$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/SmoqCn6DIYP-d1jH4yl_DIHENUQ.roa File: SmoqCn6DIYP-d1jH4yl_DIHENUQ.roa (raw, json) Hash identifier: vIMFweoK8HVKz1O3KJp9+mX8ksfXStCcFFk9iiiQbmQ= Subject key identifier: 4A:6A:2A:0A:7E:83:21:83:FE:77:58:C7:E3:29:7F:0C:81:C4:35:44 Certificate issuer: /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756 Certificate serial: 5B Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/SmoqCn6DIYP-d1jH4yl_DIHENUQ.roa Signing time: Thu 25 Sep 2025 06:01:18 +0000 ROA not before: Thu 25 Sep 2025 06:01:18 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 7671 IP address blocks: 219.103.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756 Validity Not Before: Sep 25 06:01:18 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=4A6A2A0A7E832183FE7758C7E3297F0C81C43544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:43:f6:af:b3:f8:36:d9:af:70:16:c6:f3: db:bb:81:c3:8a:3e:53:03:d1:a0:53:6e:ed:6e:55: 03:60:7f:6d:32:da:c6:31:53:af:52:40:e1:a8:bd: 07:68:f5:04:88:cb:25:40:a8:9a:55:e7:40:24:64: 7d:94:e3:1d:b5:23:0e:6a:c6:cf:18:50:c4:95:fc: 7f:03:dd:a2:da:03:e6:87:56:b3:f9:a4:8c:d4:19: d5:b4:35:51:6c:e0:5e:7d:cc:42:6c:bb:20:0b:76: 64:ba:d8:97:d9:1a:2e:20:3d:57:e2:da:b2:6f:52: 39:6b:48:a0:84:93:4e:be:ba:aa:2b:c8:3c:2c:d4: 5e:c6:b5:69:32:9a:d0:04:d2:f5:e5:db:a7:2a:85: 32:94:93:a2:16:41:c8:d2:ed:58:ec:87:4d:d8:07: a2:3a:b9:35:5a:00:0a:c2:60:4d:f5:5f:56:bf:b6: 24:f6:dd:44:38:32:50:91:a1:75:36:51:df:c1:a6: 22:d2:a9:b6:e6:1b:dd:89:97:6b:a0:d1:0c:16:1a: a3:9b:e4:1a:8b:33:e5:57:90:55:70:20:bd:05:91: 65:94:ad:6e:be:ab:20:1a:1e:4a:8a:22:81:6a:01: 40:6f:db:24:ff:3b:dc:53:be:22:63:56:cd:3a:b8: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6A:2A:0A:7E:83:21:83:FE:77:58:C7:E3:29:7F:0C:81:C4:35:44 X509v3 Authority Key Identifier: keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/SmoqCn6DIYP-d1jH4yl_DIHENUQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.103.32.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:fb:3f:13:e7:66:65:ef:3b:a0:da:4d:eb:f0:e2:47:5c:ed: b4:a1:6d:1f:54:79:e4:16:f3:fe:79:ef:72:55:a1:03:cb:73: fe:2b:74:43:01:4f:c1:3b:3a:66:2a:03:89:24:59:7a:bb:7c: 30:42:ed:18:c9:6e:20:cf:ac:31:b8:0e:6f:7e:30:0f:71:20: d5:de:f8:15:17:69:23:64:04:5c:65:86:55:fb:22:79:4f:1b: 5f:4d:e1:c2:19:10:68:b0:94:13:41:8a:38:7e:95:bb:1c:c0: f3:17:4d:ef:61:5c:72:e4:27:e1:65:ae:b2:a5:0c:b8:9b:a0: 39:be:3a:46:37:6a:0d:cf:a0:6c:bf:e7:eb:3f:72:7f:ea:0a: de:81:4d:da:c3:0b:29:2f:ab:9a:9e:4d:9e:27:2a:d0:b8:d5: 8c:20:bb:0f:65:3b:d8:53:04:92:cb:27:0b:cd:f5:a3:54:c4: 8d:22:1a:b0:dd:fc:dd:33:ee:4f:af:7f:ff:13:78:14:57:88: 30:5b:79:d7:79:01:e6:59:b6:53:95:cf:60:4b:21:27:28:74: 62:34:1e:e1:f8:20:df:a5:01:f7:36:55:1c:58:2a:ba:60:98: 10:f3:98:71:39:a3:f4:17:48:ce:84:64:09:9c:0d:88:d3:37: 54:b0:f4:e8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQkQz MDZFQ0U2MDQzOTAxRTUyQThFOEI2NjE0QUFBNDU2QUJBNzU2MB4XDTI1MDkyNTA2 MDExOFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNEE2QTJBMEE3RTgzMjE4 M0ZFNzc1OEM3RTMyOTdGMEM4MUM0MzU0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALdTQ/avs/g22a9wFsbz27uBw4o+UwPRoFNu7W5VA2B/bTLaxjFT r1JA4ai9B2j1BIjLJUComlXnQCRkfZTjHbUjDmrGzxhQxJX8fwPdotoD5odWs/mk jNQZ1bQ1UWzgXn3MQmy7IAt2ZLrYl9kaLiA9V+Lasm9SOWtIoISTTr66qivIPCzU Xsa1aTKa0ATS9eXbpyqFMpSTohZByNLtWOyHTdgHojq5NVoACsJgTfVfVr+2JPbd RDgyUJGhdTZR38GmItKptuYb3YmXa6DRDBYao5vkGosz5VeQVXAgvQWRZZStbr6r IBoeSooigWoBQG/bJP873FO+ImNWzTq4tyECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRKaioKfoMhg/53WMfjKX8MgcQ1RDAfBgNVHSMEGDAWgBQ70wbs5gQ5AeUqjotm FKqkVqunVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzY4L085TUc3T1lFT1FIbEtvNkxaaFNxcEZhcnAxWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL085TUc3T1lFT1FIbEtvNkxaaFNxcEZh cnAxWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zNjgvU21vcUNuNkRJWVAtZDFqSDR5bF9ESUhFTlVRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNtnIDANBgkqhkiG9w0BAQsFAAOCAQEAOvs/E+dmZe87oNpN6/DiR1zttKFt H1R55Bbz/nnvclWhA8tz/it0QwFPwTs6ZioDiSRZert8MELtGMluIM+sMbgOb34w D3Eg1d74FRdpI2QEXGWGVfsieU8bX03hwhkQaLCUE0GKOH6VuxzA8xdN72FccuQn 4WWusqUMuJugOb46RjdqDc+gbL/n6z9yf+oK3oFN2sMLKS+rmp5Nnicq0LjVjCC7 D2U72FMEkssnC831o1TEjSIasN383TPuT69//xN4FFeIMFt513kB5lm2U5XPYEsh Jyh0YjQe4fgg36UB9zZVHFgqumCYEPOYcTmj9BdIzoRkCZwNiNM3VLD06A== -----END CERTIFICATE-----Generated at Wed Nov 5 19:09:14 2025 by rpki-client