$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nrQp7yjxSWPwhUYIfMmx6A42WOw.roa File: nrQp7yjxSWPwhUYIfMmx6A42WOw.roa (raw, json) Hash identifier: vLZY0EJXHAE9yWoOd+s8xAbymhAsi2HgKx1TXk7Gb/c= Subject key identifier: 9E:B4:29:EF:28:F1:49:63:F0:85:46:08:7C:C9:B1:E8:0E:36:58:EC Certificate issuer: /CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B Certificate serial: 23 Authority key identifier: 9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nrQp7yjxSWPwhUYIfMmx6A42WOw.roa Signing time: Fri 01 Aug 2025 01:36:14 +0000 ROA not before: Fri 01 Aug 2025 01:36:14 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 2402:3000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B Validity Not Before: Aug 1 01:36:14 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=9EB429EF28F14963F08546087CC9B1E80E3658EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:d2:2e:76:d4:67:ee:1c:f3:b4:6a:b4:b7: 91:37:a4:42:76:dc:95:73:e4:4f:11:cd:de:9d:d9: c2:f8:7f:68:9c:67:a5:1c:df:d6:cd:04:5a:95:57: 77:f2:75:f1:41:22:49:8d:d5:db:1b:38:dc:9a:82: b6:84:ab:56:d9:05:f7:70:99:93:3c:3e:9a:67:e5: 5e:14:8e:db:3e:c6:77:4f:6e:b8:a0:45:71:7e:9a: 8a:9a:b1:75:e3:26:06:e9:3c:e5:67:d7:ac:bd:56: b8:3c:f3:16:5d:aa:47:e5:a6:44:38:ed:68:78:a7: b4:f0:51:26:dc:4b:f6:59:60:b6:96:8d:9c:33:20: c6:99:f2:19:ea:fa:f0:d2:59:82:74:f0:d5:69:46: 45:94:d6:7d:bb:46:93:96:50:f1:9b:0d:98:75:a0: 5a:82:31:9c:3f:2b:36:9e:71:3e:34:9a:4b:08:2e: 81:6c:14:19:7d:7c:c7:db:db:85:a2:f0:0b:a2:1e: f7:aa:96:71:95:16:8f:8b:32:2c:d6:76:af:d6:e9: 90:e9:48:3f:45:85:1d:9a:48:7a:dd:a3:96:6e:85: 42:14:db:98:11:8f:2a:78:f9:56:01:a6:51:3c:d9: 67:cc:f5:ed:d2:05:26:d1:66:7d:66:3c:f6:ed:73: fd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B4:29:EF:28:F1:49:63:F0:85:46:08:7C:C9:B1:E8:0E:36:58:EC X509v3 Authority Key Identifier: keyid:9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nrQp7yjxSWPwhUYIfMmx6A42WOw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3000::/32 Signature Algorithm: sha256WithRSAEncryption 68:c9:1d:cf:6d:af:1f:88:6f:53:f7:4b:9d:3d:41:10:a0:ba: 30:d3:a1:e9:cf:d4:50:07:71:3d:1a:de:21:f2:db:4b:f0:49: 4c:42:5d:6f:c9:9a:5a:52:eb:25:ab:f7:95:c9:f8:88:69:10: dd:c7:c2:f1:0e:6a:e0:8e:0e:3e:7e:0f:47:a2:72:e5:f7:b0: b4:fc:fc:2c:1a:90:08:cd:13:64:62:ab:59:6e:cf:8f:97:a2: c8:ff:fe:93:ef:97:f1:07:e0:4b:8e:69:b5:20:ca:2d:3e:09: 2c:a9:90:1d:06:0b:1c:0d:06:dc:0c:1b:b1:fd:5c:a0:95:64: fe:5e:2e:dc:24:1f:9b:32:ee:6e:da:e8:02:30:0c:26:67:3f: 72:43:58:59:58:b6:96:03:5e:fa:41:81:f0:a9:1f:02:55:b1: 34:aa:d7:76:36:bc:6a:d6:fa:74:34:cf:36:3d:a1:ae:2d:7d: e1:f6:8a:3e:8d:b0:ed:c3:21:5a:f2:77:d9:f9:8d:0b:fc:68: e7:1c:bb:3e:14:e2:8d:65:a8:dd:d7:65:ed:81:89:8b:a9:28: 22:c9:00:6b:8c:f4:54:39:b3:4e:09:40:61:d3:2e:f0:46:75: 4d:70:2e:bc:f3:71:a8:9e:dc:32:9a:43:3e:29:bb:49:b8:de: 28:17:ec:95 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RDgy NDQwNDlEOUJDQkJCOUY1ODdBRDNBMzRDNjhDNDBGRDhDQjZCMB4XDTI1MDgwMTAx MzYxNFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoOUVCNDI5RUYyOEYxNDk2 M0YwODU0NjA4N0NDOUIxRTgwRTM2NThFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALNq0i521GfuHPO0arS3kTekQnbclXPkTxHN3p3Zwvh/aJxnpRzf 1s0EWpVXd/J18UEiSY3V2xs43JqCtoSrVtkF93CZkzw+mmflXhSO2z7Gd09uuKBF cX6aipqxdeMmBuk85WfXrL1WuDzzFl2qR+WmRDjtaHintPBRJtxL9llgtpaNnDMg xpnyGer68NJZgnTw1WlGRZTWfbtGk5ZQ8ZsNmHWgWoIxnD8rNp5xPjSaSwgugWwU GX18x9vbhaLwC6Ie96qWcZUWj4syLNZ2r9bpkOlIP0WFHZpIet2jlm6FQhTbmBGP Knj5VgGmUTzZZ8z17dIFJtFmfWY89u1z/TcCAwEAAaOCAikwggIlMB0GA1UdDgQW BBSetCnvKPFJY/CFRgh8ybHoDjZY7DAfBgNVHSMEGDAWgBSdgkQEnZvLu59YetOj TGjED9jLazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMDYvbllKRUJKMmJ5N3VmV0hyVG8weG94QV9ZeTJzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbllKRUJKMmJ5N3VmV0hyVG8weG94 QV9ZeTJzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzA2L25yUXA3eWp4U1dQd2hVWUlmTW14NkE0MldPdy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBoyR3Pba8fiG9T90udPUEQ oLow06Hpz9RQB3E9Gt4h8ttL8ElMQl1vyZpaUuslq/eVyfiIaRDdx8LxDmrgjg4+ fg9HonLl97C0/PwsGpAIzRNkYqtZbs+Pl6LI//6T75fxB+BLjmm1IMotPgksqZAd BgscDQbcDBux/VyglWT+Xi7cJB+bMu5u2ugCMAwmZz9yQ1hZWLaWA176QYHwqR8C VbE0qtd2Nrxq1vp0NM82PaGuLX3h9oo+jbDtwyFa8nfZ+Y0L/GjnHLs+FOKNZajd 12XtgYmLqSgiyQBrjPRUObNOCUBh0y7wRnVNcC6883GontwymkM+KbtJuN4oF+yV -----END CERTIFICATE-----Generated at Wed Nov 5 18:53:53 2025 by rpki-client