$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/-U15RRlkNOGI-LaGKnb-ITA6wsE.roa File: -U15RRlkNOGI-LaGKnb-ITA6wsE.roa (raw, json) Hash identifier: 1p4idh+CQxb8LhM7usUuk7kW88vMpIKoD3580ggiRus= Subject key identifier: F9:4D:79:45:19:64:34:E1:88:F8:B6:86:2A:76:FE:21:30:3A:C2:C1 Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C Certificate serial: 20 Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/-U15RRlkNOGI-LaGKnb-ITA6wsE.roa Signing time: Mon 01 Sep 2025 01:31:52 +0000 ROA not before: Mon 01 Sep 2025 01:31:52 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 9354 IP address blocks: 221.118.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C Validity Not Before: Sep 1 01:31:52 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=F94D7945196434E188F8B6862A76FE21303AC2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:ef:2a:ab:78:a8:90:23:e8:48:ec:96:fb: 11:07:bd:6d:b8:4a:fe:22:c4:93:56:8d:1c:e5:d7: e6:a9:14:1d:ac:a8:ee:8b:58:3e:da:0e:64:6a:f8: e2:01:38:a4:77:40:46:16:87:a6:cc:49:f3:47:13: 05:48:62:c6:43:fd:b2:7b:5a:b4:de:f7:3c:f2:5f: 35:fd:8d:8f:0f:34:6f:c5:49:b8:ca:d0:60:f2:33: 3a:f0:35:f9:08:2b:98:a5:aa:9b:1a:83:da:14:aa: 43:74:13:68:f0:28:e5:40:5f:01:51:bb:1f:17:a9: cb:b9:d1:2e:79:09:07:d4:1c:1c:6d:80:b0:66:31: 40:ef:c1:79:17:72:27:1b:d8:ef:25:be:5a:70:d6: 4f:aa:c9:7f:2e:f9:9c:a1:ca:b6:85:f0:9c:6a:d3: ce:80:9e:e4:ff:69:c9:8d:64:5f:65:97:3b:d1:87: 71:9c:a9:60:b0:2e:be:5c:4b:20:e3:c7:d0:fc:5a: eb:9a:b4:cc:90:90:6b:89:0c:73:1b:f0:48:6d:91: 7a:f8:cd:da:fb:a5:a6:bc:06:22:a4:15:4b:63:0c: 0c:2d:18:32:ab:b9:23:89:40:04:c9:6b:2c:6c:d7: 4f:dd:5c:35:1a:2e:34:b4:55:2b:8f:5b:c0:39:98: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4D:79:45:19:64:34:E1:88:F8:B6:86:2A:76:FE:21:30:3A:C2:C1 X509v3 Authority Key Identifier: keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/-U15RRlkNOGI-LaGKnb-ITA6wsE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.118.0.0/18 Signature Algorithm: sha256WithRSAEncryption 42:1e:4e:32:bb:70:a9:00:2e:4d:6d:a4:4d:f1:76:6b:51:0b: ea:f8:3f:91:97:96:3b:7f:8c:b7:9d:88:72:3b:68:26:3a:3b: 02:26:31:88:67:b1:46:bf:c2:39:cc:fe:9a:3e:74:e0:30:e0: 7e:e1:0e:64:5d:ab:60:39:a9:ae:29:0c:a0:dc:c0:04:e6:69: d8:20:28:02:c1:f8:e6:28:a6:be:e0:66:61:bf:59:71:6a:4c: 43:e2:e2:3c:23:ea:ac:51:6d:22:5f:86:35:2b:e7:9a:d2:83: 3b:e6:6b:f0:6b:bb:21:41:60:43:4d:93:83:eb:81:1d:58:e4: 2e:64:a4:c5:ff:b5:e6:8c:71:c0:df:8b:a6:d3:b2:57:ff:46: 4e:03:c6:0e:dd:1c:1f:f8:3c:3e:98:1b:25:d3:84:11:15:be: 4e:9e:34:e1:81:bf:84:9c:f4:e7:5e:29:9c:3b:a4:d6:a2:a4: 3f:bb:29:2e:8f:9b:80:4e:32:ab:2d:7a:ff:77:ee:8c:ad:ce: a0:69:6e:da:7b:79:e7:ca:9a:09:79:49:fe:45:b9:1c:ef:ed: 58:4f:ca:47:35:86:98:31:a7:bb:a0:29:c4:ed:0e:9b:5f:09: 2f:f7:c0:5d:a6:a2:67:0d:aa:a2:ae:19:cb:0b:26:19:a7:0b: c8:60:8f:e2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI1MDkwMTAx MzE1MloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRjk0RDc5NDUxOTY0MzRF MTg4RjhCNjg2MkE3NkZFMjEzMDNBQzJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL7K7yqreKiQI+hI7Jb7EQe9bbhK/iLEk1aNHOXX5qkUHayo7otY PtoOZGr44gE4pHdARhaHpsxJ80cTBUhixkP9sntatN73PPJfNf2Njw80b8VJuMrQ YPIzOvA1+QgrmKWqmxqD2hSqQ3QTaPAo5UBfAVG7Hxepy7nRLnkJB9QcHG2AsGYx QO/BeRdyJxvY7yW+WnDWT6rJfy75nKHKtoXwnGrTzoCe5P9pyY1kX2WXO9GHcZyp YLAuvlxLIOPH0Pxa65q0zJCQa4kMcxvwSG2RevjN2vulprwGIqQVS2MMDC0YMqu5 I4lABMlrLGzXT91cNRouNLRVK49bwDmYni8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBT5TXlFGWQ04Yj4toYqdv4hMDrCwTAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD +TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMTEvLVUxNVJSbGtOT0dJLUxhR0tuYi1JVEE2d3NFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBt12ADANBgkqhkiG9w0BAQsFAAOCAQEAQh5OMrtwqQAuTW2kTfF2a1EL6vg/ kZeWO3+Mt52IcjtoJjo7AiYxiGexRr/COcz+mj504DDgfuEOZF2rYDmprikMoNzA BOZp2CAoAsH45iimvuBmYb9ZcWpMQ+LiPCPqrFFtIl+GNSvnmtKDO+Zr8Gu7IUFg Q02Tg+uBHVjkLmSkxf+15oxxwN+LptOyV/9GTgPGDt0cH/g8PpgbJdOEERW+Tp40 4YG/hJz0514pnDuk1qKkP7spLo+bgE4yqy16/3fujK3OoGlu2nt558qaCXlJ/kW5 HO/tWE/KRzWGmDGnu6ApxO0Om18JL/fAXaaiZw2qoq4ZywsmGacLyGCP4g== -----END CERTIFICATE-----Generated at Wed Nov 5 08:07:22 2025 by rpki-client