$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/S7f2LWU3cUkManA1liSnEgbvXHU.roa File: S7f2LWU3cUkManA1liSnEgbvXHU.roa (raw, json) Hash identifier: vECjCfjl7eT09uDRJ61b7oL/KgRAQ2sCTnjWWwTK1RY= Subject key identifier: 4B:B7:F6:2D:65:37:71:49:0C:6A:70:35:96:24:A7:12:06:EF:5C:75 Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18 Certificate serial: 89 Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/S7f2LWU3cUkManA1liSnEgbvXHU.roa Signing time: Wed 01 Oct 2025 01:31:06 +0000 ROA not before: Wed 01 Oct 2025 01:31:06 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 2514 IP address blocks: 103.2.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18 Validity Not Before: Oct 1 01:31:06 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=4BB7F62D653771490C6A70359624A71206EF5C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:25:c1:69:c1:26:48:d5:5d:ae:d8:08:78: 92:96:36:c2:b2:ed:25:68:e2:47:40:72:2e:9e:85: c1:14:1a:9f:8b:3e:77:4b:01:ab:ab:8e:6c:fe:d1: c3:be:08:78:72:11:88:9b:e1:97:f1:5a:84:75:1b: 5d:b5:88:98:d5:b4:09:14:a9:54:8b:2a:77:8f:ee: d0:28:9d:63:e3:40:e0:9b:0e:79:4f:7b:be:59:d6: ef:8e:2e:61:ca:5e:ce:b8:6c:17:50:d7:10:c2:13: ff:86:b0:67:11:0c:36:28:dd:99:04:a8:41:e9:ed: fd:9a:7e:1f:cd:f5:e3:d3:a3:66:fc:55:e8:fd:b1: 99:2c:c2:e1:42:d8:4f:a7:53:5a:76:a3:80:13:0a: b4:be:7e:c3:38:4e:24:22:13:cb:47:a5:a2:38:3e: a7:ca:9a:08:d0:9c:9a:c3:27:89:77:8d:d3:ab:82: dd:6e:d9:f4:0c:14:f5:08:84:6d:1a:e9:d6:b0:df: 8b:38:bf:f3:00:85:cb:12:30:1b:e5:4f:2f:d4:6f: 56:91:29:af:3c:dd:d5:67:aa:e2:3c:78:c4:d4:bc: 43:c0:57:77:2f:1a:02:92:3c:7e:7c:b5:99:77:33: 28:a5:f5:ec:b7:8a:77:e8:85:13:0d:d2:be:d2:47: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B7:F6:2D:65:37:71:49:0C:6A:70:35:96:24:A7:12:06:EF:5C:75 X509v3 Authority Key Identifier: keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/S7f2LWU3cUkManA1liSnEgbvXHU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.2.100.0/22 Signature Algorithm: sha256WithRSAEncryption ab:5d:11:c7:a6:53:c0:69:30:c7:9d:d8:8e:ef:04:24:cf:a2: 0b:65:73:05:73:16:ec:ac:36:62:3d:ec:bc:63:06:2d:c8:b8: 9d:86:aa:68:25:ab:c9:94:98:71:35:b8:62:71:84:ee:8c:54: 39:fa:4f:97:2c:b5:89:6e:5b:5e:f1:6f:e8:9b:b9:4e:6f:33: 5e:9b:e7:98:12:24:e8:5d:b4:90:6e:65:23:19:4d:ab:5d:36: fb:e3:e0:ff:70:49:00:af:48:44:70:1b:5d:9a:2e:28:09:86: f3:fa:e0:93:34:0c:51:77:64:91:9a:8c:aa:6c:da:a5:13:3e: 9b:3d:09:d8:74:54:c1:85:15:c3:d8:1a:29:81:1a:66:aa:d1: ef:ec:3d:dd:f7:3b:42:a5:c0:65:11:d8:35:79:48:32:bc:02: eb:0e:75:c3:fe:21:07:00:c4:e4:91:4b:62:00:c0:61:ee:86: 88:c2:a0:d3:9b:bd:38:f7:56:fd:c2:8a:77:1a:02:22:0e:87: c1:e2:60:dd:e2:f9:3a:f0:7c:5f:63:c3:22:18:71:8c:3e:17: f1:75:6b:94:63:18:86:96:08:c2:8a:4b:9c:02:01:86:66:83: 7a:b8:a7:41:68:45:4e:7b:fd:20:d9:46:7f:7d:24:61:19:f5: 0e:a3:c4:e9 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNTEwMDEw MTMxMDZaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRCQjdGNjJENjUzNzcx NDkwQzZBNzAzNTk2MjRBNzEyMDZFRjVDNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWZSXBacEmSNVdrtgIeJKWNsKy7SVo4kdAci6ehcEUGp+LPndL Aaurjmz+0cO+CHhyEYib4ZfxWoR1G121iJjVtAkUqVSLKneP7tAonWPjQOCbDnlP e75Z1u+OLmHKXs64bBdQ1xDCE/+GsGcRDDYo3ZkEqEHp7f2afh/N9ePTo2b8Vej9 sZkswuFC2E+nU1p2o4ATCrS+fsM4TiQiE8tHpaI4PqfKmgjQnJrDJ4l3jdOrgt1u 2fQMFPUIhG0a6daw34s4v/MAhcsSMBvlTy/Ub1aRKa883dVnquI8eMTUvEPAV3cv GgKSPH58tZl3Myil9ey3infohRMN0r7SR0HnAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUS7f2LWU3cUkManA1liSnEgbvXHUwHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yOS9TN2YyTFdVM2NVa01hbkExbGlTbkVnYnZYSFUucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZwJkMA0GCSqGSIb3DQEBCwUAA4IBAQCrXRHHplPAaTDHndiO7wQkz6ILZXMF cxbsrDZiPey8YwYtyLidhqpoJavJlJhxNbhicYTujFQ5+k+XLLWJblte8W/om7lO bzNem+eYEiToXbSQbmUjGU2rXTb74+D/cEkAr0hEcBtdmi4oCYbz+uCTNAxRd2SR moyqbNqlEz6bPQnYdFTBhRXD2BopgRpmqtHv7D3d9ztCpcBlEdg1eUgyvALrDnXD /iEHAMTkkUtiAMBh7oaIwqDTm70491b9wop3GgIiDofB4mDd4vk68HxfY8MiGHGM PhfxdWuUYxiGlgjCikucAgGGZoN6uKdBaEVOe/0g2UZ/fSRhGfUOo8Tp -----END CERTIFICATE-----Generated at Wed Nov 5 20:45:01 2025 by rpki-client