$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/R2RMbfWy0Uq132jJaB3OBy1P6lo.roa File: R2RMbfWy0Uq132jJaB3OBy1P6lo.roa (raw, json) Hash identifier: KBfMeY2tv2svqs/JMbLuQvzE3/UnP7icw8B9EsVFxLg= Subject key identifier: 47:64:4C:6D:F5:B2:D1:4A:B5:DF:68:C9:68:1D:CE:07:2D:4F:EA:5A Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04AE Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/R2RMbfWy0Uq132jJaB3OBy1P6lo.roa Signing time: Tue 01 Apr 2025 01:49:29 +0000 ROA not before: Tue 01 Apr 2025 01:49:29 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:7d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1198 (0x4ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:49:29 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=47644C6DF5B2D14AB5DF68C9681DCE072D4FEA5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:6a:99:72:9a:00:1c:7b:63:49:2f:b5:e4: 0e:d2:46:16:bf:02:26:f8:74:50:10:1b:b7:f1:86: 03:61:eb:78:61:80:a9:55:0a:2e:cf:88:bb:b7:af: 71:ee:5f:d3:4b:43:fe:ef:1c:1f:08:9f:de:b3:fa: 37:06:ae:96:5a:1a:46:df:0f:19:ed:ea:93:72:35: 9f:80:40:7a:6c:c9:5f:ad:06:b9:8f:04:9a:aa:ee: df:10:08:03:b2:db:c0:51:6f:72:88:97:16:dd:05: 40:2e:bd:01:ab:f4:69:81:69:e9:d8:1d:93:11:94: ac:8c:11:c4:93:bf:f4:4f:4a:fc:e0:d5:51:0a:4d: 84:d0:06:24:1f:55:6e:7b:07:73:89:c0:3b:f2:91: 86:1e:e8:e5:42:0f:5c:18:c0:44:9f:a2:6c:1a:bf: 48:1c:81:42:2f:f3:dd:7a:85:20:5f:4c:80:66:1a: d3:7c:a4:29:c2:4b:c6:61:32:40:49:c8:5f:73:44: a8:ef:d0:e9:da:a2:89:88:7d:62:37:6f:5d:5e:00: 06:ff:f9:58:fa:62:46:8d:39:8f:5c:a6:a4:69:d7: a2:f7:00:af:a2:ef:cc:7b:ee:4b:0d:59:b0:74:1f: 3e:16:da:c8:94:49:5e:87:dd:f2:76:7c:d7:2c:cf: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:64:4C:6D:F5:B2:D1:4A:B5:DF:68:C9:68:1D:CE:07:2D:4F:EA:5A X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/R2RMbfWy0Uq132jJaB3OBy1P6lo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:7d00::/40 Signature Algorithm: sha256WithRSAEncryption 6f:82:3f:6f:54:29:25:01:fe:92:3f:c1:45:dd:94:e2:cc:55: 35:b5:7d:13:4e:93:fa:2d:4e:ba:cd:7e:ed:ef:a3:6d:00:26: 71:d0:74:7d:fe:68:8b:27:e6:bf:a4:73:3b:d4:f4:69:77:be: 00:af:f9:f8:a5:c4:6e:35:a4:c0:9e:32:7b:09:46:dd:26:d1: 77:9c:f7:71:9e:d3:27:5f:b9:52:db:ef:44:65:d8:c7:89:52: 38:93:a9:0b:dc:d2:44:b4:8c:14:c3:82:6f:6d:7f:e1:34:0c: 84:d1:11:bd:a8:23:6f:1a:93:0b:6c:8a:b2:23:e9:c2:1a:32: 08:43:cc:62:46:0c:fb:97:ea:71:4b:3f:dd:c8:a0:40:8c:64: e5:14:6a:2a:c6:9e:e7:74:56:f9:ac:a5:7d:76:ea:10:57:bc: 06:b8:f9:0c:4e:0c:98:fe:22:bc:1f:65:21:e5:13:2d:dd:54: 6e:f8:88:8d:aa:4a:3d:aa:61:85:69:3b:ed:5b:82:f7:97:b3: d3:ce:3e:67:c8:a1:e6:8c:23:55:bd:dc:1c:ce:d7:be:a9:ce: 2d:3e:9c:af:a5:0e:90:f8:a2:80:a6:46:c6:16:5d:ee:8c:63: 80:dc:58:6e:48:e7:2c:cc:01:5b:c9:bf:2c:6f:4d:9d:59:ec: 1c:ed:2e:11 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTQ5MjlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ3NjQ0QzZERjVCMkQx NEFCNURGNjhDOTY4MURDRTA3MkQ0RkVBNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCvmqZcpoAHHtjSS+15A7SRha/Aib4dFAQG7fxhgNh63hhgKlV Ci7PiLu3r3HuX9NLQ/7vHB8In96z+jcGrpZaGkbfDxnt6pNyNZ+AQHpsyV+tBrmP BJqq7t8QCAOy28BRb3KIlxbdBUAuvQGr9GmBaenYHZMRlKyMEcSTv/RPSvzg1VEK TYTQBiQfVW57B3OJwDvykYYe6OVCD1wYwESfomwav0gcgUIv8916hSBfTIBmGtN8 pCnCS8ZhMkBJyF9zRKjv0OnaoomIfWI3b11eAAb/+Vj6YkaNOY9cpqRp16L3AK+i 78x77ksNWbB0Hz4W2siUSV6H3fJ2fNcsz4IDAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUR2RMbfWy0Uq132jJaB3OBy1P6lowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9SMlJNYmZXeTBVcTEzMmpKYUIzT0J5MVA2bG8u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa30wDQYJKoZIhvcNAQELBQADggEBAG+CP29UKSUB/pI/wUXd lOLMVTW1fRNOk/otTrrNfu3vo20AJnHQdH3+aIsn5r+kczvU9Gl3vgCv+filxG41 pMCeMnsJRt0m0Xec93Ge0ydfuVLb70Rl2MeJUjiTqQvc0kS0jBTDgm9tf+E0DITR Eb2oI28akwtsirIj6cIaMghDzGJGDPuX6nFLP93IoECMZOUUairGnud0VvmspX12 6hBXvAa4+QxODJj+IrwfZSHlEy3dVG74iI2qSj2qYYVpO+1bgveXs9POPmfIoeaM I1W93BzO176pzi0+nK+lDpD4ooCmRsYWXe6MY4DcWG5I5yzMAVvJvyxvTZ1Z7Bzt LhE= -----END CERTIFICATE-----Generated at Wed Nov 5 12:25:15 2025 by rpki-client