$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30187/3XGY2tGpuGaN2dHODrcqk3Pm1cc.roa File: 3XGY2tGpuGaN2dHODrcqk3Pm1cc.roa (raw, json) Hash identifier: ZSXDqZ7Z9yLT9LclZPawSFRzuWxjWqBOmGVYYREW2/4= Subject key identifier: DD:71:98:DA:D1:A9:B8:66:8D:D9:D1:CE:0E:B7:2A:93:73:E6:D5:C7 Certificate issuer: /CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED Certificate serial: 22 Authority key identifier: FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/3XGY2tGpuGaN2dHODrcqk3Pm1cc.roa Signing time: Wed 01 Oct 2025 01:32:25 +0000 ROA not before: Wed 01 Oct 2025 01:32:25 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 18278 IP address blocks: 2400:a300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Oct 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED Validity Not Before: Oct 1 01:32:25 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=DD7198DAD1A9B8668DD9D1CE0EB72A9373E6D5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:17:23:a9:b3:85:43:94:df:57:fa:47:83: ec:ad:8f:45:7b:2e:aa:46:c6:ef:f1:7c:35:02:b5: c0:21:02:fc:36:10:c5:5f:c8:c4:83:ea:e0:a7:82: 56:cf:99:b5:df:e5:91:e9:80:a4:04:1d:e1:88:e9: c8:cd:a2:00:60:e7:fc:1d:01:1e:4e:9a:e0:e9:ee: 16:ef:60:59:41:43:ae:09:9e:6f:9d:85:3b:30:ec: 21:94:87:a1:fe:57:14:20:fe:e3:b8:e7:aa:8a:1a: 90:1d:f2:b8:e5:65:e4:cf:4b:82:d9:82:88:de:70: b9:be:c0:fb:92:15:5c:90:3d:32:fc:d4:5a:c1:9c: 48:d0:6e:ab:fb:61:11:e8:14:37:03:8f:86:c1:fe: 5b:c5:c5:ea:6f:7a:2d:5f:12:3d:cf:2b:9b:35:88: 2b:5f:4a:18:f9:11:86:a7:74:a8:b9:fa:49:c2:3a: 7e:ec:1b:ec:ff:23:f7:e3:44:d8:e9:76:66:ce:48: 10:27:49:1c:67:25:43:df:85:ac:0d:ec:d1:70:e4: 18:64:a2:5b:81:8a:e9:8f:45:8e:95:8d:ca:fb:35: db:54:49:1e:c0:7d:7d:0e:61:91:6f:52:f9:92:94: f7:48:21:cc:b4:60:15:4c:05:44:53:ee:4b:08:a1: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:71:98:DA:D1:A9:B8:66:8D:D9:D1:CE:0E:B7:2A:93:73:E6:D5:C7 X509v3 Authority Key Identifier: keyid:FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/3XGY2tGpuGaN2dHODrcqk3Pm1cc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:a300::/32 Signature Algorithm: sha256WithRSAEncryption 14:36:fe:53:d6:14:e8:15:30:25:35:cb:25:ee:12:11:3c:fd: 2f:97:b4:06:56:be:a4:c6:8d:4b:4f:de:50:fa:42:71:e8:b6: 72:d6:c8:e6:06:7f:63:5b:96:3a:f6:5e:b2:12:a6:7b:a8:81: 81:fc:d4:f6:dc:96:09:3c:c7:34:38:9d:9f:cf:db:28:8a:fa: 1c:49:ab:f9:5f:94:5d:4e:b4:74:17:4e:de:4d:a9:c8:86:6f: 0d:dc:8c:04:96:bc:c8:08:40:c0:df:0b:c3:41:09:24:49:51: fe:28:cb:eb:1c:4c:d8:e3:2e:4a:70:d9:03:9c:1b:38:70:99: 6d:77:ae:d0:b8:9c:5d:9d:56:c9:53:e1:c9:c4:b7:eb:04:b2: 11:f3:8c:99:d1:03:ae:cd:0c:39:3b:0f:6f:00:28:36:69:58: cb:a4:8c:87:36:c4:6f:44:2f:28:db:27:e6:cc:4a:eb:f1:ef: 58:93:8c:c2:97:50:a4:8b:e9:d9:c0:27:49:06:6d:8f:59:f7: 8c:c1:37:9e:b3:31:e3:c8:31:3b:31:64:7a:80:db:27:f3:03: 84:78:9b:3a:d2:9f:8a:af:ac:aa:6e:74:5c:fe:bc:e3:29:79: 5e:8b:db:cc:94:0e:40:cf:88:4d:a2:f9:3f:1e:47:8c:cf:b1: fb:43:f8:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQzk3 MkM3MTlGODZDNTNCODJERkJENjgxRkIzMUYxNENEQUJEQ0VEMB4XDTI1MTAwMTAx MzIyNVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoREQ3MTk4REFEMUE5Qjg2 NjhERDlEMUNFMEVCNzJBOTM3M0U2RDVDNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMdVFyOps4VDlN9X+keD7K2PRXsuqkbG7/F8NQK1wCEC/DYQxV/I xIPq4KeCVs+Ztd/lkemApAQd4YjpyM2iAGDn/B0BHk6a4OnuFu9gWUFDrgmeb52F OzDsIZSHof5XFCD+47jnqooakB3yuOVl5M9LgtmCiN5wub7A+5IVXJA9MvzUWsGc SNBuq/thEegUNwOPhsH+W8XF6m96LV8SPc8rmzWIK19KGPkRhqd0qLn6ScI6fuwb 7P8j9+NE2Ol2Zs5IECdJHGclQ9+FrA3s0XDkGGSiW4GK6Y9FjpWNyvs121RJHsB9 fQ5hkW9S+ZKU90ghzLRgFUwFRFPuSwihuBMCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTdcZja0am4Zo3Z0c4OtyqTc+bVxzAfBgNVHSMEGDAWgBT8lyxxn4bFO4LfvWgf sx8Uzavc7TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxODcvX0pjc2NaLUd4VHVDMzcxb0g3TWZGTTJyM08wLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX0pjc2NaLUd4VHVDMzcxb0g3TWZG TTJyM08wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTg3LzNYR1kydEdwdUdhTjJkSE9EcmNxazNQbTFjYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAKMAMA0GCSqGSIb3DQEBCwUAA4IBAQAUNv5T1hToFTAlNcsl7hIR PP0vl7QGVr6kxo1LT95Q+kJx6LZy1sjmBn9jW5Y69l6yEqZ7qIGB/NT23JYJPMc0 OJ2fz9soivocSav5X5RdTrR0F07eTanIhm8N3IwElrzICEDA3wvDQQkkSVH+KMvr HEzY4y5KcNkDnBs4cJltd67QuJxdnVbJU+HJxLfrBLIR84yZ0QOuzQw5Ow9vACg2 aVjLpIyHNsRvRC8o2yfmzErr8e9Yk4zCl1Cki+nZwCdJBm2PWfeMwTeeszHjyDE7 MWR6gNsn8wOEeJs60p+Kr6yqbnRc/rzjKXlei9vMlA5Az4hNovk/HkeMz7H7Q/iR -----END CERTIFICATE-----Generated at Thu Oct 9 05:44:16 2025 by rpki-client