$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HdxngPDPvsOAeZ_kCLqEM9CWpsY.roa File: HdxngPDPvsOAeZ_kCLqEM9CWpsY.roa (raw, json) Hash identifier: 6Lgp0GZu67a1bT4CgW3nv79IsQpgE+9UmtAV9I2JzU4= Subject key identifier: 1D:DC:67:80:F0:CF:BE:C3:80:79:9F:E4:08:BA:84:33:D0:96:A6:C6 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0325 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HdxngPDPvsOAeZ_kCLqEM9CWpsY.roa Signing time: Fri 01 Aug 2025 01:34:49 +0000 ROA not before: Fri 01 Aug 2025 01:34:49 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9378 IP address blocks: 27.113.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:34:49 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=1DDC6780F0CFBEC380799FE408BA8433D096A6C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:3a:18:7d:09:e6:a8:c4:dc:76:aa:49:6b: e2:3c:60:85:d9:a9:78:54:71:59:c2:c1:ac:b6:90: fa:d9:66:ef:f1:7b:01:b1:05:80:b8:36:5c:0a:b0: 04:66:ab:29:f6:20:89:f4:3a:80:fc:8e:1f:93:dd: 27:78:ba:70:9b:b6:9b:dd:a9:0a:d0:94:87:b9:a5: 04:7d:df:3e:3e:13:a5:4b:1a:06:83:62:57:23:dc: 5b:07:db:5d:51:15:16:35:9e:fd:dc:f1:58:16:80: 6f:c7:14:47:97:1b:2a:04:37:3d:f6:04:d4:01:6e: e3:77:49:77:3c:ac:4d:69:86:42:93:10:37:d9:38: 14:5b:55:b2:0f:70:ea:6e:0c:7c:98:e0:a7:b8:30: b3:6d:94:e9:d9:95:f5:70:ba:c6:c6:8b:ed:5a:0c: 66:6c:e9:e2:ac:8d:86:b4:2a:c6:ba:94:d8:9b:e5: 1d:f6:a5:8d:86:ed:e4:06:af:7a:bc:a9:3d:72:da: 87:4e:17:d4:50:e2:74:11:cc:9b:81:9e:a6:b6:21: 26:55:f7:5f:cc:4d:d6:d0:1c:64:a2:d5:ba:e3:ab: 30:8f:ec:aa:49:cc:62:97:6c:40:a4:50:89:d1:be: ea:9e:ee:ce:f8:59:a0:ee:89:d0:8e:04:7d:58:c8: 24:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DC:67:80:F0:CF:BE:C3:80:79:9F:E4:08:BA:84:33:D0:96:A6:C6 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HdxngPDPvsOAeZ_kCLqEM9CWpsY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.113.248.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:fb:48:0c:77:aa:8f:f7:db:4b:a8:cc:c5:e4:30:90:d1:e0: ee:15:49:ed:c2:1f:88:18:20:a8:b9:ad:e6:12:85:a7:87:38: 8c:0d:82:65:d6:91:c5:a5:10:0b:00:ee:77:2a:57:da:6b:1b: 38:34:6b:3c:b3:8a:a5:25:9c:62:c9:08:33:e3:72:b5:bb:1a: 07:36:8f:41:97:e3:e3:56:83:e3:c1:d6:a5:8a:12:a9:19:65: 68:24:f4:e6:16:29:90:de:e1:c2:c7:7e:52:1c:7a:b7:70:d5: 8a:31:1a:79:f9:d7:b1:63:d4:3d:86:f2:46:3c:90:3d:90:35: e5:91:e0:07:99:1c:66:43:b4:40:f4:7a:6b:f7:38:b1:6c:71: 3e:01:1b:0d:a1:0b:6c:32:a2:17:48:eb:6f:d8:49:14:94:34: a1:b4:56:32:0e:fe:e4:99:30:41:cd:2a:43:ab:e0:0b:4c:93: 86:40:0a:0e:0d:28:54:0a:a3:47:a1:2d:78:73:23:08:f2:ef: b4:4a:f6:4c:15:51:2f:9d:94:16:da:fb:1c:43:52:f6:a6:bc: 4c:88:a5:84:d9:7d:10:e2:c8:e2:b1:df:bf:cd:3b:f1:37:d8: 58:4c:d0:f8:e3:fb:80:db:e4:97:88:48:8a:b9:48:85:93:ed: 74:8c:76:1b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTM0NDlaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDFEREM2NzgwRjBDRkJF QzM4MDc5OUZFNDA4QkE4NDMzRDA5NkE2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpvToYfQnmqMTcdqpJa+I8YIXZqXhUcVnCway2kPrZZu/xewGx BYC4NlwKsARmqyn2IIn0OoD8jh+T3Sd4unCbtpvdqQrQlIe5pQR93z4+E6VLGgaD Ylcj3FsH211RFRY1nv3c8VgWgG/HFEeXGyoENz32BNQBbuN3SXc8rE1phkKTEDfZ OBRbVbIPcOpuDHyY4Ke4MLNtlOnZlfVwusbGi+1aDGZs6eKsjYa0Ksa6lNib5R32 pY2G7eQGr3q8qT1y2odOF9RQ4nQRzJuBnqa2ISZV91/MTdbQHGSi1brjqzCP7KpJ zGKXbECkUInRvuqe7s74WaDuidCOBH1YyCQFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHdxngPDPvsOAeZ/kCLqEM9CWpsYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0hkeG5nUERQdnNPQWVaX2tDTHFFTTlDV3BzWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIbcfgwDQYJKoZIhvcNAQELBQADggEBAAv7SAx3qo/320uozMXkMJDR4O4V Se3CH4gYIKi5reYShaeHOIwNgmXWkcWlEAsA7ncqV9prGzg0azyziqUlnGLJCDPj crW7Ggc2j0GX4+NWg+PB1qWKEqkZZWgk9OYWKZDe4cLHflIcerdw1YoxGnn517Fj 1D2G8kY8kD2QNeWR4AeZHGZDtED0emv3OLFscT4BGw2hC2wyohdI62/YSRSUNKG0 VjIO/uSZMEHNKkOr4AtMk4ZACg4NKFQKo0ehLXhzIwjy77RK9kwVUS+dlBba+xxD UvamvEyIpYTZfRDiyOKx37/NO/E32FhM0Pjj+4Db5JeISIq5SIWT7XSMdhs= -----END CERTIFICATE-----Generated at Wed Nov 5 22:47:08 2025 by rpki-client