$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/Frh1fl6vHmRX2hNwQbCIE3zqoTI.roa File: Frh1fl6vHmRX2hNwQbCIE3zqoTI.roa (raw, json) Hash identifier: sUD7IqkSKZMq0G9K3GOkfdDXLlpv4T0w0aw1XhStTSM= Subject key identifier: 16:B8:75:7E:5E:AF:1E:64:57:DA:13:70:41:B0:88:13:7C:EA:A1:32 Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892 Certificate serial: B4 Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/Frh1fl6vHmRX2hNwQbCIE3zqoTI.roa Signing time: Wed 01 Oct 2025 01:33:14 +0000 ROA not before: Wed 01 Oct 2025 01:33:14 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 131976 IP address blocks: 113.192.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 20:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892 Validity Not Before: Oct 1 01:33:14 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=16B8757E5EAF1E6457DA137041B088137CEAA132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:3b:81:66:aa:28:b6:8f:a5:77:5e:f5:4e: 3c:2f:7c:fa:24:4b:f3:d7:1b:bd:35:38:1e:76:95: a2:2e:d4:51:d3:ca:55:71:f2:ca:63:af:51:1a:74: ff:ba:3f:05:95:09:45:2d:70:60:1d:12:32:e0:7f: 36:95:c2:2a:9b:ee:ee:7f:44:25:09:00:5e:57:95: da:b6:11:e3:a4:15:91:f0:37:86:65:72:b8:1f:ee: 09:96:09:dc:9d:75:49:36:16:73:27:d3:c6:d5:36: ac:86:87:4c:fe:6f:40:70:a7:24:f6:58:aa:06:92: a6:21:47:68:ae:cd:eb:f8:59:14:d6:70:61:2f:6d: ef:31:3b:8e:48:19:81:5e:89:6e:e5:ad:46:42:f5: 97:25:77:69:b4:85:01:0b:c5:87:56:76:61:23:a0: 40:5d:f4:38:e2:2e:56:3b:c5:2a:26:24:03:13:06: 72:89:59:31:cb:fb:26:b7:12:98:3a:f8:c9:79:82: 80:23:02:59:8e:97:af:b3:5b:f0:d6:1a:f0:91:c3: d1:86:14:c2:02:fd:ac:33:7a:c1:cb:49:da:70:dd: 9c:d4:4b:12:51:cf:3c:0f:37:54:1d:d4:e7:9a:4b: b2:f7:00:6b:9a:0f:8b:c2:68:a3:ad:ee:64:2d:68: 75:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B8:75:7E:5E:AF:1E:64:57:DA:13:70:41:B0:88:13:7C:EA:A1:32 X509v3 Authority Key Identifier: keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/Frh1fl6vHmRX2hNwQbCIE3zqoTI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.192.20.0/24 Signature Algorithm: sha256WithRSAEncryption 05:99:7d:82:e5:ab:94:06:1d:48:e4:1e:4c:54:c4:56:55:8d: b5:7f:96:12:5b:9d:2a:01:94:d6:8a:8b:2a:88:ff:fd:2e:36: fc:c8:39:d1:da:ee:f7:3c:8d:33:f4:3c:a9:90:8d:b8:88:92: 9c:81:5b:42:cf:92:33:42:3e:73:b4:90:0f:36:02:7e:02:3e: 41:d6:6d:d6:aa:c4:d3:d3:1f:81:1a:f2:cb:a5:98:7b:fa:cb: fb:78:2e:46:04:b3:48:26:ac:cf:d1:16:8a:6b:7d:92:75:83: 84:c1:8e:8d:d6:15:cb:7f:7f:0f:54:48:e9:1f:8a:eb:b8:7a: 5c:09:34:dd:5e:83:19:83:dc:83:05:21:2c:47:45:44:4d:4f: 1f:38:6a:74:9e:00:8a:f0:1b:c2:72:63:b1:b0:d6:87:21:2f: 0a:e4:ec:9e:21:7f:a2:41:d0:db:55:25:cc:26:e9:7b:dc:71: 7c:d1:ae:b2:c4:7d:8f:d8:62:59:f5:d4:a6:0c:53:8a:d6:c8: bb:9b:d4:58:39:c0:93:c1:37:0b:25:ba:2c:a0:83:40:3e:f2: 2b:c4:32:60:ac:9d:3d:ea:14:46:42:58:b2:6f:37:9f:b4:98: e0:50:13:9e:66:17:88:da:33:c5:aa:7d:98:64:73:63:3b:56: 41:8a:95:50 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICALQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNTEwMDEw MTMzMTRaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE2Qjg3NTdFNUVBRjFF NjQ1N0RBMTM3MDQxQjA4ODEzN0NFQUExMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR0TuBZqooto+ld171TjwvfPokS/PXG701OB52laIu1FHTylVx 8spjr1EadP+6PwWVCUUtcGAdEjLgfzaVwiqb7u5/RCUJAF5Xldq2EeOkFZHwN4Zl crgf7gmWCdyddUk2FnMn08bVNqyGh0z+b0BwpyT2WKoGkqYhR2iuzev4WRTWcGEv be8xO45IGYFeiW7lrUZC9Zcld2m0hQELxYdWdmEjoEBd9DjiLlY7xSomJAMTBnKJ WTHL+ya3Epg6+Ml5goAjAlmOl6+zW/DWGvCRw9GGFMIC/awzesHLSdpw3ZzUSxJR zzwPN1Qd1OeaS7L3AGuaD4vCaKOt7mQtaHWLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFrh1fl6vHmRX2hNwQbCIE3zqoTIwHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjA3L0ZyaDFmbDZ2SG1SWDJoTndRYkNJRTN6cW9USS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABxwBQwDQYJKoZIhvcNAQELBQADggEBAAWZfYLlq5QGHUjkHkxUxFZVjbV/ lhJbnSoBlNaKiyqI//0uNvzIOdHa7vc8jTP0PKmQjbiIkpyBW0LPkjNCPnO0kA82 An4CPkHWbdaqxNPTH4Ea8sulmHv6y/t4LkYEs0gmrM/RFoprfZJ1g4TBjo3WFct/ fw9USOkfiuu4elwJNN1egxmD3IMFISxHRURNTx84anSeAIrwG8JyY7Gw1ochLwrk 7J4hf6JB0NtVJcwm6XvccXzRrrLEfY/YYln11KYMU4rWyLub1Fg5wJPBNwsluiyg g0A+8ivEMmCsnT3qFEZCWLJvN5+0mOBQE55mF4jaM8WqfZhkc2M7VkGKlVA= -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:25 2025 by rpki-client