$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30278/SCBaq3wB-q84n-bwS-WSJnZ1dBs.roa File: SCBaq3wB-q84n-bwS-WSJnZ1dBs.roa (raw, json) Hash identifier: 6QbL946kEypxQdnrV2RPoRf+4i0+ug7Fs0mz81CCzgg= Subject key identifier: 48:20:5A:AB:7C:01:FA:AF:38:9F:E6:F0:4B:E5:92:26:76:75:74:1B Certificate issuer: /CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB Certificate serial: 2F Authority key identifier: 0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/SCBaq3wB-q84n-bwS-WSJnZ1dBs.roa Signing time: Fri 01 Aug 2025 01:31:56 +0000 ROA not before: Fri 01 Aug 2025 01:31:56 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 20940 IP address blocks: 2403:c780:7203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB Validity Not Before: Aug 1 01:31:56 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=48205AAB7C01FAAF389FE6F04BE592267675741B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:0a:64:04:65:d6:53:c8:b4:5c:f0:36:8f: 21:8c:11:62:52:32:de:5d:b4:01:45:c7:44:de:64: 55:5f:28:71:bb:58:d2:97:6a:13:f5:f8:05:7a:b7: dd:5f:ae:2a:ff:8d:e2:e4:6d:65:2f:f0:aa:8f:75: 35:0e:3b:34:4e:8e:69:36:1f:2a:64:a9:2d:94:bc: 62:50:00:56:77:80:ee:9a:fd:66:ef:f4:a1:b8:4a: b3:11:20:eb:a1:92:85:f8:1c:6b:3f:f5:bd:c5:0f: a4:0d:12:97:d5:76:d3:31:55:cf:91:9a:b5:f7:d3: d6:0b:8a:09:f3:21:18:0f:43:bd:92:94:db:f1:c1: 98:2c:14:ed:71:a9:e7:9b:6d:b9:90:ad:72:1e:44: 8f:ad:f2:3f:72:d0:72:7f:b0:1e:b7:af:2d:d3:9d: ca:28:8a:b2:8d:1b:df:c6:76:2b:24:fe:35:9b:0c: 83:ae:aa:59:9b:52:57:97:77:35:cc:28:1c:6e:01: 5d:2a:3f:0a:5e:ca:70:0e:b5:3c:04:a4:36:d8:49: fa:bb:62:dd:a7:9a:e2:a8:b4:d3:47:d0:3e:67:51: 44:af:6f:27:d1:63:4c:34:6d:9a:26:19:3f:ca:8a: 3b:e9:6e:8b:54:64:d3:b7:c9:af:ff:38:a9:9f:7d: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:20:5A:AB:7C:01:FA:AF:38:9F:E6:F0:4B:E5:92:26:76:75:74:1B X509v3 Authority Key Identifier: keyid:0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/SCBaq3wB-q84n-bwS-WSJnZ1dBs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:c780:7203::/48 Signature Algorithm: sha256WithRSAEncryption 02:12:ea:97:f3:f0:e7:fe:f7:5c:ca:ab:a9:b8:34:4e:65:8e: 6f:8d:d5:1c:e8:7c:55:47:a1:e1:f2:08:c1:3d:8b:31:a8:a4: 9f:ca:a5:4f:ef:d8:5c:fd:e5:cf:67:d6:53:00:79:62:e6:c2: a7:09:7f:4c:fc:6b:d8:f8:03:b2:4f:3e:01:33:84:1e:55:0d: 41:8f:02:fd:ab:67:b9:26:d9:d0:f0:7f:ae:d7:2d:37:a9:2c: 0a:f7:fd:69:c9:07:ec:b6:aa:2e:e9:4b:ff:a5:f9:45:a2:6e: 5a:f4:dd:5b:5f:6f:20:d2:ec:7a:94:ef:dd:e8:fd:18:79:07: 7c:31:3c:8e:92:ec:73:bd:8a:e5:95:9f:60:42:57:38:c2:68: d1:da:3e:c5:5b:b0:ff:a7:0d:54:7c:47:ff:ff:1c:6c:2f:55: 74:52:38:ad:bb:42:98:b1:aa:af:3c:34:14:b5:a0:7a:d1:3c: 23:5e:3c:84:70:ea:3a:60:6b:b9:e5:cb:73:c3:d3:76:33:b6: f0:6f:c0:49:39:28:7c:4a:97:86:da:88:83:cf:50:95:77:dc: 99:30:5d:18:d1:13:9f:ab:d3:4b:f6:a5:42:6a:19:14:7e:2d: 99:fd:a6:f6:97:4b:e8:38:5a:09:24:b0:9a:63:8e:ba:8b:e8: 58:ea:f5:45 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQjM2 MkJCRUU2N0I5MjlCQjUwMkEyQUQwMTFBMUFBN0MwMEQ1N0JCMB4XDTI1MDgwMTAx MzE1NloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNDgyMDVBQUI3QzAxRkFB RjM4OUZFNkYwNEJFNTkyMjY3Njc1NzQxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMm4CmQEZdZTyLRc8DaPIYwRYlIy3l20AUXHRN5kVV8ocbtY0pdq E/X4BXq33V+uKv+N4uRtZS/wqo91NQ47NE6OaTYfKmSpLZS8YlAAVneA7pr9Zu/0 obhKsxEg66GShfgcaz/1vcUPpA0Sl9V20zFVz5GatffT1guKCfMhGA9DvZKU2/HB mCwU7XGp55ttuZCtch5Ej63yP3LQcn+wHrevLdOdyiiKso0b38Z2KyT+NZsMg66q WZtSV5d3NcwoHG4BXSo/Cl7KcA61PASkNthJ+rti3aea4qi000fQPmdRRK9vJ9Fj TDRtmiYZP8qKO+lui1Rk07fJr/84qZ99MJ0CAwEAAaOCAiswggInMB0GA1UdDgQW BBRIIFqrfAH6rzif5vBL5ZImdnV0GzAfBgNVHSMEGDAWgBQLNiu+5nuSm7UCoq0B GhqnwA1XuzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNzgvQ3pZcnZ1WjdrcHUxQXFLdEFSb2FwOEFOVjdzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ3pZcnZ1WjdrcHUxQXFLdEFSb2Fw OEFOVjdzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjc4L1NDQmFxM3dCLXE4NG4tYndTLVdTSm5aMWRCcy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkA8eAcgMwDQYJKoZIhvcNAQELBQADggEBAAIS6pfz8Of+91zKq6m4 NE5ljm+N1RzofFVHoeHyCME9izGopJ/KpU/v2Fz95c9n1lMAeWLmwqcJf0z8a9j4 A7JPPgEzhB5VDUGPAv2rZ7km2dDwf67XLTepLAr3/WnJB+y2qi7pS/+l+UWiblr0 3VtfbyDS7HqU793o/Rh5B3wxPI6S7HO9iuWVn2BCVzjCaNHaPsVbsP+nDVR8R/// HGwvVXRSOK27Qpixqq88NBS1oHrRPCNePIRw6jpga7nly3PD03YztvBvwEk5KHxK l4baiIPPUJV33JkwXRjRE5+r00v2pUJqGRR+LZn9pvaXS+g4WgkksJpjjrqL6Fjq 9UU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:35:26 2025 by rpki-client