$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/VDsRZU94qsyNUnKRrwrLdh_5J2o.roa File: VDsRZU94qsyNUnKRrwrLdh_5J2o.roa (raw, json) Hash identifier: 3l4a4i2NTRDVouaMSLO8Rkizx6FMgtC+aOv1X96pA0g= Subject key identifier: 54:3B:11:65:4F:78:AA:CC:8D:52:72:91:AF:0A:CB:76:1F:F9:27:6A Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840 Certificate serial: 3B Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/VDsRZU94qsyNUnKRrwrLdh_5J2o.roa Signing time: Wed 26 Mar 2025 09:05:13 +0000 ROA not before: Wed 26 Mar 2025 09:05:13 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 131954 IP address blocks: 211.14.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840 Validity Not Before: Mar 26 09:05:13 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=543B11654F78AACC8D527291AF0ACB761FF9276A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:ee:8a:9a:72:d8:34:1b:e6:68:3f:36:16: ee:e2:c6:68:b4:73:f5:bf:00:03:c5:68:49:48:9d: 34:c4:5a:91:be:da:6b:91:79:d1:8f:4e:95:15:65: 46:b0:6b:7a:9b:8f:6b:fa:fa:d8:75:55:87:4d:73: e7:40:8e:d5:01:2e:8e:64:a2:4e:d2:28:a9:4d:0a: a3:e5:c2:7b:d7:c8:06:d2:5d:3b:36:e9:cf:f0:e8: f5:2c:20:ac:d8:1d:7d:2b:bf:cd:f7:9c:c1:46:42: 44:60:00:13:b8:74:f3:9f:ac:f5:84:69:dc:7f:c5: 26:58:d1:d1:b8:ec:14:fa:f2:d0:c0:ad:f4:a3:8a: f7:ef:41:74:68:a6:52:6e:e0:ae:6b:3e:75:14:97: 1a:82:e7:a5:9d:71:ab:d0:31:2a:52:de:43:3c:12: 08:d6:b7:c2:d6:6e:43:81:f1:ce:26:47:1f:84:c3: 43:2d:94:c0:57:7d:a2:26:98:b8:cf:d7:0c:8c:e1: 77:68:49:45:dc:63:a8:21:91:3f:0a:d3:c0:a4:ab: d9:ff:12:a8:53:79:16:0f:14:31:95:b0:d7:1c:19: c7:51:66:35:8f:82:16:b8:c5:47:6c:5b:ef:ae:dd: d5:67:43:b7:da:9a:01:4a:ca:71:38:af:88:56:23: 51:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3B:11:65:4F:78:AA:CC:8D:52:72:91:AF:0A:CB:76:1F:F9:27:6A X509v3 Authority Key Identifier: keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/VDsRZU94qsyNUnKRrwrLdh_5J2o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.192.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:ce:cf:1b:cd:86:7f:89:2d:da:36:8b:ff:da:bb:42:df:0e: 49:e2:24:03:64:2d:0f:4a:3b:cb:1f:a5:f4:21:00:a2:8c:15: 84:07:c2:b6:d0:68:dc:d2:11:9a:cd:22:5f:d1:40:cc:48:5d: 50:55:e3:6d:19:3f:ee:72:40:dd:f9:28:5b:78:01:79:02:3d: 74:35:1f:7d:4d:a7:f0:1c:75:c6:ee:17:ab:71:50:ab:4f:36: ef:14:ce:a9:bc:e5:b7:18:e0:e1:6b:bf:14:18:d4:80:70:c7: 9c:8e:4c:8a:5b:b3:91:0c:63:e2:cc:18:35:13:a3:33:55:e5: a4:aa:06:27:d8:f5:f9:3e:9a:26:af:37:e5:e6:97:bd:79:a9: 12:b0:75:f4:70:76:65:19:e0:4b:74:9b:1f:02:a2:f3:32:7d: 4d:92:fe:ff:2b:9f:0b:ca:78:1a:9d:5b:64:56:0f:63:48:8e: 73:86:1f:bf:c1:75:3d:d1:09:82:c2:2a:e3:9b:da:ea:ac:d0: e7:68:45:9e:57:5e:c3:e6:3b:0f:26:ca:ac:61:5b:0c:2f:37: 33:30:a1:d3:5f:97:4f:fc:c9:25:2a:14:c8:aa:98:c5:d6:61: 37:5c:7f:6a:e5:2f:ce:09:02:a6:73:27:73:78:4e:e2:00:bd: 61:fd:2f:70 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4 REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTI1MDMyNjA5 MDUxM1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoNTQzQjExNjU0Rjc4QUFD QzhENTI3MjkxQUYwQUNCNzYxRkY5Mjc2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKwn7oqactg0G+ZoPzYW7uLGaLRz9b8AA8VoSUidNMRakb7aa5F5 0Y9OlRVlRrBrepuPa/r62HVVh01z50CO1QEujmSiTtIoqU0Ko+XCe9fIBtJdOzbp z/Do9SwgrNgdfSu/zfecwUZCRGAAE7h085+s9YRp3H/FJljR0bjsFPry0MCt9KOK 9+9BdGimUm7grms+dRSXGoLnpZ1xq9AxKlLeQzwSCNa3wtZuQ4HxziZHH4TDQy2U wFd9oiaYuM/XDIzhd2hJRdxjqCGRPwrTwKSr2f8SqFN5Fg8UMZWw1xwZx1FmNY+C FrjFR2xb767d1WdDt9qaAUrKcTiviFYjUQECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRUOxFlT3iqzI1ScpGvCst2H/knajAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/ Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NTQvVkRzUlpVOTRxc3lOVW5LUnJ3ckxkaF81SjJvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtMOwDANBgkqhkiG9w0BAQsFAAOCAQEAS87PG82Gf4kt2jaL/9q7Qt8OSeIk A2QtD0o7yx+l9CEAoowVhAfCttBo3NIRms0iX9FAzEhdUFXjbRk/7nJA3fkoW3gB eQI9dDUffU2n8Bx1xu4Xq3FQq0827xTOqbzltxjg4Wu/FBjUgHDHnI5MiluzkQxj 4swYNROjM1XlpKoGJ9j1+T6aJq835eaXvXmpErB19HB2ZRngS3SbHwKi8zJ9TZL+ /yufC8p4Gp1bZFYPY0iOc4Yfv8F1PdEJgsIq45va6qzQ52hFnldew+Y7DybKrGFb DC83MzCh01+XT/zJJSoUyKqYxdZhN1x/auUvzgkCpnMnc3hO4gC9Yf0vcA== -----END CERTIFICATE-----Generated at Thu Nov 6 00:27:07 2025 by rpki-client