$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30366/wMdhXJuhUiyQCqUTEyhZ2jtyKSI.roa File: wMdhXJuhUiyQCqUTEyhZ2jtyKSI.roa (raw, json) Hash identifier: piW2PTxHbxY3dT1ZwyBKDStVO1j5N3kz08LHKiMsbcQ= Subject key identifier: C0:C7:61:5C:9B:A1:52:2C:90:0A:A5:13:13:28:59:DA:3B:72:29:22 Certificate issuer: /CN=19491CF138EC55823C7D3BE1B2EC1E4C80D5F2E5 Certificate serial: 13 Authority key identifier: 19:49:1C:F1:38:EC:55:82:3C:7D:3B:E1:B2:EC:1E:4C:80:D5:F2:E5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUkc8TjsVYI8fTvhsuweTIDV8uU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/wMdhXJuhUiyQCqUTEyhZ2jtyKSI.roa Signing time: Wed 21 May 2025 00:59:33 +0000 ROA not before: Wed 21 May 2025 00:59:33 +0000 ROA not after: Fri 15 May 2026 01:30:03 +0000 asID: 24262 IP address blocks: 2406:9b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/GUkc8TjsVYI8fTvhsuweTIDV8uU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/GUkc8TjsVYI8fTvhsuweTIDV8uU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUkc8TjsVYI8fTvhsuweTIDV8uU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19491CF138EC55823C7D3BE1B2EC1E4C80D5F2E5 Validity Not Before: May 21 00:59:33 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=C0C7615C9BA1522C900AA513132859DA3B722922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:85:df:08:91:64:c7:3e:71:d9:b3:4c:21: 77:0b:7c:e4:95:78:dd:5b:f0:10:68:26:da:a0:96: e2:05:70:04:24:23:6f:64:ef:31:9a:77:f5:c7:8e: ad:09:2d:7e:97:2a:8c:22:d6:21:f8:18:c9:61:02: f1:5a:74:11:f9:8c:50:d1:3c:b2:cf:58:f0:47:de: a7:7b:a7:c2:02:c6:c0:be:50:88:aa:11:b7:e6:b9: c3:c4:a1:e5:d8:53:b4:3f:63:f8:8f:1d:99:c2:89: d0:27:02:4f:19:a5:83:a6:91:9c:70:31:f9:ec:04: 37:4b:56:2e:e4:3e:28:d2:a1:d1:55:64:96:e2:1d: b7:35:8e:f7:ef:df:2b:d5:3d:5d:32:e4:aa:d7:a8: 69:74:35:17:a0:71:27:db:c3:ba:b2:6e:8e:2c:50: 10:75:14:31:bd:c3:d0:37:84:06:98:03:ec:a0:43: 1f:99:4d:85:aa:d3:7d:c0:c1:fd:04:4d:de:7b:ef: c5:e0:3b:94:6e:bb:36:ab:e2:b4:33:d8:42:78:2e: b6:99:78:70:bf:bf:ee:83:3d:7a:59:cb:0f:8a:e6: 4f:2a:bf:8c:ca:a1:ab:f4:b7:c5:22:f1:79:41:67: 54:de:28:d1:ca:fb:4d:4b:4c:37:92:88:ca:f9:01: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C7:61:5C:9B:A1:52:2C:90:0A:A5:13:13:28:59:DA:3B:72:29:22 X509v3 Authority Key Identifier: keyid:19:49:1C:F1:38:EC:55:82:3C:7D:3B:E1:B2:EC:1E:4C:80:D5:F2:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/GUkc8TjsVYI8fTvhsuweTIDV8uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUkc8TjsVYI8fTvhsuweTIDV8uU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/wMdhXJuhUiyQCqUTEyhZ2jtyKSI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 