$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/pM6tY8tuDj3VZpt0QsWcQ1Yrk7I.roa File: pM6tY8tuDj3VZpt0QsWcQ1Yrk7I.roa (raw, json) Hash identifier: MN2d/F1BeVohp7Dfzg/+VmUkYJI9SDpUzMvqwMY4YGw= Subject key identifier: A4:CE:AD:63:CB:6E:0E:3D:D5:66:9B:74:42:C5:9C:43:56:2B:93:B2 Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Certificate serial: 5F Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/pM6tY8tuDj3VZpt0QsWcQ1Yrk7I.roa Signing time: Tue 01 Apr 2025 01:29:43 +0000 ROA not before: Tue 01 Apr 2025 01:29:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 7687 IP address blocks: 160.246.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 22:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Validity Not Before: Apr 1 01:29:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A4CEAD63CB6E0E3DD5669B7442C59C43562B93B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:94:d0:52:ce:70:95:6d:5c:e8:89:f3:21:45: 6d:40:7c:90:48:ac:af:b9:cb:ee:11:d0:19:3a:97: b5:b9:2e:27:ef:5c:6d:07:8a:4d:cb:53:4e:cb:4f: ed:85:75:6c:81:29:0d:24:39:d3:c9:2c:a0:1f:ce: 94:21:c5:5b:50:6a:a7:0c:f2:2d:ed:ab:f6:5e:96: f5:49:83:4a:70:7e:04:85:fc:08:99:8f:26:f5:8c: bf:fc:3f:60:2d:bd:50:a3:41:a3:0e:65:60:6a:57: df:51:3f:53:8e:76:ed:e3:15:9f:1f:89:1c:bd:92: 67:d3:bf:a8:82:f1:37:cb:6d:81:c3:85:05:e1:d0: 50:51:b2:54:0e:ea:e7:bd:e7:ea:76:54:7d:ba:78: 07:c7:dd:39:42:8e:5a:6d:b1:3d:71:b2:03:d8:48: 91:28:1a:29:b9:2b:6d:4d:48:ab:ee:4d:13:b6:a2: 35:e2:85:c9:0f:20:55:cf:b5:54:f9:36:33:36:0d: 92:66:85:b6:f1:15:b5:ca:db:0a:c1:52:72:cc:ad: 7c:1f:e8:89:0a:a8:b1:6f:b0:01:58:a8:a9:8e:d4: 2b:19:5b:21:00:31:a3:71:b5:d5:4f:7f:11:14:21: c8:f9:c9:ce:a2:bd:fc:fd:88:0e:07:ec:32:13:c2: c5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CE:AD:63:CB:6E:0E:3D:D5:66:9B:74:42:C5:9C:43:56:2B:93:B2 X509v3 Authority Key Identifier: keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/pM6tY8tuDj3VZpt0QsWcQ1Yrk7I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.246.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0b:29:60:c0:d8:e8:86:a3:69:bd:8b:d9:cb:a3:bb:fb:6b:7d: 0a:e1:f2:20:38:cf:e4:2a:9c:6b:3f:7f:cb:c6:e6:28:ec:24: 9e:de:8e:5e:78:ad:b4:c6:07:e3:4a:45:a9:fe:5d:b6:2b:42: 9b:55:8a:24:f8:40:b3:14:f1:5b:8d:0c:e5:70:9f:b5:35:2c: f8:e2:0d:a0:e0:d7:a7:f8:f9:2f:49:43:f3:17:a5:fd:b8:ac: 96:2b:f8:3a:59:95:43:13:ec:4d:6f:10:b2:6e:05:21:44:41: 68:1d:26:91:cf:0b:a8:54:f0:a9:f6:fd:f4:54:61:4a:e5:06: 6e:fc:3b:d3:37:6e:38:bb:ca:81:df:c3:cd:07:04:80:48:aa: 3a:79:a2:99:1a:37:8d:77:f0:52:dc:21:30:e9:a1:0c:16:0f: 7b:0f:50:c8:2a:ea:af:a7:7f:aa:3e:23:b7:55:c7:d9:31:e1: c0:ec:31:bd:da:00:00:d6:52:93:fe:a7:22:05:aa:ac:df:be: f3:d0:9a:23:8d:96:b3:2e:91:ac:a2:a5:92:ce:35:5d:fe:c3: 0a:99:bb:51:60:d6:b0:c0:2d:d0:d7:c8:66:1b:b7:89:a3:3f: ad:30:f1:4f:cc:79:2d:2f:f5:21:91:18:ef:c7:79:18:76:3a: c4:b3:2c:1f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1 M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI1MDQwMTAx Mjk0M1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQTRDRUFENjNDQjZFMEUz REQ1NjY5Qjc0NDJDNTlDNDM1NjJCOTNCMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOWU0FLOcJVtXOiJ8yFFbUB8kEisr7nL7hHQGTqXtbkuJ+9cbQeK TctTTstP7YV1bIEpDSQ508ksoB/OlCHFW1BqpwzyLe2r9l6W9UmDSnB+BIX8CJmP JvWMv/w/YC29UKNBow5lYGpX31E/U4527eMVnx+JHL2SZ9O/qILxN8ttgcOFBeHQ UFGyVA7q573n6nZUfbp4B8fdOUKOWm2xPXGyA9hIkSgaKbkrbU1Iq+5NE7aiNeKF yQ8gVc+1VPk2MzYNkmaFtvEVtcrbCsFScsytfB/oiQqosW+wAVioqY7UKxlbIQAx o3G11U9/ERQhyPnJzqK9/P2IDgfsMhPCxVUCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBSkzq1jy24OPdVmm3RCxZxDViuTsjAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7 r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ5MC9wTTZ0WTh0dURqM1ZacHQwUXNXY1ExWXJrN0kucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQGoPaAMA0GCSqGSIb3DQEBCwUAA4IBAQALKWDA2OiGo2m9i9nLo7v7a30K 4fIgOM/kKpxrP3/LxuYo7CSe3o5eeK20xgfjSkWp/l22K0KbVYok+ECzFPFbjQzl cJ+1NSz44g2g4Nen+PkvSUPzF6X9uKyWK/g6WZVDE+xNbxCybgUhREFoHSaRzwuo VPCp9v30VGFK5QZu/DvTN244u8qB38PNBwSASKo6eaKZGjeNd/BS3CEw6aEMFg97 D1DIKuqvp3+qPiO3VcfZMeHA7DG92gAA1lKT/qciBaqs377z0JojjZazLpGsoqWS zjVd/sMKmbtRYNawwC3Q18hmG7eJoz+tMPFPzHktL/UhkRjvx3kYdjrEsywf -----END CERTIFICATE-----Generated at Thu Nov 6 03:50:03 2025 by rpki-client