$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/r_2JqkOEwNhqu4Mj-3f0W3Ys7f4.roa File: r_2JqkOEwNhqu4Mj-3f0W3Ys7f4.roa (raw, json) Hash identifier: hTpsGmszDlVgqZ/f4X/VQ84Eou3MYm7evizuZ6iu1CI= Subject key identifier: AF:FD:89:AA:43:84:C0:D8:6A:BB:83:23:FB:77:F4:5B:76:2C:ED:FE Certificate issuer: /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC Certificate serial: 89 Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/r_2JqkOEwNhqu4Mj-3f0W3Ys7f4.roa Signing time: Wed 01 Oct 2025 01:33:17 +0000 ROA not before: Wed 01 Oct 2025 01:33:17 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 7521 IP address blocks: 113.192.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 20:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC Validity Not Before: Oct 1 01:33:17 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=AFFD89AA4384C0D86ABB8323FB77F45B762CEDFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:22:9c:46:4c:ee:f9:19:9f:15:f9:59:ad: 4f:d1:ff:15:32:57:7c:96:07:33:ce:c0:76:a0:fc: 37:9a:ee:af:cc:86:e5:b2:4f:f4:a8:c6:1a:a9:b7: 89:25:49:e0:8a:13:7a:2a:29:c9:c6:f5:a9:df:34: 84:6d:55:86:f6:0e:13:4f:58:40:e9:6c:c6:5c:ea: 99:34:60:b8:e9:0e:13:d6:e4:70:7c:78:db:7b:b2: 5b:ea:63:7b:5d:3a:6e:94:fd:01:1c:3b:b5:84:0b: 92:82:dd:98:64:33:7e:3d:41:04:8a:24:58:cf:a3: 30:81:62:d9:6b:3f:14:64:32:6d:36:e4:c1:7a:ef: 0f:19:b9:ef:47:05:20:b0:0c:4d:25:d5:e9:12:b4: 3a:15:c9:de:1a:39:f2:92:5f:cf:98:3c:a1:d3:0d: 4d:9c:7c:8c:72:50:bb:78:e7:48:c8:43:35:8a:90: 7d:f9:6c:6c:86:18:e4:d2:1f:a5:7a:c5:84:b5:79: 9a:3f:dc:9a:fc:3f:3b:a7:54:ff:d2:f4:9d:75:e5: c3:65:ec:30:a2:6c:87:06:23:d0:aa:87:ad:ab:4f: f0:57:06:61:a8:e8:a7:e9:d9:01:c7:c4:e6:d7:1a: 92:29:c9:05:0c:04:70:14:fb:d5:fd:18:a8:07:df: b6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FD:89:AA:43:84:C0:D8:6A:BB:83:23:FB:77:F4:5B:76:2C:ED:FE X509v3 Authority Key Identifier: keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/r_2JqkOEwNhqu4Mj-3f0W3Ys7f4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.192.22.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:aa:99:c3:4b:9e:8a:87:19:9f:1e:6b:aa:49:ff:41:4d:1c: 0d:dd:a4:d7:b2:af:63:47:07:85:0c:73:27:de:9d:2d:fd:d5: a4:b6:2d:e8:c8:a2:90:93:7a:d3:23:46:88:ad:42:10:ab:33: 35:d2:e0:45:e5:f2:7e:e1:97:e6:63:eb:cb:10:a8:a7:85:ff: 35:b4:86:d6:4b:49:21:08:b1:0f:11:8d:ac:73:27:4c:7b:94: 39:af:37:95:d9:99:e9:94:4c:08:db:9a:dc:3f:06:08:a4:cb: 4c:72:d4:00:a9:49:9e:69:fc:20:fd:1a:70:e4:81:7d:99:8a: 9b:10:1f:da:64:c2:93:84:e6:ce:54:51:ab:06:25:cf:9f:d5: fe:46:e0:3d:4d:2b:bb:37:75:70:7b:5d:42:f3:1f:49:87:85: df:bd:9b:89:11:3f:76:01:d5:92:6f:05:7c:55:79:cf:84:51: 0a:68:60:47:2a:5d:dd:7c:ee:0b:1b:6f:99:87:60:66:30:07: 0b:3a:50:f9:26:67:93:51:47:8d:7a:a9:71:15:b0:2e:78:10: dc:47:c4:6e:dd:fb:bb:52:1d:04:cc:c0:d1:72:29:f8:88:16: 25:6f:a4:84:df:21:a0:23:24:74:02:7c:e1:28:5b:5f:14:d0: 41:86:3a:c0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzNB MDNEMjg2MTk2Q0IzMzg4MDI4QjQwNDdCRTRGMUY5QjBGRUJBQzAeFw0yNTEwMDEw MTMzMTdaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGRkQ4OUFBNDM4NEMw RDg2QUJCODMyM0ZCNzdGNDVCNzYyQ0VERkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/TSKcRkzu+RmfFflZrU/R/xUyV3yWBzPOwHag/Dea7q/MhuWy T/Soxhqpt4klSeCKE3oqKcnG9anfNIRtVYb2DhNPWEDpbMZc6pk0YLjpDhPW5HB8 eNt7slvqY3tdOm6U/QEcO7WEC5KC3ZhkM349QQSKJFjPozCBYtlrPxRkMm025MF6 7w8Zue9HBSCwDE0l1ekStDoVyd4aOfKSX8+YPKHTDU2cfIxyULt450jIQzWKkH35 bGyGGOTSH6V6xYS1eZo/3Jr8PzunVP/S9J115cNl7DCibIcGI9Cqh62rT/BXBmGo 6Kfp2QHHxObXGpIpyQUMBHAU+9X9GKgH37aVAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUr/2JqkOEwNhqu4Mj+3f0W3Ys7f4wHwYDVR0jBBgwFoAUw6A9KGGWyzOIAotA R75PH5sP66wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjA3L3c2QTlLR0dXeXpPSUFvdEFSNzVQSDVzUDY2dy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3c2QTlLR0dXeXpPSUFvdEFSNzVQ SDVzUDY2dy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDIwNy9yXzJKcWtPRXdOaHF1NE1qLTNmMFczWXM3ZjQu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBccAWMA0GCSqGSIb3DQEBCwUAA4IBAQA+qpnDS56KhxmfHmuqSf9B TRwN3aTXsq9jRweFDHMn3p0t/dWkti3oyKKQk3rTI0aIrUIQqzM10uBF5fJ+4Zfm Y+vLEKinhf81tIbWS0khCLEPEY2scydMe5Q5rzeV2ZnplEwI25rcPwYIpMtMctQA qUmeafwg/Rpw5IF9mYqbEB/aZMKThObOVFGrBiXPn9X+RuA9TSu7N3Vwe11C8x9J h4XfvZuJET92AdWSbwV8VXnPhFEKaGBHKl3dfO4LG2+Zh2BmMAcLOlD5JmeTUUeN eqlxFbAueBDcR8Ru3fu7Uh0EzMDRcin4iBYlb6SE3yGgIyR0AnzhKFtfFNBBhjrA -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:23 2025 by rpki-client