77:7f:62:77:a0:bd:a4:b4:49:a6:cb:9f:19:8e:9d:ae:6d:73: 13:3c:31:e9:50:ba:a8:4d:e4:20:70:8b:85:2c:13:4b:d1:9c: 28:b4:86:7f:54:a6:39:16:1b:b0:20:b8:2a:03:b9:22:6a:b3: 1d:1f:60:e2:99:36:66:17:7d:9c:ba:9a:84:3e:2c:7a:e4:09: 3f:20:61:d7:44:af:90:d9:bc:02:5f:3c:55:08:69:95:36:49: 0d:06:05:b4:48:71:bc:0c:ef:e7:c8:38:ee:45:a1:1d:0b:d9: 13:83:f5:18:b5:44:ed:7b:bb:75:b8:23:56:32:1d:d2:ab:a4: 3b:0f:a6:81:66:32:d9:77:56:c6:eb:f9:7c:86:44:81:35:29: c5:c4:47:d0:ed:a1:d7:7e:dc:b0:9b:fa:48:d0:06:ba:10:33: e4:25:bd:9c:3a:2d:ce:34:1d:9d:fa:23:a1:45:8d:8e:27:3a: 95:27:cc:33:8b:6f:bb:01:16:b4:57:de:0d:5b:c2:a6:52:71: 6e:9c:57:e9:d5:df:9f:42:e8:57:8f:4e:c1:c6:25:ec:77:1f: 05:84:21:06:9f:f8:f0:18:3c:e4:5f:b4:20:ea:fe:dd:8b:23: 10:bd:0d:a2:9d:3e:3e:51:4d:96:aa:39:cc:c7:1d:ab:a5:2c: 57:e6:91:c4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOTQ5 MUNGMTM4RUM1NTgyM0M3RDNCRTFCMkVDMUU0QzgwRDVGMkU1MB4XDTI1MDUyMTAw NTkzM1oXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoQzBDNzYxNUM5QkExNTIy QzkwMEFBNTEzMTMyODU5REEzQjcyMjkyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMt0hd8IkWTHPnHZs0whdwt85JV43VvwEGgm2qCW4gVwBCQjb2Tv MZp39ceOrQktfpcqjCLWIfgYyWEC8Vp0EfmMUNE8ss9Y8Efep3unwgLGwL5QiKoR t+a5w8Sh5dhTtD9j+I8dmcKJ0CcCTxmlg6aRnHAx+ewEN0tWLuQ+KNKh0VVkluId tzWO9+/fK9U9XTLkqteoaXQ1F6BxJ9vDurJujixQEHUUMb3D0DeEBpgD7KBDH5lN harTfcDB/QRN3nvvxeA7lG67NqvitDPYQngutpl4cL+/7oM9elnLD4rmTyq/jMqh q/S3xSLxeUFnVN4o0cr7TUtMN5KIyvkBFHMCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTAx2Fcm6FSLJAKpRMTKFnaO3IpIjAfBgNVHSMEGDAWgBQZSRzxOOxVgjx9O+Gy 7B5MgNXy5TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNjYvR1VrYzhUanNWWUk4ZlR2aHN1d2VUSURWOHVVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR1VrYzhUanNWWUk4ZlR2aHN1d2VU SURWOHVVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzY2L3dNZGhYSnVoVWl5UUNxVVRFeWhaMmp0eUtTSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBptAMA0GCSqGSIb3DQEBCwUAA4IBAQB3f2J3oL2ktEmmy58Zjp2u bXMTPDHpULqoTeQgcIuFLBNL0ZwotIZ/VKY5FhuwILgqA7kiarMdH2DimTZmF32c upqEPix65Ak/IGHXRK+Q2bwCXzxVCGmVNkkNBgW0SHG8DO/nyDjuRaEdC9kTg/UY tUTte7t1uCNWMh3Sq6Q7D6aBZjLZd1bG6/l8hkSBNSnFxEfQ7aHXftywm/pI0Aa6 EDPkJb2cOi3ONB2d+iOhRY2OJzqVJ8wzi2+7ARa0V94NW8KmUnFunFfp1d+fQuhX j07BxiXsdx8FhCEGn/jwGDzkX7Qg6v7diyMQvQ2inT4+UU2WqjnMxx2rpSxX5pHE -----END CERTIFICATE-----Generated at Thu Nov 6 07:34:22 2025 by rpki-client