$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30211/0i2tbYIdFNaPKYbpagoJJYfvGq4.roa File: 0i2tbYIdFNaPKYbpagoJJYfvGq4.roa (raw, json) Hash identifier: ZblA2rHzzaablXvbfWE3/hR8DU0S6OjoAKdPlvg/S9s= Subject key identifier: D2:2D:AD:6D:82:1D:14:D6:8F:29:86:E9:6A:0A:09:25:87:EF:1A:AE Certificate issuer: /CN=1467AF2FF272208CF75453CDC0122C4713D2CAB5 Certificate serial: 40 Authority key identifier: 14:67:AF:2F:F2:72:20:8C:F7:54:53:CD:C0:12:2C:47:13:D2:CA:B5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/0i2tbYIdFNaPKYbpagoJJYfvGq4.roa Signing time: Sat 01 Nov 2025 01:31:57 +0000 ROA not before: Sat 01 Nov 2025 01:31:57 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 38648 IP address blocks: 2402:3b00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/FGevL_JyIIz3VFPNwBIsRxPSyrU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/FGevL_JyIIz3VFPNwBIsRxPSyrU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1467AF2FF272208CF75453CDC0122C4713D2CAB5 Validity Not Before: Nov 1 01:31:57 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=D22DAD6D821D14D68F2986E96A0A092587EF1AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:e6:d2:f4:f7:b7:ae:82:d9:3f:fc:39:43: 51:22:82:50:69:fe:70:9d:be:39:08:0b:93:d9:99: a6:a9:4d:56:4b:55:06:33:79:19:3c:6d:02:89:b7: 2e:02:4b:fb:b5:6e:6c:c3:58:cb:07:fa:be:26:83: f4:9b:2d:78:d8:19:30:61:62:2a:95:72:cd:b2:fa: 73:b4:d1:69:d1:22:c6:60:57:25:2b:9c:77:3e:d8: d8:9d:6f:38:2b:fe:84:31:82:70:8e:31:18:64:43: e6:9a:36:1f:d0:1e:1a:d5:6d:55:ef:e1:db:df:e8: d7:79:ba:a2:ef:9a:89:37:8a:ff:27:20:7b:c5:2d: 08:b9:b9:71:57:ac:91:ff:f8:5e:29:3a:eb:1f:24: f6:d2:2b:31:78:9e:31:67:7f:d0:26:32:49:52:70: c8:50:68:2e:fa:37:8e:a6:97:29:6a:d7:93:f8:ce: 5e:96:d0:b4:d7:0b:66:40:12:d0:e0:a9:70:2b:96: 3c:c6:4a:88:0a:db:94:86:80:e9:a1:b6:58:5c:6d: 5d:3c:c0:8b:de:c3:e3:a8:ed:96:ac:92:0f:2d:48: c0:3e:09:02:0b:bb:9b:06:09:67:78:fe:55:26:11: 18:9e:9e:3a:2e:61:ed:50:7a:c5:85:d9:cb:03:63: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2D:AD:6D:82:1D:14:D6:8F:29:86:E9:6A:0A:09:25:87:EF:1A:AE X509v3 Authority Key Identifier: keyid:14:67:AF:2F:F2:72:20:8C:F7:54:53:CD:C0:12:2C:47:13:D2:CA:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/FGevL_JyIIz3VFPNwBIsRxPSyrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/0i2tbYIdFNaPKYbpagoJJYfvGq4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3b00::/32 