$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/536/1cuvveEpS9caqhb-cs9Sgtvc8tA.roa File: 1cuvveEpS9caqhb-cs9Sgtvc8tA.roa (raw, json) Hash identifier: ThQeDgXLb/bD4sQGAR7n6V5jOaQ+BBNLu+CpMEBFGPw= Subject key identifier: D5:CB:AF:BD:E1:29:4B:D7:1A:AA:16:FE:72:CF:52:82:DB:DC:F2:D0 Certificate issuer: /CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374 Certificate serial: 2E Authority key identifier: BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/1cuvveEpS9caqhb-cs9Sgtvc8tA.roa Signing time: Tue 01 Jul 2025 01:28:27 +0000 ROA not before: Tue 01 Jul 2025 01:28:27 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 131160 IP address blocks: 103.5.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374 Validity Not Before: Jul 1 01:28:27 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=D5CBAFBDE1294BD71AAA16FE72CF5282DBDCF2D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:d1:1f:74:e2:f3:42:2f:8f:a7:a6:57:13: dc:a7:4b:b7:15:df:d4:3e:4f:1c:06:7a:96:6e:9b: 16:16:c7:a5:9f:1f:13:d8:5b:33:f3:38:36:21:9b: d3:80:f2:fc:b4:ac:00:e3:ac:41:70:b9:4d:3c:6d: e3:4b:a4:ef:35:4e:11:c2:4c:be:99:4c:c1:ec:84: e8:72:0a:0b:c5:d0:9e:13:d8:7d:bc:29:a5:d6:54: 9a:8c:4c:0e:cd:31:c0:9a:13:a7:87:54:3a:c0:19: e3:c5:82:08:d2:42:2c:39:a4:4c:6e:9e:26:97:2d: 61:83:99:fb:0b:e0:ea:5d:11:59:c8:c1:ac:1c:64: eb:96:fb:5e:85:25:80:be:4a:96:5e:ff:36:86:b1: 6f:bc:5b:c7:cf:36:5f:55:32:25:dd:2e:a2:c1:a3: 29:b5:22:de:32:f9:b4:ea:e9:19:78:92:0b:ef:bc: fe:7a:34:7c:fd:0f:e1:a1:ea:6d:e9:2e:04:58:4b: 4a:19:b1:46:fe:d9:94:ca:bc:bb:f5:cb:a8:b8:e1: 48:14:a6:4d:88:26:98:bf:b8:b3:19:53:70:83:1d: ef:79:75:05:86:76:86:90:f0:22:6e:ed:d7:43:61: fe:37:4d:e1:e2:37:2b:5b:d6:44:5b:8c:5d:04:53: e8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CB:AF:BD:E1:29:4B:D7:1A:AA:16:FE:72:CF:52:82:DB:DC:F2:D0 X509v3 Authority Key Identifier: keyid:BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/1cuvveEpS9caqhb-cs9Sgtvc8tA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.140.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:17:61:db:a6:30:5c:36:5f:61:86:c7:21:19:41:65:13:d7: ad:1f:84:65:56:4c:ce:75:cb:03:a7:58:6e:60:eb:e4:43:9a: 76:77:f2:a5:7c:f4:5f:aa:0e:d7:67:3e:5d:f3:b8:41:84:ad: 08:92:ac:a3:e0:24:d2:6c:31:64:76:3b:bf:b9:3d:8b:0f:98: 07:9d:e7:4b:93:13:25:f6:4c:ba:a5:02:d6:1d:82:c3:15:08: e9:5a:42:72:a4:5e:ec:37:2c:24:52:68:89:26:8f:4b:8b:41: d9:44:e4:46:92:4b:71:df:65:fa:8f:d5:b7:1e:3d:9c:70:76: fa:88:0e:5b:27:56:a5:73:d7:b5:8c:3a:7f:d1:8d:40:eb:14: 5a:ab:5c:aa:6a:3c:e8:c8:45:47:38:12:13:54:e0:fb:59:93: 0e:9d:7e:1d:39:00:7f:63:54:3a:f3:04:ba:1f:77:60:b8:e9: 49:f6:60:08:ee:ec:7e:eb:49:7c:d4:e3:b8:8b:3d:8b:0d:db: 79:9e:2a:de:41:2b:36:14:08:c2:27:f0:ec:bb:2a:01:e2:6c: 1a:e2:ac:32:82:97:fd:24:0a:1d:18:99:ec:17:2b:bb:d0:cb: 9b:b9:ad:a9:11:e4:73:8c:d6:78:56:88:69:a2:09:23:71:bd: 5a:48:02:7a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCQkE3 M0ZFQjg4RTFDOTg3RDUzREQyQzNCMkRCNDI3NTQ1RUJBMzc0MB4XDTI1MDcwMTAx MjgyN1oXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRDVDQkFGQkRFMTI5NEJE NzFBQUExNkZFNzJDRjUyODJEQkRDRjJEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUt0R904vNCL4+nplcT3KdLtxXf1D5PHAZ6lm6bFhbHpZ8fE9hb M/M4NiGb04Dy/LSsAOOsQXC5TTxt40uk7zVOEcJMvplMweyE6HIKC8XQnhPYfbwp pdZUmoxMDs0xwJoTp4dUOsAZ48WCCNJCLDmkTG6eJpctYYOZ+wvg6l0RWcjBrBxk 65b7XoUlgL5Kll7/Noaxb7xbx882X1UyJd0uosGjKbUi3jL5tOrpGXiSC++8/no0 fP0P4aHqbekuBFhLShmxRv7ZlMq8u/XLqLjhSBSmTYgmmL+4sxlTcIMd73l1BYZ2 hpDwIm7t10Nh/jdN4eI3K1vWRFuMXQRT6A0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTVy6+94SlL1xqqFv5yz1KC29zy0DAfBgNVHSMEGDAWgBS7pz/riOHJh9U90sOy 20J1ReujdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTM2L3U2Y182NGpoeVlmVlBkTERzdHRDZFVYcm8zUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3U2Y182NGpoeVlmVlBkTERzdHRDZFVY cm8zUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzYvMWN1dnZlRXBTOWNhcWhiLWNzOVNndHZjOHRBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcFjDANBgkqhkiG9w0BAQsFAAOCAQEAXxdh26YwXDZfYYbHIRlBZRPXrR+E ZVZMznXLA6dYbmDr5EOadnfypXz0X6oO12c+XfO4QYStCJKso+Ak0mwxZHY7v7k9 iw+YB53nS5MTJfZMuqUC1h2CwxUI6VpCcqRe7DcsJFJoiSaPS4tB2UTkRpJLcd9l +o/Vtx49nHB2+ogOWydWpXPXtYw6f9GNQOsUWqtcqmo86MhFRzgSE1Tg+1mTDp1+ HTkAf2NUOvMEuh93YLjpSfZgCO7sfutJfNTjuIs9iw3beZ4q3kErNhQIwifw7Lsq AeJsGuKsMoKX/SQKHRiZ7Bcru9DLm7mtqRHkc4zWeFaIaaIJI3G9WkgCeg== -----END CERTIFICATE-----Generated at Thu Nov 6 00:40:01 2025 by rpki-client