$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/9xoNcGOujYBoFbt-3N-Cvu_oRpE.roa File: 9xoNcGOujYBoFbt-3N-Cvu_oRpE.roa (raw, json) Hash identifier: z//EgDeJrfhQZ50iUo7LxsIGoIMXlet351baENpzn0I= Subject key identifier: F7:1A:0D:70:63:AE:8D:80:68:15:BB:7E:DC:DF:82:BE:EF:E8:46:91 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 52 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/9xoNcGOujYBoFbt-3N-Cvu_oRpE.roa Signing time: Wed 01 Oct 2025 01:32:15 +0000 ROA not before: Wed 01 Oct 2025 01:32:15 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 23783 IP address blocks: 219.124.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 20:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Oct 1 01:32:15 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=F71A0D7063AE8D806815BB7EDCDF82BEEFE84691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:6e:6e:7f:a6:d6:c1:72:16:b0:d8:ff:c5: 98:22:71:cf:9f:7c:4c:6b:56:00:be:7c:cc:a0:80: 11:11:56:47:cd:af:93:ae:1d:82:9b:59:73:30:03: 68:35:10:58:d2:1f:b5:e3:68:c0:17:0a:b5:5e:aa: 51:4d:28:68:ca:ad:b6:96:a4:5a:89:ef:82:f9:26: 05:f0:57:aa:85:a6:0a:51:dd:c3:56:4b:b7:36:52: 3b:2f:21:f4:7b:b8:3a:ea:ec:b5:15:20:3f:09:30: 9d:7c:26:3a:ca:03:c8:d5:42:40:e5:c1:1a:7d:fb: 6e:e3:4d:5a:3d:76:47:bb:af:e6:00:a9:03:d1:c0: 5d:76:ca:aa:ac:1a:84:f0:bc:4a:21:3b:42:7e:e0: 2c:c5:5e:99:97:41:a2:40:2c:8c:df:cf:74:96:02: 9e:70:df:73:6e:87:4b:2d:c4:65:a0:31:ac:f2:d2: e8:b3:d0:1e:29:3e:40:63:aa:a1:08:e7:bc:8f:be: fa:1f:87:25:89:4f:8d:27:79:22:98:ac:d2:5d:2a: 3e:27:66:3e:b1:e8:a4:15:78:28:54:ab:4f:43:96: a6:23:7d:51:0e:67:8a:b5:5a:57:2b:b6:1a:2c:65: 14:d2:25:23:72:d0:c8:49:fd:9e:a7:79:00:ae:e1: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1A:0D:70:63:AE:8D:80:68:15:BB:7E:DC:DF:82:BE:EF:E8:46:91 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/9xoNcGOujYBoFbt-3N-Cvu_oRpE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.124.104.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:39:92:59:ab:f8:61:86:8e:bc:5d:ac:bf:37:95:53:de:56: 36:2e:05:75:db:93:b0:c6:27:1d:cf:64:e2:38:56:07:ca:31: 1b:9b:c5:9e:e1:cd:0b:08:19:b9:25:d9:f9:60:e9:5e:ee:2b: a0:7d:ba:f1:b8:4f:fe:17:cf:44:96:1d:fb:3a:2c:4a:b4:64: 7a:e2:6f:69:4b:b6:18:be:2e:dd:71:94:49:ae:c2:6d:09:ac: 93:77:da:63:b1:cf:b1:d9:b5:01:dd:a7:98:dd:64:ca:da:af: e8:7c:fe:3d:eb:88:ab:cc:ab:cd:35:2d:43:35:19:eb:58:3b: 6b:63:38:a6:c3:04:fc:3c:5a:1e:27:65:34:84:30:70:7f:0d: e0:c0:0d:06:27:dc:01:bd:61:23:76:d1:e7:1c:0f:6e:dd:fc: 0d:25:81:49:38:a9:5c:4b:af:86:14:fc:ec:8f:da:62:ed:18: db:5b:35:12:b6:46:0a:bb:6a:e5:4d:9a:2c:76:dc:3f:e7:e1: 39:dc:1d:89:94:93:c6:ad:e4:80:9c:a7:1f:18:23:0c:76:0d: df:0b:c8:b7:21:7a:3c:a3:52:40:6a:fd:ca:75:74:a3:8c:e3: 6a:44:d0:e6:29:ec:fa:f0:a7:74:38:ab:47:bf:80:4d:e3:f3: 3e:14:9f:8f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI1MTAwMTAx MzIxNVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoRjcxQTBENzA2M0FFOEQ4 MDY4MTVCQjdFRENERjgyQkVFRkU4NDY5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKM8bm5/ptbBchaw2P/FmCJxz598TGtWAL58zKCAERFWR82vk64d gptZczADaDUQWNIfteNowBcKtV6qUU0oaMqttpakWonvgvkmBfBXqoWmClHdw1ZL tzZSOy8h9Hu4OurstRUgPwkwnXwmOsoDyNVCQOXBGn37buNNWj12R7uv5gCpA9HA XXbKqqwahPC8SiE7Qn7gLMVemZdBokAsjN/PdJYCnnDfc26HSy3EZaAxrPLS6LPQ Hik+QGOqoQjnvI+++h+HJYlPjSd5Ipis0l0qPidmPrHopBV4KFSrT0OWpiN9UQ5n irVaVyu2GixlFNIlI3LQyEn9nqd5AK7hSrcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBT3Gg1wY66NgGgVu37c34K+7+hGkTAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvOXhvTmNHT3VqWUJvRmJ0LTNOLUN2dV9vUnBFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9t8aDANBgkqhkiG9w0BAQsFAAOCAQEAPDmSWav4YYaOvF2svzeVU95WNi4F dduTsMYnHc9k4jhWB8oxG5vFnuHNCwgZuSXZ+WDpXu4roH268bhP/hfPRJYd+zos SrRkeuJvaUu2GL4u3XGUSa7CbQmsk3faY7HPsdm1Ad2nmN1kytqv6Hz+PeuIq8yr zTUtQzUZ61g7a2M4psME/DxaHidlNIQwcH8N4MANBifcAb1hI3bR5xwPbt38DSWB STipXEuvhhT87I/aYu0Y21s1ErZGCrtq5U2aLHbcP+fhOdwdiZSTxq3kgJynHxgj DHYN3wvItyF6PKNSQGr9ynV0o4zjakTQ5ins+vCndDirR7+ATePzPhSfjw== -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:32 2025 by rpki-client