Signature Algorithm: sha256WithRSAEncryption 66:59:13:98:af:4a:22:04:b1:b6:42:46:bf:04:ce:ef:eb:5b: c4:e9:1d:67:82:73:64:e1:24:c6:eb:49:74:18:60:6c:0d:a6: dd:4d:78:bd:5e:c7:37:b4:54:c0:61:98:86:a8:bd:ba:7c:a1: bb:a2:89:c6:34:c8:c2:d4:6c:70:19:7f:61:d8:2e:be:c3:84: 0d:a6:34:66:e1:c7:00:cd:cc:b4:f5:9c:25:81:55:9e:ff:a5: 77:ed:ac:ee:b1:b0:4a:e7:75:c2:d0:aa:3c:80:8a:e6:e4:70: 5e:02:52:db:0c:fe:f8:e6:17:dd:97:cb:c0:03:f5:1b:f6:df: ac:66:4a:35:76:94:3e:74:9b:7c:b3:f1:6a:26:5f:2e:43:85: e6:c8:5b:08:35:55:49:eb:e9:d9:8a:88:d4:33:f6:50:88:53: fb:67:27:eb:91:96:8d:19:2a:18:0d:71:7a:8a:81:40:15:04: db:e8:b5:cc:e9:5e:15:40:e8:04:09:2c:0f:64:7a:da:57:9d: 8b:2c:1a:18:bc:98:0f:f7:fc:e8:ea:8c:66:8e:79:72:32:e8: e0:c2:d4:4f:30:0e:8b:35:82:c2:df:57:53:4a:37:8c:aa:cc: 4e:e7:e2:a2:75:73:f2:b6:9e:b5:1f:2f:a4:97:34:c4:a0:13: b0:df:70:32 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDY3 QUYyRkYyNzIyMDhDRjc1NDUzQ0RDMDEyMkM0NzEzRDJDQUI1MB4XDTI1MTEwMTAx MzE1N1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRDIyREFENkQ4MjFEMTRE NjhGMjk4NkU5NkEwQTA5MjU4N0VGMUFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANsV5tL097eugtk//DlDUSKCUGn+cJ2+OQgLk9mZpqlNVktVBjN5 GTxtAom3LgJL+7VubMNYywf6viaD9JsteNgZMGFiKpVyzbL6c7TRadEixmBXJSuc dz7Y2J1vOCv+hDGCcI4xGGRD5po2H9AeGtVtVe/h29/o13m6ou+aiTeK/ycge8Ut CLm5cVeskf/4Xik66x8k9tIrMXieMWd/0CYySVJwyFBoLvo3jqaXKWrXk/jOXpbQ tNcLZkAS0OCpcCuWPMZKiArblIaA6aG2WFxtXTzAi97D46jtlqySDy1IwD4JAgu7 mwYJZ3j+VSYRGJ6eOi5h7VB6xYXZywNj4gECAwEAAaOCAikwggIlMB0GA1UdDgQW BBTSLa1tgh0U1o8phulqCgklh+8arjAfBgNVHSMEGDAWgBQUZ68v8nIgjPdUU83A EixHE9LKtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMTEvRkdldkxfSnlJSXozVkZQTndCSXNSeFBTeXJVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRkdldkxfSnlJSXozVkZQTndCSXNS eFBTeXJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjExLzBpMnRiWUlkRk5hUEtZYnBhZ29KSllmdkdxNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAjsAMA0GCSqGSIb3DQEBCwUAA4IBAQBmWROYr0oiBLG2Qka/BM7v 61vE6R1ngnNk4STG60l0GGBsDabdTXi9Xsc3tFTAYZiGqL26fKG7oonGNMjC1Gxw GX9h2C6+w4QNpjRm4ccAzcy09ZwlgVWe/6V37azusbBK53XC0Ko8gIrm5HBeAlLb DP745hfdl8vAA/Ub9t+sZko1dpQ+dJt8s/FqJl8uQ4XmyFsINVVJ6+nZiojUM/ZQ iFP7ZyfrkZaNGSoYDXF6ioFAFQTb6LXM6V4VQOgECSwPZHraV52LLBoYvJgP9/zo 6oxmjnlyMujgwtRPMA6LNYLC31dTSjeMqsxO5+KidXPytp61Hy+klzTEoBOw33Ay -----END CERTIFICATE-----Generated at Wed Nov 5 20:44:49 2025 by rpki-client