e:9a:a5: d3:f0:7f:57:7d:e4:ce:91:97:87:14:e5:16:ca:36:5b:2a:f3: 74:e4:87:7b:c0:9b:db:c2:38:dd:55:fd:36:63:34:f7:63:b4: 96:0d:48:19 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA5MDEw MTI5MjZaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg5RjQ2N0QzQzhCQzgw NDNBMkU1MkVBMTg1OTAwMDcwQzNCQjkwOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGCRCbOcw2XRJe5zneUfbZNT71N6k1CAzBIWx1vtfCibIFjfMh fYoAhDLxjFRc+yqEPL+WEdko1tsdclhvpGpUyJnDaJaBHhn+m/J+DjZtnxNYX4ug 7LuU+itqbvh7eIIl22A4nj7OlnQmVcu4odUq+iUzNWqcN2lMzoTYpnLohhK7mV36 HrBsS54k2Qw/3ZBeNX81j4fqwLP6KvgjniMtk9M0kpPK+/BPf2WpNg0ivXBjcBJ6 rRFakLEnOf4LeC6zDEdt+iskIiTCAIPaXqErZ3uqxO1D7OJU/iNBDj/szKDCjW5m ZXJRZJxo7qMAau3o6IbrVYrDNlwyS4Es21TPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUifRn08i8gEOi5S6hhZAAcMO7kJswHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L2lmUm4wOGk4Z0VPaTVTNmhoWkFBY01PN2tKcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPS5UAwDQYJKoZIhvcNAQELBQADggEBACbTK0nxV3D1k9wQ6f2IDPC1RHrF jufao1D66YfkJTJcOmKBrGC+by7cx4skFPbBMIJnri5VgOlOg+KXlgrGBDebzP9c 5d8pPMGgpCvpZYvjyBzhNrPWjvGYxX2q/jRhwb+/vPNi4YtbSrvPlnXyc8K9pLZW qADbdb44Xjdv3lVEsAaYwoy6SXSvchxeh9OTgwaL4wR34TvwUxMib8usTkUtngdy DwrNUBsln35tVnguDe4OcbJZJ0bMNPqIDH0vuB1j99YieWSw0I4dqvgFroXgmfZf YR6apdPwf1d95M6Rl4cU5RbKNlsq83Tkh3vAm9vCON1V/TZjNPdjtJYNSBk= -----END CERTIFICATE-----Generated at Wed Nov 5 18:47:08 2025 by rpki-client