$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/O8OLsY3pBkWnnk5ii7nD_-D7UQw.roa File: O8OLsY3pBkWnnk5ii7nD_-D7UQw.roa (raw, json) Hash identifier: Wk/zMs0RDuMgOP+7ET3ZhpbGuO0Ks6Tw1Qw4UN2J5Bo= Subject key identifier: 3B:C3:8B:B1:8D:E9:06:45:A7:9E:4E:62:8B:B9:C3:FF:E0:FB:51:0C Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 50 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/O8OLsY3pBkWnnk5ii7nD_-D7UQw.roa Signing time: Wed 01 Oct 2025 01:32:13 +0000 ROA not before: Wed 01 Oct 2025 01:32:13 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 23783 IP address blocks: 219.124.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 20:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Oct 1 01:32:13 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=3BC38BB18DE90645A79E4E628BB9C3FFE0FB510C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:2c:25:ab:15:e5:00:ec:01:85:c0:1b:d6: 7f:a1:98:a9:5d:77:e7:fd:00:a2:c8:80:36:ca:4d: 82:f5:2f:74:ff:5a:00:93:22:bf:7b:ed:62:84:31: 00:2c:23:78:9a:af:9c:ad:53:b0:a1:82:15:37:e5: 37:06:f0:66:49:9a:61:15:13:40:20:b2:a1:b3:1f: e9:f6:15:1f:60:e7:4f:82:61:25:89:0c:01:a5:1a: e8:6f:a9:e5:e2:6f:eb:90:ba:3c:a6:0f:68:c6:1e: 8e:aa:8f:4f:2a:a2:77:c2:e6:3e:e0:ea:71:4e:63: 68:5b:c0:6c:72:e9:94:86:93:37:42:0e:9d:4f:68: 66:54:3e:9a:7a:a2:ba:d9:d5:8b:f4:32:95:60:ea: 89:9a:9a:37:a7:d2:20:60:df:cb:de:95:26:2c:c0: d9:0f:bc:32:3e:3b:8c:48:5e:24:10:ec:7c:87:6b: 60:32:38:b8:aa:d6:df:06:06:bf:a3:c2:3a:50:b8: 0b:ec:be:cd:1b:54:e1:51:99:9b:5f:8f:66:10:59: 30:79:5a:3e:95:d7:64:c8:75:b1:c4:1d:ff:1f:f7: 1d:83:40:ff:ff:99:ba:cd:6e:ba:4c:ff:d7:17:41: 04:b4:a7:18:f1:fb:f8:62:12:83:4e:65:c8:be:23: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C3:8B:B1:8D:E9:06:45:A7:9E:4E:62:8B:B9:C3:FF:E0:FB:51:0C X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/O8OLsY3pBkWnnk5ii7nD_-D7UQw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.124.98.0/23 Signature Algorithm: sha256WithRSAEncryption 40:d5:a0:62:87:11:38:93:a0:4b:f2:5e:3b:18:3b:e7:e8:66: ea:f2:98:46:04:fe:90:75:c3:b0:19:01:9e:cb:76:f6:12:d5: 70:ea:03:68:14:a6:a7:2f:df:24:4d:50:cf:9e:3d:33:7f:5b: 45:5c:ed:cb:70:02:61:69:37:e3:98:c8:36:87:c1:b6:ab:dd: 08:d5:ad:a2:27:f9:b1:81:02:43:08:78:a4:be:1e:1f:f0:d8: 86:b0:5b:ae:1b:03:a9:f8:a5:9d:4d:5f:d5:ab:3f:1d:a8:9a: 21:41:7c:d4:8c:a2:d0:38:b9:53:1f:cb:93:38:1e:21:18:dd: 6b:4b:71:45:64:d5:ad:c1:40:20:51:79:fa:69:42:20:ba:da: 35:63:11:aa:ed:c5:b4:00:c2:ed:00:9b:e8:70:c0:ec:b7:12: fe:4a:33:90:5b:fc:03:43:95:2c:01:9e:83:ed:e3:0a:9a:4c: 99:43:5f:8c:61:48:d5:8d:e6:57:91:71:09:20:49:8c:c0:90: 02:d4:62:5a:a1:c3:fe:3f:cd:34:92:30:3a:48:5c:1a:97:8d: 24:12:20:7b:9f:0c:dc:9c:b9:10:b5:6c:4c:74:3a:6e:f1:0d: 59:90:dd:e1:ea:b0:11:68:86:52:49:78:98:5f:7a:ed:fd:2a: 53:2d:48:6f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI1MTAwMTAx MzIxM1oXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoM0JDMzhCQjE4REU5MDY0 NUE3OUU0RTYyOEJCOUMzRkZFMEZCNTEwQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANVyLCWrFeUA7AGFwBvWf6GYqV135/0AosiANspNgvUvdP9aAJMi v3vtYoQxACwjeJqvnK1TsKGCFTflNwbwZkmaYRUTQCCyobMf6fYVH2DnT4JhJYkM AaUa6G+p5eJv65C6PKYPaMYejqqPTyqid8LmPuDqcU5jaFvAbHLplIaTN0IOnU9o ZlQ+mnqiutnVi/QylWDqiZqaN6fSIGDfy96VJizA2Q+8Mj47jEheJBDsfIdrYDI4 uKrW3wYGv6PCOlC4C+y+zRtU4VGZm1+PZhBZMHlaPpXXZMh1scQd/x/3HYNA//+Z us1uukz/1xdBBLSnGPH7+GISg05lyL4juvECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ7w4uxjekGRaeeTmKLucP/4PtRDDAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvTzhPTHNZM3BCa1dubms1aWk3bkRfLUQ3VVF3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAdt8YjANBgkqhkiG9w0BAQsFAAOCAQEAQNWgYocROJOgS/JeOxg75+hm6vKY RgT+kHXDsBkBnst29hLVcOoDaBSmpy/fJE1Qz549M39bRVzty3ACYWk345jINofB tqvdCNWtoif5sYECQwh4pL4eH/DYhrBbrhsDqfilnU1f1as/HaiaIUF81Iyi0Di5 Ux/LkzgeIRjda0txRWTVrcFAIFF5+mlCILraNWMRqu3FtADC7QCb6HDA7LcS/koz kFv8A0OVLAGeg+3jCppMmUNfjGFI1Y3mV5FxCSBJjMCQAtRiWqHD/j/NNJIwOkhc GpeNJBIge58M3Jy5ELVsTHQ6bvENWZDd4eqwEWiGUkl4mF967f0qUy1Ibw== -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:25 2025 by rpki-client