$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/1kpOt7wil4-yEntAD-NmgIottDI.roa File: 1kpOt7wil4-yEntAD-NmgIottDI.roa (raw, json) Hash identifier: hwpKeAWKkzTdJBFkeEw+Gfxz3JFZEtMW7V4U+SyCS/o= Subject key identifier: D6:4A:4E:B7:BC:22:97:8F:B2:12:7B:40:0F:E3:66:80:8A:2D:B4:32 Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Certificate serial: 4C Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/1kpOt7wil4-yEntAD-NmgIottDI.roa Signing time: Tue 10 Jun 2025 10:48:35 +0000 ROA not before: Tue 10 Jun 2025 10:48:35 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9615 IP address blocks: 202.216.128.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Validity Not Before: Jun 10 10:48:35 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=D64A4EB7BC22978FB2127B400FE366808A2DB432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:02:da:07:81:b4:18:04:6c:2e:cc:47:5e: f2:05:8b:99:0e:f8:3c:90:47:71:7b:07:c7:08:de: 4b:1f:26:5f:a7:5a:82:5b:60:1c:23:34:9f:d8:9e: e2:35:c1:68:f6:97:54:8e:fb:09:9c:d5:a5:63:e4: f0:12:04:28:da:42:be:ec:5e:27:2c:dc:a0:be:fd: 2f:08:de:a3:b5:d3:2c:b6:ee:46:7f:fc:4e:ec:bb: 40:7c:ec:c5:d3:53:da:97:bf:b0:3c:5a:6b:06:f6: 0a:01:1e:4d:d2:ae:aa:d9:4b:c7:a7:e1:72:c5:96: e7:0e:37:97:4d:8c:8f:e0:9a:77:59:e8:b7:4d:af: df:ca:46:c6:1c:8a:d5:46:69:0c:13:e2:b9:ec:d8: 3d:a3:b9:d2:fa:a3:f7:57:75:b2:f8:f6:7e:85:dc: d2:6e:21:e2:64:61:a2:ef:39:14:37:c0:1a:ba:48: ba:d2:56:40:ab:e3:f2:39:0d:eb:b7:79:53:f7:ca: 0b:2c:17:45:56:67:5b:0f:cd:28:7d:bf:7f:7d:9a: 41:c0:15:15:25:ae:1e:a1:6d:e0:a6:80:ea:99:71: 16:e9:f5:2c:08:ff:09:55:83:6f:b5:46:8f:b2:ab: 26:c7:dd:bf:f0:9f:c9:14:52:1e:98:5c:78:52:8c: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4A:4E:B7:BC:22:97:8F:B2:12:7B:40:0F:E3:66:80:8A:2D:B4:32 X509v3 Authority Key Identifier: keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/1kpOt7wil4-yEntAD-NmgIottDI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.216.128.0/19 Signature Algorithm: sha256WithRSAEncryption 16:15:b0:5d:2f:d9:48:9d:44:ad:f0:4e:4f:25:81:c5:ff:b4: 79:2e:82:43:5a:42:dc:3b:49:48:b4:c2:07:70:e9:12:a9:33: d2:3b:49:f0:b0:ec:a7:93:ec:36:c1:a9:fc:fb:5f:4f:f1:3b: ad:d3:d7:f5:dc:ef:a4:df:6b:b4:53:c3:96:03:09:a4:77:f9: d4:24:2c:cb:66:c5:68:62:a6:45:34:c3:8b:08:91:da:08:4a: fa:21:a7:39:ce:20:cd:44:70:6a:7e:24:bc:a1:32:e9:3a:fd: 73:df:9d:f6:3e:2c:f8:f2:33:a4:e2:5d:66:fc:ff:a6:e3:f2: 0f:dc:b6:5d:63:e4:55:98:50:f0:2a:18:49:21:82:fb:41:89: a9:6d:2c:be:fb:a0:fd:c6:95:bc:42:37:06:1b:55:ee:08:5b: 36:60:08:1f:a5:b8:8b:3e:43:e4:d1:32:02:78:17:81:a8:b9: c7:b1:78:b0:83:88:f8:4f:0c:01:85:c5:2d:9a:5c:f8:8f:5b: 2a:52:0c:0e:f0:1a:12:64:07:03:f5:82:bc:8f:03:ab:e0:81: 9c:4d:6b:5a:4a:4e:ab:94:45:59:29:d4:1d:32:8e:5a:53:b6: 31:54:88:32:86:f9:06:89:65:1b:14:d9:0c:9f:7f:39:4b:71: a5:c0:ca:26 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUNG NUMyQUZBNUI1NzY1NzczNTFDNDE5OTAxOEQ0NENEQzJENkRBMB4XDTI1MDYxMDEw NDgzNVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoRDY0QTRFQjdCQzIyOTc4 RkIyMTI3QjQwMEZFMzY2ODA4QTJEQjQzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMRGAtoHgbQYBGwuzEde8gWLmQ74PJBHcXsHxwjeSx8mX6dagltg HCM0n9ie4jXBaPaXVI77CZzVpWPk8BIEKNpCvuxeJyzcoL79Lwjeo7XTLLbuRn/8 Tuy7QHzsxdNT2pe/sDxaawb2CgEeTdKuqtlLx6fhcsWW5w43l02Mj+Cad1not02v 38pGxhyK1UZpDBPiuezYPaO50vqj91d1svj2foXc0m4h4mRhou85FDfAGrpIutJW QKvj8jkN67d5U/fKCywXRVZnWw/NKH2/f32aQcAVFSWuHqFt4KaA6plxFun1LAj/ CVWDb7VGj7KrJsfdv/CfyRRSHphceFKMYdUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTWSk63vCKXj7ISe0AP42aAii20MjAfBgNVHSMEGDAWgBSJz1wq+ltXZXc1HEGZ AY1EzcLW2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzczL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0zQzF0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0z QzF0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zNzMvMWtwT3Q3d2lsNC15RW50QUQtTm1nSW90dERJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBcrYgDANBgkqhkiG9w0BAQsFAAOCAQEAFhWwXS/ZSJ1ErfBOTyWBxf+0eS6C Q1pC3DtJSLTCB3DpEqkz0jtJ8LDsp5PsNsGp/PtfT/E7rdPX9dzvpN9rtFPDlgMJ pHf51CQsy2bFaGKmRTTDiwiR2ghK+iGnOc4gzURwan4kvKEy6Tr9c9+d9j4s+PIz pOJdZvz/puPyD9y2XWPkVZhQ8CoYSSGC+0GJqW0svvug/caVvEI3BhtV7ghbNmAI H6W4iz5D5NEyAngXgai5x7F4sIOI+E8MAYXFLZpc+I9bKlIMDvAaEmQHA/WCvI8D q+CBnE1rWkpOq5RFWSnUHTKOWlO2MVSIMob5BollGxTZDJ9/OUtxpcDKJg== -----END CERTIFICATE-----Generated at Thu Nov 6 00:21:14 2025 by rpki-client