$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3795/3ksWBLNm6ypSVufhsJuDhg9aqUA.roa File: 3ksWBLNm6ypSVufhsJuDhg9aqUA.roa (raw, json) Hash identifier: /uWMFg8i6arTHT8eaua6FY79CPd3qgtwu2zha0ZwYOs= Subject key identifier: DE:4B:16:04:B3:66:EB:2A:52:56:E7:E1:B0:9B:83:86:0F:5A:A9:40 Certificate issuer: /CN=3B44E014A7E9AB8245E165B10E8AD325F3E69FFB Certificate serial: 2E Authority key identifier: 3B:44:E0:14:A7:E9:AB:82:45:E1:65:B1:0E:8A:D3:25:F3:E6:9F:FB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/3ksWBLNm6ypSVufhsJuDhg9aqUA.roa Signing time: Fri 01 Aug 2025 01:31:26 +0000 ROA not before: Fri 01 Aug 2025 01:31:26 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 2516 IP address blocks: 202.236.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B44E014A7E9AB8245E165B10E8AD325F3E69FFB Validity Not Before: Aug 1 01:31:26 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=DE4B1604B366EB2A5256E7E1B09B83860F5AA940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:22:c9:ad:55:a7:a6:26:3a:71:ef:e4:54: 3e:4e:b7:51:93:b8:ae:ba:e4:e6:39:10:39:9a:07: 57:55:85:fe:2a:07:52:00:ad:9d:b9:b5:18:d6:43: 51:6d:50:6a:7c:c4:31:ec:d8:84:52:bf:51:ec:65: 60:ff:41:2e:dc:9f:56:7b:a9:69:e0:80:a2:e8:56: 7d:67:00:5a:ce:19:42:0d:78:0d:14:6d:24:59:c3: 53:35:88:b9:b0:dd:d8:58:04:c6:d3:e6:91:d7:e7: e6:53:09:dc:0e:e6:f3:44:46:6c:5b:0a:be:20:44: b9:54:07:1f:85:33:78:21:82:30:85:c1:82:36:b5: 97:38:cf:87:a1:82:3c:80:f1:1d:c1:b1:24:de:23: e5:a8:4a:b2:f8:9a:3b:d4:63:97:b8:d9:59:74:5f: 84:cd:8a:4f:cf:7f:15:cb:3b:3e:e2:0d:fd:bb:32: 51:6e:aa:f1:0b:5c:60:95:f4:ae:0a:c2:1c:a6:05: 24:fd:9d:07:b9:d3:93:f5:a1:43:5e:54:9e:10:fe: 7b:a9:59:ef:74:9b:09:82:5b:02:10:01:1e:0c:00: 61:d1:d7:36:70:e2:a3:f0:0b:4d:e5:ac:75:68:5e: 1f:1f:60:cc:e3:e4:58:15:d1:0a:c4:a8:1d:34:e4: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4B:16:04:B3:66:EB:2A:52:56:E7:E1:B0:9B:83:86:0F:5A:A9:40 X509v3 Authority Key Identifier: keyid:3B:44:E0:14:A7:E9:AB:82:45:E1:65:B1:0E:8A:D3:25:F3:E6:9F:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/3ksWBLNm6ypSVufhsJuDhg9aqUA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.236.182.0/23 Signature Algorithm: sha256WithRSAEncryption a6:46:14:fe:02:c8:cf:d8:41:c2:3f:4f:c0:d1:83:82:56:57: ed:56:70:09:cc:0f:72:08:79:de:4c:be:9e:03:41:1d:d2:e8: fa:64:40:b7:6f:a6:a1:44:a6:b9:94:f9:e8:e8:e5:75:5c:75: 26:4f:39:5e:49:0e:e0:f2:82:0e:cc:44:7c:c2:a5:94:79:eb: da:f7:5e:18:25:ae:63:9e:b1:2f:c4:81:b3:56:86:3e:07:04: 34:c0:01:30:4f:7e:67:03:0f:51:01:dc:06:6a:68:ff:f1:8f: e1:84:a5:80:65:d6:e0:6a:1e:32:43:eb:c4:94:e4:81:5a:d1: a4:95:0e:ca:99:65:bb:20:58:92:52:2c:e6:12:04:23:fb:64: 15:4b:77:b1:77:cd:f4:72:60:07:de:c6:54:6a:bb:56:7e:18: 6b:ce:3f:20:d2:c0:7e:9a:f2:3e:91:90:2a:c7:d8:19:d0:92: 0e:e3:7a:5e:e2:31:bf:23:6b:0f:83:c5:8d:c3:10:92:62:dd: 2f:eb:6f:ed:f9:18:26:c0:00:93:db:4e:bd:00:c8:66:8f:da: cb:a2:64:83:90:7d:22:48:d4:36:3e:e8:c5:f9:6e:2f:78:6d: 64:eb:25:e7:aa:50:bb:fe:fd:22:2c:f9:08:45:e5:36:64:02: 39:1d:36:9a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQjQ0 RTAxNEE3RTlBQjgyNDVFMTY1QjEwRThBRDMyNUYzRTY5RkZCMB4XDTI1MDgwMTAx MzEyNloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoREU0QjE2MDRCMzY2RUIy QTUyNTZFN0UxQjA5QjgzODYwRjVBQTk0MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJKuIsmtVaemJjpx7+RUPk63UZO4rrrk5jkQOZoHV1WF/ioHUgCt nbm1GNZDUW1QanzEMezYhFK/UexlYP9BLtyfVnupaeCAouhWfWcAWs4ZQg14DRRt JFnDUzWIubDd2FgExtPmkdfn5lMJ3A7m80RGbFsKviBEuVQHH4UzeCGCMIXBgja1 lzjPh6GCPIDxHcGxJN4j5ahKsviaO9Rjl7jZWXRfhM2KT89/Fcs7PuIN/bsyUW6q 8QtcYJX0rgrCHKYFJP2dB7nTk/WhQ15UnhD+e6lZ73SbCYJbAhABHgwAYdHXNnDi o/ALTeWsdWheHx9gzOPkWBXRCsSoHTTkSQMCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTeSxYEs2brKlJW5+Gwm4OGD1qpQDAfBgNVHSMEGDAWgBQ7ROAUp+mrgkXhZbEO itMl8+af+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzc5NS9PMFRnRktmcHE0SkY0V1d4RG9yVEpmUG1uX3MuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9PMFRnRktmcHE0SkY0V1d4RG9yVEpm UG1uX3MuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzc5NS8za3NXQkxObTZ5cFNWdWZoc0p1RGhnOWFxVUEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQByuy2MA0GCSqGSIb3DQEBCwUAA4IBAQCmRhT+AsjP2EHCP0/A0YOCVlft VnAJzA9yCHneTL6eA0Ed0uj6ZEC3b6ahRKa5lPno6OV1XHUmTzleSQ7g8oIOzER8 wqWUeeva914YJa5jnrEvxIGzVoY+BwQ0wAEwT35nAw9RAdwGamj/8Y/hhKWAZdbg ah4yQ+vElOSBWtGklQ7KmWW7IFiSUizmEgQj+2QVS3exd830cmAH3sZUartWfhhr zj8g0sB+mvI+kZAqx9gZ0JIO43pe4jG/I2sPg8WNwxCSYt0v62/t+RgmwACT2069 AMhmj9rLomSDkH0iSNQ2PujF+W4veG1k6yXnqlC7/v0iLPkIReU2ZAI5HTaa -----END CERTIFICATE-----Generated at Wed Nov 5 22:00:26 2025 by rpki-client