$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30422/P9hpHmpngMMHmi2qFuQe5aJ4uCo.roa File: P9hpHmpngMMHmi2qFuQe5aJ4uCo.roa (raw, json) Hash identifier: mBVVKFg0Ub3V9k3HiMGMAXgpgetOj9tq2LoHO37mDzw= Subject key identifier: 3F:D8:69:1E:6A:67:80:C3:07:9A:2D:AA:16:E4:1E:E5:A2:78:B8:2A Certificate issuer: /CN=2D9D92F83F5E0CEF5FEADDBE34A8FB908DA18D14 Certificate serial: 22 Authority key identifier: 2D:9D:92:F8:3F:5E:0C:EF:5F:EA:DD:BE:34:A8:FB:90:8D:A1:8D:14 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30422/P9hpHmpngMMHmi2qFuQe5aJ4uCo.roa Signing time: Fri 01 Aug 2025 01:36:07 +0000 ROA not before: Fri 01 Aug 2025 01:36:07 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 151371 IP address blocks: 2401:c20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30422/LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30422/LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D92F83F5E0CEF5FEADDBE34A8FB908DA18D14 Validity Not Before: Aug 1 01:36:07 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=3FD8691E6A6780C3079A2DAA16E41EE5A278B82A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:09:cb:3b:25:0d:f9:5f:59:d5:a7:be:a4:a4: 31:11:0a:2e:0b:d6:dd:fa:f6:6a:0d:a7:ab:67:a5: 2b:dc:fb:8b:1b:13:33:79:ec:bc:c0:77:77:ea:d0: 6e:89:3a:1b:8b:e7:30:d0:b5:cf:ac:a8:8b:29:0f: 18:7a:26:91:fe:3f:68:38:87:59:9d:fc:95:3f:86: b7:d2:71:55:0d:38:e4:4d:f5:19:25:dd:fd:16:18: fd:12:c4:91:31:43:ae:ca:5e:c3:d0:cd:07:d7:75: 0a:c6:68:83:12:c1:87:e3:d9:09:7f:93:fe:f0:dd: 34:21:ed:92:99:15:e1:ab:33:5b:21:a5:f7:7e:fe: 49:ac:7d:26:0a:73:17:f0:be:12:04:28:f3:99:d8: a8:48:a6:86:6c:06:eb:34:b5:67:4a:53:f5:ec:6b: 0d:9a:bc:98:7f:f0:89:47:e3:a9:7a:c9:3d:ad:c8: 77:d5:95:2e:50:3b:5d:a3:fd:87:bc:1a:b4:1d:42: cc:53:42:a4:b7:c7:70:06:01:ab:28:2a:80:f3:a9: b0:93:fa:a6:a6:2e:63:c1:a4:c3:6f:2b:d9:61:11: 50:eb:1a:0e:6c:42:c0:32:ec:82:ea:d1:fb:2a:05: 21:44:35:9f:f1:50:79:99:55:e6:3c:92:46:18:bc: 93:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D8:69:1E:6A:67:80:C3:07:9A:2D:AA:16:E4:1E:E5:A2:78:B8:2A X509v3 Authority Key Identifier: keyid:2D:9D:92:F8:3F:5E:0C:EF:5F:EA:DD:BE:34:A8:FB:90:8D:A1:8D:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30422/LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LZ2S-D9eDO9f6t2-NKj7kI2hjRQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30422/P9hpHmpngMMHmi2qFuQe5aJ4uCo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:c20::/32 