$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/U3pvjAPB308CqmSfsvOcDBT4xkU.roa File: U3pvjAPB308CqmSfsvOcDBT4xkU.roa (raw, json) Hash identifier: wvy8fNJOQcM8jZiXYCYsLz0cmhweXJNnQfy+Kp6fTWE= Subject key identifier: 53:7A:6F:8C:03:C1:DF:4F:02:AA:64:9F:B2:F3:9C:0C:14:F8:C6:45 Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 2B Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/U3pvjAPB308CqmSfsvOcDBT4xkU.roa Signing time: Tue 07 Oct 2025 01:24:29 +0000 ROA not before: Tue 07 Oct 2025 01:24:29 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 9354 IP address blocks: 202.157.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Oct 7 01:24:29 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=537A6F8C03C1DF4F02AA649FB2F39C0C14F8C645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8d:96:06:de:bc:36:5a:2d:73:05:39:a3:1c: 86:09:78:7f:d6:8e:46:11:05:b4:64:05:53:a5:69: 5f:44:bd:9d:4b:cd:10:67:01:8c:ee:bd:94:4e:3b: 37:15:75:3e:56:ce:f7:1c:5a:b4:25:60:50:38:57: d6:f6:ef:d7:ec:50:48:fb:0c:5d:87:8d:87:ad:ae: 0f:b2:e1:fa:07:3b:d4:2c:ef:9e:99:09:1a:d4:4c: 07:20:ff:ad:48:e2:46:21:45:98:5e:84:ef:6f:85: cc:68:4a:62:e5:d7:bd:7c:23:e2:32:6d:0e:d1:59: 6e:99:3c:09:44:14:2f:7d:5f:60:3a:7b:33:32:8c: 0f:8e:0b:05:ab:48:43:af:b7:85:9c:ee:c3:1c:c7: 36:e6:14:64:40:81:42:e9:2b:7f:2d:71:8b:53:fc: fa:90:3d:f9:ec:84:39:39:ba:a4:ff:97:b2:9a:d2: 55:e1:fa:1c:67:40:77:87:a1:74:19:e8:ca:d6:0e: 2a:fc:9d:b3:81:1b:62:b2:07:55:a0:53:9a:b1:65: d4:44:b7:42:cf:12:27:87:70:41:38:d1:b0:c0:f0: 75:82:34:4a:70:bb:90:bc:c2:ed:e0:c6:e9:34:88: 55:fa:b2:3e:cf:70:c3:5e:10:14:68:26:ce:79:ac: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7A:6F:8C:03:C1:DF:4F:02:AA:64:9F:B2:F3:9C:0C:14:F8:C6:45 X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/U3pvjAPB308CqmSfsvOcDBT4xkU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.157.224.0/21 Signature Algorithm: sha256WithRSAEncryption 81:ca:9c:10:f7:a9:55:dd:c1:00:5a:e5:29:c6:09:ca:78:bb: bb:e3:56:d8:a0:18:65:aa:c8:b0:35:b6:9a:e0:48:5c:3b:2f: 59:07:48:2e:f8:cb:56:5e:c4:0a:84:02:25:92:72:e2:c4:70: 6e:ce:12:8f:58:9a:8b:b9:ca:b6:5e:8f:30:87:7d:3e:92:f1: 7b:19:0f:07:ce:e7:80:ed:09:e2:8b:e7:b2:24:f6:5c:2e:fe: 40:52:26:d0:39:81:4d:9d:ab:c1:8d:2c:2a:7f:f2:91:a5:be: 5b:d4:b7:de:4a:2d:58:3a:30:6b:2f:f3:d7:cb:45:02:fb:d8: ff:dd:1d:e8:05:d7:2f:f4:f5:07:c6:ba:e2:91:8a:a9:84:ae: 85:64:82:09:c9:5e:70:74:a9:b1:bc:3b:e7:ef:01:23:25:0b: 3b:4f:3b:0e:5b:98:92:1b:6c:7c:11:42:44:f8:ed:45:cd:29: f0:6a:b4:4c:7a:74:41:4c:92:ce:ab:0b:93:20:93:08:1d:70: 47:84:15:08:c2:b8:b7:34:b2:a3:b3:cf:6e:54:56:79:2e:77: 48:e1:1a:9e:e0:9a:ee:e4:2b:ae:55:ec:03:3c:85:9c:e0:1d: da:e1:2b:82:74:ca:75:4c:fd:74:fb:6c:af:e7:00:af:ec:1a: 02:71:aa:18 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI1MTAwNzAx MjQyOVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNTM3QTZGOEMwM0MxREY0 RjAyQUE2NDlGQjJGMzlDMEMxNEY4QzY0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPCNlgbevDZaLXMFOaMchgl4f9aORhEFtGQFU6VpX0S9nUvNEGcB jO69lE47NxV1PlbO9xxatCVgUDhX1vbv1+xQSPsMXYeNh62uD7Lh+gc71CzvnpkJ GtRMByD/rUjiRiFFmF6E72+FzGhKYuXXvXwj4jJtDtFZbpk8CUQUL31fYDp7MzKM D44LBatIQ6+3hZzuwxzHNuYUZECBQukrfy1xi1P8+pA9+eyEOTm6pP+XsprSVeH6 HGdAd4ehdBnoytYOKvyds4EbYrIHVaBTmrFl1ES3Qs8SJ4dwQTjRsMDwdYI0SnC7 kLzC7eDG6TSIVfqyPs9ww14QFGgmznmsZCkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRTem+MA8HfTwKqZJ+y85wMFPjGRTAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80ODQvVTNwdmpBUEIzMDhDcW1TZnN2T2NEQlQ0eGtVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8qd4DANBgkqhkiG9w0BAQsFAAOCAQEAgcqcEPepVd3BAFrlKcYJyni7u+NW 2KAYZarIsDW2muBIXDsvWQdILvjLVl7ECoQCJZJy4sRwbs4Sj1iai7nKtl6PMId9 PpLxexkPB87ngO0J4ovnsiT2XC7+QFIm0DmBTZ2rwY0sKn/ykaW+W9S33kotWDow ay/z18tFAvvY/90d6AXXL/T1B8a64pGKqYSuhWSCCclecHSpsbw75+8BIyULO087 DluYkhtsfBFCRPjtRc0p8Gq0THp0QUySzqsLkyCTCB1wR4QVCMK4tzSyo7PPblRW eS53SOEanuCa7uQrrlXsAzyFnOAd2uErgnTKdUz9dPtsr+cAr+waAnGqGA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:35:07 2025 by rpki-client