$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30442/DwLyyqMmXSTgEgf-c5qrftBu9rE.roa File: DwLyyqMmXSTgEgf-c5qrftBu9rE.roa (raw, json) Hash identifier: 6yw3iUgU9ebD4thHjWSVd6fFfUMVfbgLRdBIjTgUlFI= Subject key identifier: 0F:02:F2:CA:A3:26:5D:24:E0:12:07:FE:73:9A:AB:7E:D0:6E:F6:B1 Certificate issuer: /CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Certificate serial: 13 Authority key identifier: FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/DwLyyqMmXSTgEgf-c5qrftBu9rE.roa Signing time: Tue 04 Nov 2025 06:22:55 +0000 ROA not before: Tue 04 Nov 2025 06:22:55 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 45681 IP address blocks: 2401:d220::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Validity Not Before: Nov 4 06:22:55 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=0F02F2CAA3265D24E01207FE739AAB7ED06EF6B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c4:a8:3f:a5:7d:50:6a:c4:69:f9:35:a8:53: 55:b1:e7:02:45:e3:55:b1:d4:ef:bb:74:83:a0:e9: 31:93:73:cd:84:9e:43:eb:a4:42:25:a9:03:bf:67: 5a:b8:47:c4:10:de:d4:3f:f7:2c:33:e5:ad:56:ad: 17:c1:f7:11:b4:f6:13:a3:7f:35:41:7b:1f:63:7c: 35:b9:f8:5b:91:8e:bf:e7:3e:cd:19:79:a0:d3:45: 0b:4d:2d:97:24:9c:22:95:51:d9:72:b9:a6:8a:a4: b8:15:7d:3f:5b:60:4b:99:7d:4a:5c:e7:47:a9:2f: c9:0d:bd:c8:29:f6:16:12:9d:32:06:01:d6:f1:c9: 55:76:ca:99:e9:03:28:85:76:e9:0f:bd:31:ff:fb: b8:ff:93:69:d3:6c:23:23:04:62:77:92:fd:05:f9: c9:ba:b6:cf:cc:b2:a5:de:b3:77:28:95:55:83:ad: 0b:e0:e3:38:8d:1c:d4:3e:56:14:9e:c7:61:b4:58: d7:2d:a9:8e:67:29:1f:f0:c9:76:aa:e3:18:25:8f: ae:68:3e:e8:95:4e:45:07:0d:e3:cc:38:ad:8e:30: 3e:56:bd:2b:39:cf:2c:9a:6a:99:38:d9:31:0e:ad: 92:68:75:d0:68:58:83:8c:86:ee:d0:45:9c:20:91: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:02:F2:CA:A3:26:5D:24:E0:12:07:FE:73:9A:AB:7E:D0:6E:F6:B1 X509v3 Authority Key Identifier: keyid:FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/DwLyyqMmXSTgEgf-c5qrftBu9rE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d220::/32 Signature Algorithm: sha256WithRSAEncryption 85:df:4d:99:6e:43:6d:7c:1f:c8:62:b8:ef:f0:e3:d2:42:0b: 74:ac:00:79:19:53:4f:36:de:11:df:b9:40:4c:98:27:9c:63: 92:a6:d2:e9:de:ae:96:c2:92:d7:92:1f:d1:ab:33:63:26:40: 42:da:97:0a:1a:63:b0:25:77:02:fa:d1:5f:9f:98:7a:20:99: 31:f9:e0:28:18:a7:13:d2:12:ed:5b:32:67:c5:1b:e2:78:5e: c3:0d:af:32:fc:9d:ac:e0:7c:df:2a:eb:2c:14:84:12:9a:bc: 47:96:59:31:b8:84:3e:45:65:a2:9e:05:ef:19:d8:8a:81:29: a3:7e:34:53:c9:01:da:cb:79:c4:12:f5:98:77:67:c1:30:df: 94:6c:28:9c:ab:7a:54:0c:4b:39:6d:44:d2:1f:32:9e:f6:b0: ee:c1:59:69:f7:95:8e:c8:b3:6e:6d:ce:17:3c:f5:a4:b6:25: 8c:30:27:88:0e:f1:a4:cc:b5:b4:9c:53:53:53:bf:ae:cc:11: c5:6b:1c:ba:58:12:37:8e:2c:5c:c8:ab:af:a4:b2:15:8a:fa: ee:8a:0d:c4:13:53:e2:fe:b8:2c:48:e5:87:86:fe:08:eb:8d: d3:d9:d1:bf:e6:a8:b1:75:2c:6a:9d:de:6f:fa:81:1d:b2:52: c1:c5:2f:c5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQzBC MDM3MjY0N0EyNDREMTBCOEQ4MjRBRTBCNTA3NzZENjQ2NUVBMB4XDTI1MTEwNDA2 MjI1NVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMEYwMkYyQ0FBMzI2NUQy NEUwMTIwN0ZFNzM5QUFCN0VEMDZFRjZCMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN3EqD+lfVBqxGn5NahTVbHnAkXjVbHU77t0g6DpMZNzzYSeQ+uk QiWpA79nWrhHxBDe1D/3LDPlrVatF8H3EbT2E6N/NUF7H2N8Nbn4W5GOv+c+zRl5 oNNFC00tlyScIpVR2XK5poqkuBV9P1tgS5l9SlznR6kvyQ29yCn2FhKdMgYB1vHJ VXbKmekDKIV26Q+9Mf/7uP+TadNsIyMEYneS/QX5ybq2z8yypd6zdyiVVYOtC+Dj OI0c1D5WFJ7HYbRY1y2pjmcpH/DJdqrjGCWPrmg+6JVORQcN48w4rY4wPla9KznP LJpqmTjZMQ6tkmh10GhYg4yG7tBFnCCRobkCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQPAvLKoyZdJOASB/5zmqt+0G72sTAfBgNVHSMEGDAWgBT8CwNyZHokTRC42CSu C1B3bWRl6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0NDIvX0FzRGNtUjZKRTBRdU5na3JndFFkMjFrWmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX0FzRGNtUjZKRTBRdU5na3JndFFk MjFrWmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDQyL0R3THl5cU1tWFNUZ0VnZi1jNXFyZnRCdTlyRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAdIgMA0GCSqGSIb3DQEBCwUAA4IBAQCF302ZbkNtfB/IYrjv8OPS Qgt0rAB5GVNPNt4R37lATJgnnGOSptLp3q6WwpLXkh/RqzNjJkBC2pcKGmOwJXcC +tFfn5h6IJkx+eAoGKcT0hLtWzJnxRvieF7DDa8y/J2s4HzfKussFIQSmrxHllkx uIQ+RWWingXvGdiKgSmjfjRTyQHay3nEEvWYd2fBMN+UbCicq3pUDEs5bUTSHzKe 9rDuwVlp95WOyLNubc4XPPWktiWMMCeIDvGkzLW0nFNTU7+uzBHFaxy6WBI3jixc yKuvpLIVivruig3EE1Pi/rgsSOWHhv4I643T2dG/5qixdSxqnd5v+oEdslLBxS/F -----END CERTIFICATE-----Generated at Wed Nov 5 04:41:13 2025 by rpki-client