$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/00yDrmJ_UWwX3JZ2L7zDFY-0Ab8.roa File: 00yDrmJ_UWwX3JZ2L7zDFY-0Ab8.roa (raw, json) Hash identifier: pTbHaaM3OuGFbP/uuH3c9anwA59QP7X1Ij7o6/qgYho= Subject key identifier: D3:4C:83:AE:62:7F:51:6C:17:DC:96:76:2F:BC:C3:15:8F:B4:01:BF Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC Certificate serial: 7E Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/00yDrmJ_UWwX3JZ2L7zDFY-0Ab8.roa Signing time: Sat 01 Nov 2025 01:34:53 +0000 ROA not before: Sat 01 Nov 2025 01:34:53 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2915 IP address blocks: 218.231.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC Validity Not Before: Nov 1 01:34:53 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=D34C83AE627F516C17DC96762FBCC3158FB401BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:f5:84:1c:3c:32:e6:6b:b2:90:79:6d:04: 5e:ab:60:68:2c:17:ff:06:7a:58:30:a2:2a:b6:5b: 15:72:82:3b:62:e4:6a:d4:86:7d:6c:01:68:31:3c: cd:d0:19:d1:e9:a7:34:1f:90:75:34:1e:a5:9f:b2: 77:54:29:24:78:27:3f:c2:81:2f:72:34:d6:b6:6f: 58:11:89:b2:20:ff:99:92:22:a4:57:66:30:73:90: 85:47:3b:7d:79:d9:f3:c7:ef:dd:27:5d:14:8a:cc: c4:62:5d:cf:4a:49:85:86:3a:c2:e6:34:fd:22:d8: 9b:5f:5a:8d:a2:fe:5f:c6:9b:49:55:1a:b0:89:28: 4d:f5:79:10:c5:a8:56:7f:64:1e:05:14:e3:88:cf: e9:f2:77:9a:91:2e:fa:39:01:99:8b:b0:2f:b5:3a: b7:e9:b2:67:f4:7e:33:de:42:1b:fd:dc:c8:fd:53: 1a:d0:fd:47:d8:47:8a:6b:4b:b0:6d:6b:00:5f:7d: 0e:75:2d:67:b2:a0:66:d7:b3:d4:5c:fd:94:65:f9: b1:7f:6a:0e:89:92:2e:c7:cf:f5:a6:ee:e3:48:f2: 55:d6:0f:7e:5f:7a:53:6c:c3:d1:a1:75:af:72:58: 2e:29:94:a5:b2:10:5f:db:f6:21:70:f6:6b:b1:22: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4C:83:AE:62:7F:51:6C:17:DC:96:76:2F:BC:C3:15:8F:B4:01:BF X509v3 Authority Key Identifier: keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/00yDrmJ_UWwX3JZ2L7zDFY-0Ab8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.231.64.0/18 Signature Algorithm: sha256WithRSAEncryption 83:89:cb:2c:75:09:93:5d:d5:a9:eb:d5:d8:5e:e6:bc:c4:7d: b4:6f:82:8c:19:95:82:97:f1:1f:3e:f2:00:ba:4c:bc:45:73: d2:01:cb:9b:48:95:31:f2:76:f9:5c:a7:d6:b1:47:a7:54:ff: 69:2f:90:bc:51:9c:b0:e7:fe:0f:b8:de:3d:0c:b8:66:37:a1: 26:ba:21:a8:b5:91:bc:35:f3:78:f8:6e:4f:37:d4:6e:89:c1: 5c:e2:27:43:9b:aa:e8:81:af:92:28:e6:b7:62:d9:e9:ae:31: bd:db:69:ef:96:3b:c6:30:0c:0f:ec:02:cc:8b:37:32:65:02: d5:ec:09:d4:46:65:1c:a8:64:18:df:78:60:c3:f4:63:60:ed: 8e:9d:5d:24:3e:ac:7d:24:eb:c2:93:cc:76:81:f6:96:5f:56: 2a:b2:c0:5d:5f:5f:9f:d0:33:e9:f7:4d:7f:f8:7e:40:a6:6a: 36:a0:05:8d:27:03:f1:d4:40:bd:fc:d3:ef:f3:07:81:83:7a: 23:fd:41:9d:8b:55:48:8d:1b:af:21:b2:d8:69:5e:7a:f5:00: cd:69:6c:f0:63:83:55:fd:fc:0e:c5:93:e8:24:74:38:6d:30: 8d:d7:64:90:85:dc:8a:18:cb:d6:0d:40:9c:d8:48:cc:8b:0a: 4d:7e:9e:f5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MUY3 NkZBMDc3MzVGNjg1OTkxRkM4ODJDODg1RTIxRUZCQjE2MUJDMB4XDTI1MTEwMTAx MzQ1M1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRDM0QzgzQUU2MjdGNTE2 QzE3REM5Njc2MkZCQ0MzMTU4RkI0MDFCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMzX9YQcPDLma7KQeW0EXqtgaCwX/wZ6WDCiKrZbFXKCO2LkatSG fWwBaDE8zdAZ0emnNB+QdTQepZ+yd1QpJHgnP8KBL3I01rZvWBGJsiD/mZIipFdm MHOQhUc7fXnZ88fv3SddFIrMxGJdz0pJhYY6wuY0/SLYm19ajaL+X8abSVUasIko TfV5EMWoVn9kHgUU44jP6fJ3mpEu+jkBmYuwL7U6t+myZ/R+M95CG/3cyP1TGtD9 R9hHimtLsG1rAF99DnUtZ7KgZtez1Fz9lGX5sX9qDomSLsfP9abu40jyVdYPfl96 U2zD0aF1r3JYLimUpbIQX9v2IXD2a7EiGtcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTTTIOuYn9RbBfclnYvvMMVj7QBvzAfBgNVHSMEGDAWgBRx92+gdzX2hZkfyILI heIe+7FhvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTk3L2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1eFlidy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1 eFlidy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81OTcvMDB5RHJtSl9VV3dYM0paMkw3ekRGWS0wQWI4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBtrnQDANBgkqhkiG9w0BAQsFAAOCAQEAg4nLLHUJk13VqevV2F7mvMR9tG+C jBmVgpfxHz7yALpMvEVz0gHLm0iVMfJ2+Vyn1rFHp1T/aS+QvFGcsOf+D7jePQy4 ZjehJrohqLWRvDXzePhuTzfUbonBXOInQ5uq6IGvkijmt2LZ6a4xvdtp75Y7xjAM D+wCzIs3MmUC1ewJ1EZlHKhkGN94YMP0Y2Dtjp1dJD6sfSTrwpPMdoH2ll9WKrLA XV9fn9Az6fdNf/h+QKZqNqAFjScD8dRAvfzT7/MHgYN6I/1BnYtVSI0bryGy2Gle evUAzWls8GODVf38DsWT6CR0OG0wjddkkIXcihjL1g1AnNhIzIsKTX6e9Q== -----END CERTIFICATE-----Generated at Wed Nov 5 19:40:55 2025 by rpki-client