$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/edkvcG9mQx6W4GZzi-e6WPwzPMk.roa File: edkvcG9mQx6W4GZzi-e6WPwzPMk.roa (raw, json) Hash identifier: ghKi7XWKwWYn3KZb2pMxy1r+H9/eUYRtF6IWOMNlcyM= Subject key identifier: 79:D9:2F:70:6F:66:43:1E:96:E0:66:73:8B:E7:BA:58:FC:33:3C:C9 Certificate issuer: /CN=71B974F0FD34DDC354AF961A78E84E511D351A63 Certificate serial: 21 Authority key identifier: 71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cbl08P003cNUr5YaeOhOUR01GmM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/edkvcG9mQx6W4GZzi-e6WPwzPMk.roa Signing time: Tue 01 Jul 2025 01:31:24 +0000 ROA not before: Tue 01 Jul 2025 01:31:24 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 131965 IP address blocks: 85.131.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cbl08P003cNUr5YaeOhOUR01GmM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B974F0FD34DDC354AF961A78E84E511D351A63 Validity Not Before: Jul 1 01:31:24 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=79D92F706F66431E96E066738BE7BA58FC333CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:34:75:5d:12:6a:2c:1e:5a:43:a2:74:e8: e5:71:fe:76:b8:c4:b8:61:1f:05:e4:ba:c5:fe:a9: f1:7d:88:e8:e1:1f:98:d9:26:6b:88:e8:21:00:59: 2e:03:77:49:11:c1:97:10:96:52:d5:94:48:58:9d: c4:72:08:a7:5d:a5:9e:f6:7c:98:12:7e:e8:87:14: 6c:cd:cc:a6:0a:65:03:c5:45:aa:a9:cd:3e:86:42: 13:22:3e:f8:0f:6a:29:ab:37:72:35:c8:ba:ad:78: a6:ec:88:6c:3a:5a:6d:b9:1d:ff:72:76:02:e3:a9: 6e:4d:89:17:96:08:d4:42:6d:c7:dc:76:a0:b9:42: 5c:07:60:b8:86:95:33:ce:fe:63:df:f3:a0:60:bd: 83:d4:61:ab:39:68:b3:cf:0e:5e:9c:78:ce:ea:63: 38:23:d5:48:cc:29:45:e5:f0:fd:58:6d:c1:39:e3: 44:61:0d:78:e5:30:73:c0:c6:4c:36:b3:15:39:6f: 7b:d5:42:a8:0a:c4:d7:9e:2d:35:bc:18:b9:d0:51: 2c:1c:51:de:3a:cf:27:64:a5:39:2b:d5:98:88:0c: ff:c4:a3:da:f4:9f:8d:c6:84:08:4a:8e:38:01:53: d2:ac:3b:32:cf:9c:99:aa:47:ee:f5:5a:94:90:e7: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D9:2F:70:6F:66:43:1E:96:E0:66:73:8B:E7:BA:58:FC:33:3C:C9 X509v3 Authority Key Identifier: keyid:71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cbl08P003cNUr5YaeOhOUR01GmM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/edkvcG9mQx6W4GZzi-e6WPwzPMk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 85.131.192.0/18 Signature Algorithm: sha256WithRSAEncryption 8f:2a:7f:8a:4f:d2:51:67:a7:fd:f1:ba:4d:76:bc:bb:a0:0e: 14:bf:4c:bd:c6:78:0c:ef:e9:51:52:47:a2:cb:a8:90:97:0c: c9:a5:93:ff:bd:62:cf:1b:4a:1e:71:5a:14:c3:84:09:b8:fb: fc:9b:98:f9:e7:e6:35:2d:59:16:8d:04:21:58:02:57:c4:e8: 21:44:b2:16:a9:3b:50:2d:f4:5e:51:67:f1:fd:5d:29:d7:83: dd:cf:29:08:e1:44:56:2b:5d:6b:46:15:19:14:aa:aa:22:fc: d3:ca:be:e4:a9:b8:86:5b:4a:e4:dd:1d:b1:44:ba:b8:e1:fc: da:ab:f3:06:4c:ed:0c:11:9a:f3:bd:d8:20:dd:6b:05:25:dd: ad:82:ec:43:22:ad:c9:b5:72:fc:e8:fd:c7:18:fc:76:cc:51: df:c5:e9:b8:3b:10:32:75:79:c9:1d:8b:ac:7d:b3:b1:74:fa: 39:7f:cb:b4:23:08:4d:a9:71:58:2a:95:94:4e:9e:d9:fd:2c: f0:4c:b8:fb:df:45:8c:b9:7a:1c:cc:1e:b0:71:b1:6d:2a:ce: 52:55:77:1a:6f:18:74:db:3d:08:53:09:51:ef:8a:33:c0:ca: ad:e0:fd:6b:65:5b:4b:d8:1d:91:e2:dc:ca:7c:4c:f7:a6:db: 52:d1:49:d2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MUI5 NzRGMEZEMzREREMzNTRBRjk2MUE3OEU4NEU1MTFEMzUxQTYzMB4XDTI1MDcwMTAx MzEyNFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNzlEOTJGNzA2RjY2NDMx RTk2RTA2NjczOEJFN0JBNThGQzMzM0NDOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANKFNHVdEmosHlpDonTo5XH+drjEuGEfBeS6xf6p8X2I6OEfmNkm a4joIQBZLgN3SRHBlxCWUtWUSFidxHIIp12lnvZ8mBJ+6IcUbM3MpgplA8VFqqnN PoZCEyI++A9qKas3cjXIuq14puyIbDpabbkd/3J2AuOpbk2JF5YI1EJtx9x2oLlC XAdguIaVM87+Y9/zoGC9g9Rhqzlos88OXpx4zupjOCPVSMwpReXw/VhtwTnjRGEN eOUwc8DGTDazFTlve9VCqArE154tNbwYudBRLBxR3jrPJ2SlOSvVmIgM/8Sj2vSf jcaECEqOOAFT0qw7Ms+cmapH7vValJDn458CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR52S9wb2ZDHpbgZnOL57pY/DM8yTAfBgNVHSMEGDAWgBRxuXTw/TTdw1Svlhp4 6E5RHTUaYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL2NibDA4UDAwM2NOVXI1WWFlT2hPVVIwMUdtTS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NibDA4UDAwM2NOVXI1WWFlT2hPVVIw MUdtTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvZWRrdmNHOW1ReDZXNEdaemktZTZXUHd6UE1rLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBlWDwDANBgkqhkiG9w0BAQsFAAOCAQEAjyp/ik/SUWen/fG6TXa8u6AOFL9M vcZ4DO/pUVJHosuokJcMyaWT/71izxtKHnFaFMOECbj7/JuY+efmNS1ZFo0EIVgC V8ToIUSyFqk7UC30XlFn8f1dKdeD3c8pCOFEVitda0YVGRSqqiL808q+5Km4hltK 5N0dsUS6uOH82qvzBkztDBGa873YIN1rBSXdrYLsQyKtybVy/Oj9xxj8dsxR38Xp uDsQMnV5yR2LrH2zsXT6OX/LtCMITalxWCqVlE6e2f0s8Ey4+99FjLl6HMwesHGx bSrOUlV3Gm8YdNs9CFMJUe+KM8DKreD9a2VbS9gdkeLcynxM96bbUtFJ0g== -----END CERTIFICATE-----Generated at Thu Nov 6 00:20:45 2025 by rpki-client