$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/mzmy5vuoJ5EpndsFiW0BXUPlO6E.roa File: mzmy5vuoJ5EpndsFiW0BXUPlO6E.roa (raw, json) Hash identifier: o9Ze5ATq0JYK3qgUUjzfvzjfbKV2V9WRky9o+7t4ZH0= Subject key identifier: 9B:39:B2:E6:FB:A8:27:91:29:9D:DB:05:89:6D:01:5D:43:E5:3B:A1 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0149 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mzmy5vuoJ5EpndsFiW0BXUPlO6E.roa Signing time: Fri 01 Aug 2025 01:34:03 +0000 ROA not before: Fri 01 Aug 2025 01:34:03 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 10021 IP address blocks: 27.110.48.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Aug 1 01:34:03 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=9B39B2E6FBA82791299DDB05896D015D43E53BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:5a:c5:bb:c6:02:2b:1d:56:c7:b4:83:ae: 33:87:bb:ae:8e:01:1f:95:b2:93:ca:66:44:0e:4e: a5:cf:21:a9:ed:6c:b8:49:bf:d4:14:a7:5f:66:9d: 31:0b:dc:e4:62:52:cd:d3:05:21:0c:e1:27:e2:9f: ea:0c:78:b1:e5:63:28:8d:ab:eb:90:d4:d3:a7:de: d3:69:19:26:69:fa:b7:4e:1e:d2:68:0b:d7:c9:94: ba:e4:d5:98:18:2d:50:c8:c8:44:75:c3:2e:22:08: b8:13:3f:69:1c:66:c8:3a:cf:7d:6d:ae:ff:b5:9e: 13:8e:e4:6b:b5:a1:58:ad:ce:d1:8e:4d:67:4a:02: 85:6a:a9:1d:d2:18:91:67:fb:97:ee:4a:26:06:94: 1e:93:44:91:02:32:42:6e:48:fc:25:ea:1c:85:6d: bd:b3:4e:07:da:b0:3e:4b:4a:00:38:8a:e3:16:09: dc:84:3f:59:b5:65:9d:b4:7f:ae:47:da:d2:80:00: 26:77:ce:66:6f:41:2f:3f:fe:21:4a:51:75:77:55: 26:90:c6:f9:ea:66:bc:56:c6:35:d5:93:96:c8:74: 26:0a:01:c5:7c:5a:f6:d3:81:06:21:57:21:c6:ab: 66:8d:30:83:d6:f0:6c:10:94:e6:d2:4a:b2:81:4a: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:39:B2:E6:FB:A8:27:91:29:9D:DB:05:89:6D:01:5D:43:E5:3B:A1 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mzmy5vuoJ5EpndsFiW0BXUPlO6E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.110.48.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:1e:9d:2d:e3:24:76:c3:2a:91:33:dd:c6:4e:2c:6c:e3:6b: e8:25:4a:86:fd:93:50:40:de:b6:50:4f:ec:16:c8:36:8d:3a: e4:2f:1c:6a:7b:56:88:dd:d8:03:79:51:04:91:55:51:f6:29: 06:0e:f1:6d:c3:2f:39:47:1e:62:fa:2e:99:aa:a4:49:39:07: 80:1d:b5:c7:50:d5:92:09:69:05:81:61:b9:50:66:58:74:93: 38:91:d3:a3:d1:63:6c:c8:3a:01:19:a0:72:7c:e6:0a:7c:7d: 61:9f:e4:a2:84:6b:d1:ff:45:78:ce:fb:f5:fe:c4:01:0b:78: 3e:2e:7a:c6:cb:ee:36:07:94:41:df:ad:08:9b:c7:72:f1:97: fd:4d:21:d9:83:4f:59:60:72:85:ba:b5:e9:3f:b9:06:24:9e: a7:f5:13:f5:91:3d:86:0b:b7:9b:46:f5:03:19:14:28:c9:10: db:f1:59:99:d8:1c:82:08:4e:96:49:74:fc:1b:48:f9:4d:b5: 2f:b4:6f:9d:32:d2:b1:24:f1:c1:9e:c9:34:06:46:11:1c:37: 3e:27:e8:68:ce:65:dc:6f:cf:bb:32:db:88:3c:f4:a2:6d:e6: 71:c9:bb:24:b6:82:45:fa:23:fc:75:9e:50:56:89:df:69:39: ca:a3:e5:83 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNTA4MDEw MTM0MDNaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDlCMzlCMkU2RkJBODI3 OTEyOTlEREIwNTg5NkQwMTVENDNFNTNCQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuX1rFu8YCKx1Wx7SDrjOHu66OAR+VspPKZkQOTqXPIantbLhJ v9QUp19mnTEL3ORiUs3TBSEM4Sfin+oMeLHlYyiNq+uQ1NOn3tNpGSZp+rdOHtJo C9fJlLrk1ZgYLVDIyER1wy4iCLgTP2kcZsg6z31trv+1nhOO5Gu1oVitztGOTWdK AoVqqR3SGJFn+5fuSiYGlB6TRJECMkJuSPwl6hyFbb2zTgfasD5LSgA4iuMWCdyE P1m1ZZ20f65H2tKAACZ3zmZvQS8//iFKUXV3VSaQxvnqZrxWxjXVk5bIdCYKAcV8 WvbTgQYhVyHGq2aNMIPW8GwQlObSSrKBShs/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmzmy5vuoJ5EpndsFiW0BXUPlO6EwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L216bXk1dnVvSjVFcG5kc0ZpVzBCWFVQbE82RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMbbjAwDQYJKoZIhvcNAQELBQADggEBAI0enS3jJHbDKpEz3cZOLGzja+gl Sob9k1BA3rZQT+wWyDaNOuQvHGp7Vojd2AN5UQSRVVH2KQYO8W3DLzlHHmL6Lpmq pEk5B4AdtcdQ1ZIJaQWBYblQZlh0kziR06PRY2zIOgEZoHJ85gp8fWGf5KKEa9H/ RXjO+/X+xAELeD4uesbL7jYHlEHfrQibx3Lxl/1NIdmDT1lgcoW6tek/uQYknqf1 E/WRPYYLt5tG9QMZFCjJENvxWZnYHIIITpZJdPwbSPlNtS+0b50y0rEk8cGeyTQG RhEcNz4n6GjOZdxvz7sy24g89KJt5nHJuyS2gkX6I/x1nlBWid9pOcqj5YM= -----END CERTIFICATE-----Generated at Wed Nov 5 17:24:52 2025 by rpki-client