Signature Algorithm: sha256WithRSAEncryption 4c:03:2f:fb:eb:cf:a8:b4:2b:fd:7d:cc:84:7d:2b:e0:08:f9: 0f:ae:e1:42:f6:2f:df:e9:b1:95:1a:63:11:15:e6:97:71:51: 52:4b:e1:62:96:d8:46:06:88:fe:a6:6c:b2:09:5b:0c:86:73: f1:1b:e2:a6:9e:06:94:ed:12:92:a9:0c:85:a9:51:f5:f3:6d: 7b:2f:bb:df:63:0a:0a:46:1b:eb:75:b2:a3:9d:ce:4a:2d:5f: 09:35:ae:87:29:5f:95:2b:2f:3b:c6:ea:10:62:a2:90:24:8e: 87:74:05:e6:f1:db:df:6d:68:00:1e:d2:27:32:0e:36:a8:cd: 88:8d:48:a2:5d:22:84:df:9a:dd:55:e1:54:ca:96:32:9c:c2: db:8e:3e:46:56:64:72:dc:f2:80:dc:f5:76:00:5b:a3:ab:2a: 89:f9:4d:1a:d1:1e:b5:c1:96:78:52:a7:8d:90:ef:03:47:51: 2a:8f:12:1e:15:31:ae:2e:38:1f:25:4d:7c:97:f2:c4:2f:7c: 4f:d2:7c:30:3f:1e:3f:af:f5:d1:7b:80:60:49:75:4d:39:e2: 94:5f:13:2e:b5:ef:94:2c:10:51:5a:18:92:7f:bd:c5:4e:e0: 9b:15:b9:c7:8b:f1:04:4a:47:dc:d5:13:c6:8f:f0:6a:17:5c: 75:bf:2a:9e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRDlE OTJGODNGNUUwQ0VGNUZFQUREQkUzNEE4RkI5MDhEQTE4RDE0MB4XDTI1MDgwMTAx MzYwN1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoM0ZEODY5MUU2QTY3ODBD MzA3OUEyREFBMTZFNDFFRTVBMjc4QjgyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANYJyzslDflfWdWnvqSkMREKLgvW3fr2ag2nq2elK9z7ixsTM3ns vMB3d+rQbok6G4vnMNC1z6yoiykPGHomkf4/aDiHWZ38lT+Gt9JxVQ045E31GSXd /RYY/RLEkTFDrspew9DNB9d1CsZogxLBh+PZCX+T/vDdNCHtkpkV4aszWyGl937+ Sax9JgpzF/C+EgQo85nYqEimhmwG6zS1Z0pT9exrDZq8mH/wiUfjqXrJPa3Id9WV LlA7XaP9h7watB1CzFNCpLfHcAYBqygqgPOpsJP6pqYuY8Gkw28r2WERUOsaDmxC wDLsgurR+yoFIUQ1n/FQeZlV5jySRhi8k10CAwEAAaOCAikwggIlMB0GA1UdDgQW BBQ/2GkeameAwweaLaoW5B7loni4KjAfBgNVHSMEGDAWgBQtnZL4P14M71/q3b40 qPuQjaGNFDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjIvTFoyUy1EOWVETzlmNnQyLU5LajdrSTJoalJRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTFoyUy1EOWVETzlmNnQyLU5Lajdr STJoalJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDIyL1A5aHBIbXBuZ01NSG1pMnFGdVFlNWFKNHVDby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAQwgMA0GCSqGSIb3DQEBCwUAA4IBAQBMAy/768+otCv9fcyEfSvg CPkPruFC9i/f6bGVGmMRFeaXcVFSS+FilthGBoj+pmyyCVsMhnPxG+KmngaU7RKS qQyFqVH18217L7vfYwoKRhvrdbKjnc5KLV8JNa6HKV+VKy87xuoQYqKQJI6HdAXm 8dvfbWgAHtInMg42qM2IjUiiXSKE35rdVeFUypYynMLbjj5GVmRy3PKA3PV2AFuj qyqJ+U0a0R61wZZ4UqeNkO8DR1EqjxIeFTGuLjgfJU18l/LEL3xP0nwwPx4/r/XR e4BgSXVNOeKUXxMute+ULBBRWhiSf73FTuCbFbnHi/EESkfc1RPGj/BqF1x1vyqe -----END CERTIFICATE-----Generated at Sun Aug 10 19:02:22 2025 by rpki-client