$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30024/5emUsmpQSc6g_nw1UAM7frNwgdM.roa File: 5emUsmpQSc6g_nw1UAM7frNwgdM.roa (raw, json) Hash identifier: x9jrQ0XKfuGtYlrWLeE9CH9trBnPxBUqTQclJCeTSRs= Subject key identifier: E5:E9:94:B2:6A:50:49:CE:A0:FE:7C:35:50:03:3B:7E:B3:70:81:D3 Certificate issuer: /CN=C704C9A0D115D26062A916A8ADD698F218E00A87 Certificate serial: 14 Authority key identifier: C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/5emUsmpQSc6g_nw1UAM7frNwgdM.roa Signing time: Sat 13 Sep 2025 00:42:30 +0000 ROA not before: Sat 13 Sep 2025 00:42:30 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2907 IP address blocks: 2001:2f8::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C704C9A0D115D26062A916A8ADD698F218E00A87 Validity Not Before: Sep 13 00:42:30 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=E5E994B26A5049CEA0FE7C3550033B7EB37081D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:f6:16:dd:d1:ba:10:b9:d6:58:7a:ea:bd: d1:85:00:ad:b7:50:85:c2:7d:c1:38:7d:9c:73:72: c2:f8:9d:ac:f4:25:e4:23:ea:da:f7:7b:0d:aa:41: 78:ec:82:b4:94:e7:ee:bb:fb:04:45:b4:89:04:8b: c7:59:78:e0:41:8d:16:ab:50:5c:e2:5a:66:a6:41: d1:bb:e0:47:d9:12:19:2b:92:a9:ac:cb:7b:38:d1: a3:93:13:30:5a:d8:70:eb:47:85:b4:c4:95:a6:97: 96:68:2a:02:58:62:f3:3b:f8:3e:0b:bd:95:24:bc: 6a:cf:74:e9:1d:b0:5e:11:38:e4:6a:cf:c4:bf:8c: ca:dd:f0:48:d3:d3:51:8c:d9:13:e2:7e:22:b2:a6: 5a:bc:98:16:6f:dc:36:85:49:09:f4:5f:43:a4:9a: 02:e7:89:93:39:d8:72:e0:6e:a7:ef:86:e1:40:d1: 4d:08:2e:74:c8:4a:eb:71:1d:b8:c9:5a:fd:e6:5d: 73:9f:8a:e4:fd:00:5d:75:b8:b7:1f:76:1f:74:54: ab:ef:80:f4:4d:1e:1f:47:56:62:7a:f9:fd:34:2d: 78:57:e6:8a:e4:87:90:e3:08:15:ef:ff:2e:19:56: 9b:3b:a1:3f:ef:32:5f:a8:f0:4b:f5:f8:ed:88:0e: dc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:94:B2:6A:50:49:CE:A0:FE:7C:35:50:03:3B:7E:B3:70:81:D3 X509v3 Authority Key Identifier: keyid:C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/5emUsmpQSc6g_nw1UAM7frNwgdM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:2f8::/32 Signature Algorithm: sha256WithRSAEncryption 0a:cf:6e:ce:85:68:ca:74:b6:8c:ff:39:a4:d1:38:68:09:40: b8:05:44:ed:0a:24:7e:e6:25:25:65:a6:52:98:73:25:ef:61: 96:ac:5c:3e:76:8f:3e:08:e2:11:c1:17:1c:46:4e:c6:46:fa: f2:a5:a0:b1:24:2d:51:97:be:5d:74:f1:b2:f7:5e:9f:cb:35: 89:1c:0d:7e:57:91:b4:ad:ae:a5:c7:02:93:0f:35:d5:63:af: 22:71:1f:f1:6e:bd:14:75:ec:d6:a0:9c:90:fa:13:7e:83:93: bc:d4:93:be:4e:72:da:14:09:2c:3d:88:68:88:2d:aa:99:ae: b6:ab:8b:b6:a9:8e:e0:45:9e:84:dc:3d:e0:ac:1c:e2:5e:62: 3f:1c:c7:c5:17:3a:fd:ca:7f:1a:a1:fc:dd:b5:6d:7f:48:fe: 87:8f:0a:81:a4:17:0a:03:ee:4e:33:08:4b:90:26:2b:75:23: 8a:f8:4f:6d:7d:47:4e:2b:e4:5b:87:9b:6a:d2:7b:3e:d6:3b: e2:74:5f:a9:a0:37:7c:ba:26:6c:3e:67:48:db:2a:25:d7:47: 1f:e9:55:8f:bf:af:2d:0f:0f:66:74:d4:6e:fe:5a:6a:17:90: 65:13:62:81:f4:0d:95:80:a2:ed:77:77:6d:36:04:7c:3b:bd: 70:c8:07:cc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzA0 QzlBMEQxMTVEMjYwNjJBOTE2QThBREQ2OThGMjE4RTAwQTg3MB4XDTI1MDkxMzAw NDIzMFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRTVFOTk0QjI2QTUwNDlD RUEwRkU3QzM1NTAwMzNCN0VCMzcwODFEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMwg9hbd0boQudZYeuq90YUArbdQhcJ9wTh9nHNywvidrPQl5CPq 2vd7DapBeOyCtJTn7rv7BEW0iQSLx1l44EGNFqtQXOJaZqZB0bvgR9kSGSuSqazL ezjRo5MTMFrYcOtHhbTElaaXlmgqAlhi8zv4Pgu9lSS8as906R2wXhE45GrPxL+M yt3wSNPTUYzZE+J+IrKmWryYFm/cNoVJCfRfQ6SaAueJkznYcuBup++G4UDRTQgu dMhK63EduMla/eZdc5+K5P0AXXW4tx92H3RUq++A9E0eH0dWYnr5/TQteFfmiuSH kOMIFe//LhlWmzuhP+8yX6jwS/X47YgO3H8CAwEAAaOCAikwggIlMB0GA1UdDgQW BBTl6ZSyalBJzqD+fDVQAzt+s3CB0zAfBgNVHSMEGDAWgBTHBMmg0RXSYGKpFqit 1pjyGOAKhzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMjQveHdUSm9ORVYwbUJpcVJhb3JkYVk4aGpnQ29jLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveHdUSm9ORVYwbUJpcVJhb3JkYVk4 aGpnQ29jLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDI0LzVlbVVzbXBRU2M2Z19udzFVQU03ZnJOd2dkTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQL4MA0GCSqGSIb3DQEBCwUAA4IBAQAKz27OhWjKdLaM/zmk0Tho CUC4BUTtCiR+5iUlZaZSmHMl72GWrFw+do8+COIRwRccRk7GRvrypaCxJC1Rl75d dPGy916fyzWJHA1+V5G0ra6lxwKTDzXVY68icR/xbr0UdezWoJyQ+hN+g5O81JO+ TnLaFAksPYhoiC2qma62q4u2qY7gRZ6E3D3grBziXmI/HMfFFzr9yn8aofzdtW1/ SP6HjwqBpBcKA+5OMwhLkCYrdSOK+E9tfUdOK+Rbh5tq0ns+1jvidF+poDd8uiZs PmdI2yol10cf6VWPv68tDw9mdNRu/lpqF5BlE2KB9A2VgKLtd3dtNgR8O71wyAfM -----END CERTIFICATE-----Generated at Wed Nov 5 22:10:54 2025 by rpki-client