$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/x9OpMms10n1rpaKwsSFUcNKB19U.roa File: x9OpMms10n1rpaKwsSFUcNKB19U.roa (raw, json) Hash identifier: 5XCixAJr26qE1ouFajUt4P3uWKalC/MWXwDHvP98obA= Subject key identifier: C7:D3:A9:32:6B:35:D2:7D:6B:A5:A2:B0:B1:21:54:70:D2:81:D7:D5 Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Certificate serial: 44 Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/x9OpMms10n1rpaKwsSFUcNKB19U.roa Signing time: Fri 01 Aug 2025 01:35:32 +0000 ROA not before: Fri 01 Aug 2025 01:35:32 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 59127 IP address blocks: 223.223.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Validity Not Before: Aug 1 01:35:32 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=C7D3A9326B35D27D6BA5A2B0B1215470D281D7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:98:c3:ac:1e:ac:69:a7:be:75:9b:01:d5: 4a:9b:96:7d:d0:c9:e8:c8:1f:a5:63:57:35:5d:c6: d5:62:47:18:00:f4:ba:33:23:2d:3b:ea:04:9e:4e: 69:5c:a5:18:7d:ef:02:f2:4a:4d:df:d3:9c:d5:7b: 24:4b:1c:c7:e4:f9:2b:92:a3:e5:f4:8e:93:c2:c7: ca:e6:3b:6b:03:ec:20:cd:15:2a:c1:7b:f8:d3:b0: 5e:a3:e3:e2:5e:5f:92:0c:75:47:3a:ba:4b:96:53: a6:6c:08:a4:04:c8:c9:d8:f0:36:92:1b:0b:08:39: e1:c1:37:23:3d:6e:2e:d8:dd:44:15:e6:2f:86:10: ce:84:7e:cf:ae:0d:f3:0c:9c:ca:e8:56:bf:d4:ab: 7c:45:0e:20:6c:6c:b8:f4:e9:c0:14:ec:18:d8:5c: a3:fe:ac:7e:e0:be:d8:42:5a:f4:c2:06:f4:da:36: 60:05:2c:c0:ef:e8:92:c4:d2:90:5b:55:60:e4:09: fd:e1:ed:bb:16:1d:e0:d9:fb:cb:b7:d3:0a:0e:84: fb:02:32:fb:f4:b3:75:65:6c:ae:9e:c0:cf:aa:2c: 39:69:b5:b1:0a:42:60:ce:d7:53:0d:fa:9c:ae:58: f7:cf:15:1b:99:8d:5b:b9:c6:91:9e:ba:ea:16:93: aa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D3:A9:32:6B:35:D2:7D:6B:A5:A2:B0:B1:21:54:70:D2:81:D7:D5 X509v3 Authority Key Identifier: keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/x9OpMms10n1rpaKwsSFUcNKB19U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.223.224.0/20 Signature Algorithm: sha256WithRSAEncryption 01:03:65:1f:d0:4d:bc:fd:55:35:39:32:3a:44:86:c5:94:69: 76:b2:55:f8:26:c8:43:7d:b3:72:d3:57:64:58:30:07:23:b0: f3:6d:39:3a:16:2e:3a:1f:fa:94:88:7d:a2:cb:f6:54:02:de: 65:d9:b6:b4:d4:42:18:92:77:a9:85:e8:bd:21:b4:16:e2:e4: 67:64:a5:63:3e:eb:36:16:a0:e3:71:4c:9b:8a:e6:ca:15:cc: a0:5a:33:9f:b4:83:b4:ef:eb:26:98:52:c8:2d:75:c7:cc:75: 83:8a:e0:69:e4:8a:da:f1:82:81:11:1e:ef:3a:bb:b1:5f:a4: 09:54:75:d6:d1:9b:14:27:68:4e:3f:f0:17:b6:36:b4:bb:d0: 62:3b:ef:07:db:be:a2:8e:47:af:a9:05:be:41:e5:b8:cb:a5: 21:4a:8e:75:5a:f0:20:ab:94:15:62:a9:44:52:9c:67:f5:7d: 23:a6:67:b2:f6:7d:01:3e:0c:ba:ba:23:48:38:c3:86:90:6d: 28:af:13:01:39:1c:ae:b1:ab:fb:8d:1d:29:17:d0:da:26:1e: bb:37:5d:4e:5d:cf:44:84:0a:d4:38:92:71:59:0f:9d:0c:25: c3:32:65:3f:c8:a5:49:88:dc:73:3f:f2:54:c5:b5:30:9c:8d: 6d:62:5e:14 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI1MDgwMTAx MzUzMloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQzdEM0E5MzI2QjM1RDI3 RDZCQTVBMkIwQjEyMTU0NzBEMjgxRDdENTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANIgmMOsHqxpp751mwHVSpuWfdDJ6MgfpWNXNV3G1WJHGAD0ujMj LTvqBJ5OaVylGH3vAvJKTd/TnNV7JEscx+T5K5Kj5fSOk8LHyuY7awPsIM0VKsF7 +NOwXqPj4l5fkgx1Rzq6S5ZTpmwIpATIydjwNpIbCwg54cE3Iz1uLtjdRBXmL4YQ zoR+z64N8wycyuhWv9SrfEUOIGxsuPTpwBTsGNhco/6sfuC+2EJa9MIG9No2YAUs wO/oksTSkFtVYOQJ/eHtuxYd4Nn7y7fTCg6E+wIy+/SzdWVsrp7Az6osOWm1sQpC YM7XUw36nK5Y988VG5mNW7nGkZ666haTqocCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTH06kyazXSfWulorCxIVRw0oHX1TAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40 am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIveDlPcE1tczEwbjFycGFLd3NTRlVjTktCMTlVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBN/f4DANBgkqhkiG9w0BAQsFAAOCAQEAAQNlH9BNvP1VNTkyOkSGxZRpdrJV +CbIQ32zctNXZFgwByOw8205OhYuOh/6lIh9osv2VALeZdm2tNRCGJJ3qYXovSG0 FuLkZ2SlYz7rNhag43FMm4rmyhXMoFozn7SDtO/rJphSyC11x8x1g4rgaeSK2vGC gREe7zq7sV+kCVR11tGbFCdoTj/wF7Y2tLvQYjvvB9u+oo5Hr6kFvkHluMulIUqO dVrwIKuUFWKpRFKcZ/V9I6ZnsvZ9AT4MurojSDjDhpBtKK8TATkcrrGr+40dKRfQ 2iYeuzddTl3PRIQK1DiScVkPnQwlwzJlP8ilSYjccz/yVMW1MJyNbWJeFA== -----END CERTIFICATE-----Generated at Thu Nov 6 02:45:15 2025 by rpki-client