$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30413/fF3sgtyh_JPOZax81V34eFItWTM.roa File: fF3sgtyh_JPOZax81V34eFItWTM.roa (raw, json) Hash identifier: AlVAt7M/UicQLJsAzb3ASgWYfkLteNpAbDSZdE7+0kA= Subject key identifier: 7C:5D:EC:82:DC:A1:FC:93:CE:65:AC:7C:D5:5D:F8:78:52:2D:59:33 Certificate issuer: /CN=6A137C41EFB32248F58A4EAB898F5DE0F2A3BAD3 Certificate serial: 2E Authority key identifier: 6A:13:7C:41:EF:B3:22:48:F5:8A:4E:AB:89:8F:5D:E0:F2:A3:BA:D3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/fF3sgtyh_JPOZax81V34eFItWTM.roa Signing time: Wed 01 Oct 2025 01:31:43 +0000 ROA not before: Wed 01 Oct 2025 01:31:43 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 63797 IP address blocks: 2400:c7e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A137C41EFB32248F58A4EAB898F5DE0F2A3BAD3 Validity Not Before: Oct 1 01:31:43 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=7C5DEC82DCA1FC93CE65AC7CD55DF878522D5933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:85:98:5c:9f:91:5a:04:2a:36:be:81:05: d9:ef:f9:14:73:88:83:a2:e2:73:20:54:f3:02:bd: f4:21:61:b2:84:bb:c9:2d:be:fb:b7:25:48:da:92: 36:7a:7d:f8:ae:01:da:e4:25:21:90:bb:e6:ec:3d: 3a:76:4c:b2:fd:cf:18:bb:3c:14:be:01:02:ca:bb: 18:60:f9:ca:f0:43:cc:f6:9a:a4:68:03:e7:9a:bc: 93:41:f2:20:f7:f1:c3:db:b3:6e:d0:5e:71:8a:d4: 62:28:e4:29:92:8b:5d:f7:cc:fc:cc:05:1b:af:be: 7c:20:c5:4e:29:90:8f:9a:71:f5:62:f9:d6:ba:fb: 90:cd:c6:b5:6a:08:82:35:74:82:c2:59:4e:8f:f0: 1c:4f:99:ce:8b:19:50:00:be:1f:79:8b:7c:90:63: da:66:68:47:30:75:48:96:4d:62:f7:8d:be:a0:19: 11:18:04:ce:1c:b3:15:5b:4a:83:b9:d2:79:c0:bb: 17:8c:96:d7:5e:f3:49:2e:5e:25:7f:61:87:da:2f: c1:47:99:71:6e:f3:e8:b1:80:4e:8d:c8:31:f4:e9: f7:e4:04:c9:c6:63:ae:cd:20:a1:a5:57:66:7a:39: d9:36:e2:60:0c:2b:b4:a7:92:a6:cf:aa:c6:f5:bc: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5D:EC:82:DC:A1:FC:93:CE:65:AC:7C:D5:5D:F8:78:52:2D:59:33 X509v3 Authority Key Identifier: keyid:6A:13:7C:41:EF:B3:22:48:F5:8A:4E:AB:89:8F:5D:E0:F2:A3:BA:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/fF3sgtyh_JPOZax81V34eFItWTM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:c7e0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:10:91:9b:7d:46:a9:86:01:7e:1b:26:ff:e3:47:7b:11:bc: 18:82:c5:13:43:f3:70:ea:d0:f3:21:6e:e4:00:03:1f:f4:14: 69:f5:90:6f:2d:67:8d:a1:c2:32:17:84:25:93:1e:e0:c4:2c: c6:c1:13:19:c4:cf:68:47:26:5b:fb:d0:8b:69:45:22:72:08: c9:e8:eb:ce:a3:1d:a0:f8:8d:54:ff:20:44:e2:cd:54:05:4d: fc:31:de:98:22:9d:89:f9:42:80:9d:8e:2b:57:8d:ef:f5:c3: e7:7a:33:93:17:0e:2a:10:a4:11:fb:ce:42:9c:25:49:5e:5e: 0b:66:db:8f:22:f9:82:ab:e4:be:9e:11:9c:cb:1b:31:8e:8d: 7f:f5:c5:c0:78:9a:f3:98:d3:54:3d:b5:ee:1d:54:ff:a7:2a: e6:75:63:0e:db:0d:e4:b0:21:55:84:86:db:b3:38:3f:1b:9a: 4e:26:01:55:86:ca:6d:14:78:45:a6:3c:40:2b:f8:15:4e:17: aa:94:b0:12:8f:39:a8:ec:bd:6d:00:fe:83:04:e4:f4:7b:78: 91:ee:bc:4b:49:d7:0f:80:45:47:81:09:95:33:86:72:b8:5b: 63:05:22:44:be:6b:42:6f:b8:8e:79:a7:e2:a4:d6:33:6c:34: e3:85:9f:96 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTEz N0M0MUVGQjMyMjQ4RjU4QTRFQUI4OThGNURFMEYyQTNCQUQzMB4XDTI1MTAwMTAx MzE0M1oXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoN0M1REVDODJEQ0ExRkM5 M0NFNjVBQzdDRDU1REY4Nzg1MjJENTkzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMMXhZhcn5FaBCo2voEF2e/5FHOIg6LicyBU8wK99CFhsoS7yS2+ +7clSNqSNnp9+K4B2uQlIZC75uw9OnZMsv3PGLs8FL4BAsq7GGD5yvBDzPaapGgD 55q8k0HyIPfxw9uzbtBecYrUYijkKZKLXffM/MwFG6++fCDFTimQj5px9WL51rr7 kM3GtWoIgjV0gsJZTo/wHE+ZzosZUAC+H3mLfJBj2mZoRzB1SJZNYveNvqAZERgE zhyzFVtKg7nSecC7F4yW117zSS5eJX9hh9ovwUeZcW7z6LGATo3IMfTp9+QEycZj rs0goaVXZno52TbiYAwrtKeSps+qxvW8zrMCAwEAAaOCAikwggIlMB0GA1UdDgQW BBR8XeyC3KH8k85lrHzVXfh4Ui1ZMzAfBgNVHSMEGDAWgBRqE3xB77MiSPWKTquJ j13g8qO60zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MTMvYWhOOFFlLXpJa2oxaWs2cmlZOWQ0UEtqdXRNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWhOOFFlLXpJa2oxaWs2cmlZOWQ0 UEtqdXRNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDEzL2ZGM3NndHloX0pQT1pheDgxVjM0ZUZJdFdUTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAMfgMA0GCSqGSIb3DQEBCwUAA4IBAQCLEJGbfUaphgF+Gyb/40d7 EbwYgsUTQ/Nw6tDzIW7kAAMf9BRp9ZBvLWeNocIyF4Qlkx7gxCzGwRMZxM9oRyZb +9CLaUUicgjJ6OvOox2g+I1U/yBE4s1UBU38Md6YIp2J+UKAnY4rV43v9cPnejOT Fw4qEKQR+85CnCVJXl4LZtuPIvmCq+S+nhGcyxsxjo1/9cXAeJrzmNNUPbXuHVT/ pyrmdWMO2w3ksCFVhIbbszg/G5pOJgFVhsptFHhFpjxAK/gVTheqlLASjzmo7L1t AP6DBOT0e3iR7rxLSdcPgEVHgQmVM4ZyuFtjBSJEvmtCb7iOeafipNYzbDTjhZ+W -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:08 2025 by rpki-client