$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/-9JaxDwswvAQjLzAyiNRz8teJUk.roa File: -9JaxDwswvAQjLzAyiNRz8teJUk.roa (raw, json) Hash identifier: dD0c/M+2IH7N5f3WVM7gw3CAfv7/BaSsrCe8z7BT1RI= Subject key identifier: FB:D2:5A:C4:3C:2C:C2:F0:10:8C:BC:C0:CA:23:51:CF:CB:5E:25:49 Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Certificate serial: 18 Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/-9JaxDwswvAQjLzAyiNRz8teJUk.roa Signing time: Tue 01 Apr 2025 01:31:17 +0000 ROA not before: Tue 01 Apr 2025 01:31:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 17955 IP address blocks: 203.223.48.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Validity Not Before: Apr 1 01:31:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=FBD25AC43C2CC2F0108CBCC0CA2351CFCB5E2549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:48:b1:b3:3c:43:6f:77:3a:ad:b5:43:26: 01:62:a0:f4:88:95:b6:a4:27:fb:70:ee:ad:73:64: b8:eb:4c:76:ca:f7:5c:9c:eb:9b:65:c0:81:ac:21: a1:1c:27:4e:27:58:6c:f7:b2:e9:bf:a6:86:a9:c3: f7:39:09:15:95:05:35:ee:65:b4:7c:1c:98:9c:e9: 8f:09:1f:e4:02:66:31:05:a4:64:2e:f0:fe:0b:29: 3d:75:41:4d:21:57:8c:d4:3a:6e:22:d0:5b:52:66: 09:ed:0a:8e:3e:8e:3f:79:57:5a:d2:95:89:63:28: 43:dd:c4:58:5b:73:49:86:e2:c4:64:a3:c1:a9:40: 95:11:ca:46:8d:04:a6:98:3f:d8:31:0e:79:f4:fa: 82:55:31:6a:4b:fb:cd:42:c8:c3:b8:59:48:48:67: 84:cc:1b:ee:b6:b9:a9:c5:80:cc:d6:69:82:27:63: a9:f8:cf:2d:da:78:1f:de:5a:ad:87:d5:ca:ab:7b: 3b:6c:e5:63:82:3e:20:38:c2:67:9f:f6:87:7e:6c: c7:ec:9b:f9:63:37:a0:94:73:78:1b:49:79:6d:39: 70:46:35:f7:2d:94:37:91:05:a7:c5:cb:37:60:41: 37:ae:31:f4:ec:d7:49:2a:ef:1c:8d:11:3b:8e:cb: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D2:5A:C4:3C:2C:C2:F0:10:8C:BC:C0:CA:23:51:CF:CB:5E:25:49 X509v3 Authority Key Identifier: keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/-9JaxDwswvAQjLzAyiNRz8teJUk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.223.48.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:e7:c4:84:8d:fa:ff:65:42:c5:42:1b:00:53:df:99:67:e2: ef:6c:0d:bb:93:bb:16:b1:cd:00:ac:fd:e4:04:4b:dc:9b:f8: 7a:68:3a:4f:4b:0b:e2:ac:d1:0c:eb:23:b7:2b:1e:03:19:b7: 12:10:09:c7:8c:bc:c9:5b:35:c6:aa:88:d2:99:72:ab:bb:ce: 44:1d:3a:09:73:8b:0b:d1:cf:93:2c:e7:e5:3d:ed:5f:28:d9: 4b:94:a5:67:02:0a:3b:03:64:ef:c6:7f:92:ac:43:6f:ef:c5: e0:a3:0a:5d:88:71:3b:4a:aa:0c:be:64:86:16:ee:f0:f4:db: 9b:3a:1c:e4:15:2f:c6:b7:e8:2e:b8:62:6d:c7:de:c0:aa:84: e7:f6:64:2e:51:db:a5:8c:3f:78:0f:67:ae:8d:e1:3a:51:cd: eb:77:9a:87:73:a4:bd:75:0e:ee:06:5d:c3:ab:eb:ab:9e:3c: 5e:94:78:64:0d:43:b4:fa:c7:4d:25:fa:6c:9a:c3:7e:75:16: d5:88:e6:af:3a:c1:13:d4:89:fa:78:ad:9e:9c:ff:26:ef:73: b9:62:91:e0:05:69:28:27:43:cd:81:35:70:aa:1b:80:a8:e5: cc:66:aa:98:7e:f3:c7:6c:a0:82:ff:3c:cb:c5:d5:16:f0:42: ad:10:67:55 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1 RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI1MDQwMTAx MzExN1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRkJEMjVBQzQzQzJDQzJG MDEwOENCQ0MwQ0EyMzUxQ0ZDQjVFMjU0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALChSLGzPENvdzqttUMmAWKg9IiVtqQn+3DurXNkuOtMdsr3XJzr m2XAgawhoRwnTidYbPey6b+mhqnD9zkJFZUFNe5ltHwcmJzpjwkf5AJmMQWkZC7w /gspPXVBTSFXjNQ6biLQW1JmCe0Kjj6OP3lXWtKViWMoQ93EWFtzSYbixGSjwalA lRHKRo0Eppg/2DEOefT6glUxakv7zULIw7hZSEhnhMwb7ra5qcWAzNZpgidjqfjP Ldp4H95arYfVyqt7O2zlY4I+IDjCZ5/2h35sx+yb+WM3oJRzeBtJeW05cEY19y2U N5EFp8XLN2BBN64x9OzXSSrvHI0RO47LGpMCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBT70lrEPCzC8BCMvMDKI1HPy14lSTAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMzLy05SmF4RHdzd3ZBUWpMekF5aU5Sejh0ZUpVay5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATL3zAwDQYJKoZIhvcNAQELBQADggEBACznxISN+v9lQsVCGwBT35ln4u9sDbuT uxaxzQCs/eQES9yb+HpoOk9LC+Ks0QzrI7crHgMZtxIQCceMvMlbNcaqiNKZcqu7 zkQdOglziwvRz5Ms5+U97V8o2UuUpWcCCjsDZO/Gf5KsQ2/vxeCjCl2IcTtKqgy+ ZIYW7vD025s6HOQVL8a36C64Ym3H3sCqhOf2ZC5R26WMP3gPZ66N4TpRzet3modz pL11Du4GXcOr66uePF6UeGQNQ7T6x00l+myaw351FtWI5q86wRPUifp4rZ6c/ybv c7likeAFaSgnQ82BNXCqG4Co5cxmqph+88dsoIL/PMvF1RbwQq0QZ1U= -----END CERTIFICATE-----Generated at Wed Nov 5 17:58:14 2025 by rpki-client