$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/HMMLw9an5vkHIwN7_CQmE8abZGQ.roa File: HMMLw9an5vkHIwN7_CQmE8abZGQ.roa (raw, json) Hash identifier: aGjHw42z0xwpix04PuGSBsSDtQ6D7TTeuIlK6CeKzjg= Subject key identifier: 1C:C3:0B:C3:D6:A7:E6:F9:07:23:03:7B:FC:24:26:13:C6:9B:64:64 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 018A Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/HMMLw9an5vkHIwN7_CQmE8abZGQ.roa Signing time: Tue 10 Jun 2025 10:47:27 +0000 ROA not before: Tue 10 Jun 2025 10:47:27 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 2527 IP address blocks: 133.165.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Jun 10 10:47:27 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=1CC30BC3D6A7E6F90723037BFC242613C69B6464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:a8:5c:c8:77:ee:cf:04:c5:b8:b4:f7:7d: df:92:7b:7f:8d:0d:fd:fe:5b:6c:11:46:2e:43:24: 46:c3:3c:e9:f6:13:71:d1:ae:e4:56:4d:a4:97:b0: 04:ff:36:e4:8a:2a:b9:71:34:99:b0:a8:2f:ba:9b: 91:e3:8a:9b:42:bf:80:a5:6a:84:32:31:62:87:5f: 00:fc:0b:84:fc:8d:c1:29:53:ef:b8:4b:2c:44:e4: 74:f1:6a:ee:f0:96:e7:7c:65:a7:f7:5c:2c:8f:af: 2a:5d:d9:bd:a3:90:df:47:6f:0d:01:78:2a:1f:1f: 6e:da:be:50:29:ee:44:55:c4:53:7d:da:a2:ef:22: c6:27:8d:13:64:95:14:d0:3f:1d:16:81:7d:13:bb: f7:41:4d:4c:f2:4d:41:31:39:9d:c5:44:4d:57:22: c7:c4:27:11:9b:00:f2:c6:c1:fe:27:26:43:bf:5a: 13:26:d6:a5:20:9d:4a:49:c0:57:d4:79:26:97:ae: 44:8a:cb:e3:4a:d5:fb:c7:bb:b0:ba:6b:4b:59:84: a4:46:be:e2:65:3b:aa:c3:8a:19:ee:6c:d9:9a:a4: e1:46:6d:35:91:1e:81:77:ad:d1:3f:39:51:cb:a1: 46:8d:ed:22:22:6a:a5:17:ac:48:7b:bd:ff:87:98: 85:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C3:0B:C3:D6:A7:E6:F9:07:23:03:7B:FC:24:26:13:C6:9B:64:64 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/HMMLw9an5vkHIwN7_CQmE8abZGQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.165.128.0/18 Signature Algorithm: sha256WithRSAEncryption 05:00:a8:c6:9a:eb:76:d6:ab:0c:be:35:13:7c:33:95:01:c3: 29:49:16:0a:b4:bf:58:81:ec:2b:33:a4:d8:f5:91:36:07:d2: 63:b9:0b:59:02:e4:a0:1b:50:40:d0:8d:b8:8a:52:a2:a3:30: 97:da:0f:d8:0e:9b:be:34:6d:52:30:5b:e6:ce:43:57:94:77: c1:3a:3d:0b:2f:c5:ca:85:41:20:c7:2d:ca:d6:7b:fd:97:27: e8:f5:76:34:65:e1:3c:e9:33:32:de:b0:c2:0b:ac:62:e3:70: 07:bb:81:8b:44:dd:20:03:76:ee:b0:50:4c:fa:9a:f4:f2:ca: a1:c5:71:2b:51:6d:fd:72:1b:ab:14:4b:25:6f:cd:92:59:3c: fc:74:36:d3:f5:8e:66:39:9a:bd:61:03:71:4d:5e:6f:09:23: f2:69:e1:27:30:c7:ae:60:f7:90:93:ac:ca:33:68:49:1e:6f: 38:88:5a:f0:3a:8d:9f:b9:18:39:ff:87:80:0f:21:bd:8e:bf: ea:36:12:28:aa:12:c1:5a:e1:40:bf:27:d5:d1:e2:8d:f4:eb: ce:fd:8b:50:b1:b0:76:f1:c0:65:04:74:b1:f3:84:7b:b4:dd: 97:8a:9a:05:a9:50:08:44:f0:49:5f:67:ea:68:5c:f2:f4:b6: 27:9a:1f:2d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTA2MTAx MDQ3MjdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDFDQzMwQkMzRDZBN0U2 RjkwNzIzMDM3QkZDMjQyNjEzQzY5QjY0NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClyahcyHfuzwTFuLT3fd+Se3+NDf3+W2wRRi5DJEbDPOn2E3HR ruRWTaSXsAT/NuSKKrlxNJmwqC+6m5HjiptCv4ClaoQyMWKHXwD8C4T8jcEpU++4 SyxE5HTxau7wlud8Zaf3XCyPrypd2b2jkN9Hbw0BeCofH27avlAp7kRVxFN92qLv IsYnjRNklRTQPx0WgX0Tu/dBTUzyTUExOZ3FRE1XIsfEJxGbAPLGwf4nJkO/WhMm 1qUgnUpJwFfUeSaXrkSKy+NK1fvHu7C6a0tZhKRGvuJlO6rDihnubNmapOFGbTWR HoF3rdE/OVHLoUaN7SIiaqUXrEh7vf+HmIWTAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUHMMLw9an5vkHIwN7/CQmE8abZGQwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9ITU1MdzlhbjV2a0hJd043X0NRbUU4YWJaR1Eucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQGhaWAMA0GCSqGSIb3DQEBCwUAA4IBAQAFAKjGmut21qsMvjUTfDOVAcMpSRYK tL9YgewrM6TY9ZE2B9JjuQtZAuSgG1BA0I24ilKiozCX2g/YDpu+NG1SMFvmzkNX lHfBOj0LL8XKhUEgxy3K1nv9lyfo9XY0ZeE86TMy3rDCC6xi43AHu4GLRN0gA3bu sFBM+pr08sqhxXErUW39churFEslb82SWTz8dDbT9Y5mOZq9YQNxTV5vCSPyaeEn MMeuYPeQk6zKM2hJHm84iFrwOo2fuRg5/4eADyG9jr/qNhIoqhLBWuFAvyfV0eKN 9OvO/YtQsbB28cBlBHSx84R7tN2XipoFqVAIRPBJX2fqaFzy9LYnmh8t -----END CERTIFICATE-----Generated at Wed Nov 5 17:34:06 2025 by rpki-client