$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/m1AsDvShVXzNbzqMr49RReXTABQ.roa File: m1AsDvShVXzNbzqMr49RReXTABQ.roa (raw, json) Hash identifier: r2w4sLHmNMJRhuIa7Qi6Et89jHdUVjau3V3JiMslKZc= Subject key identifier: 9B:50:2C:0E:F4:A1:55:7C:CD:6F:3A:8C:AF:8F:51:45:E5:D3:00:14 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 4E Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/m1AsDvShVXzNbzqMr49RReXTABQ.roa Signing time: Wed 01 Oct 2025 01:32:12 +0000 ROA not before: Wed 01 Oct 2025 01:32:12 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 23783 IP address blocks: 210.143.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 20:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Oct 1 01:32:12 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=9B502C0EF4A1557CCD6F3A8CAF8F5145E5D30014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:39:da:d5:8e:b0:64:25:a5:03:3a:d9:f6: 26:50:29:c8:da:f7:6f:cf:a8:35:59:f5:3e:52:6d: 88:26:bb:41:59:cb:b0:00:89:fb:bb:9c:84:aa:1f: 2f:46:db:d3:67:a9:d9:e4:f7:52:88:9f:e8:09:32: d5:2c:19:5a:ce:a6:39:be:df:62:9c:c0:38:5d:07: e1:59:57:55:54:48:92:f8:68:d5:75:32:f3:e7:d2: 09:51:8d:d9:f4:ee:bf:d1:e5:ca:47:ab:68:4b:49: c0:98:0c:d9:28:03:3a:c9:2a:34:4b:52:42:75:00: 35:6d:41:d2:44:2e:db:94:7d:02:8e:e2:c6:71:3b: 00:58:dd:91:39:95:02:78:de:17:82:1e:7d:c9:99: 71:5f:5d:e0:02:1d:7f:41:2e:a0:9d:84:c4:99:f8: 43:dd:9e:5f:de:20:b0:3c:4a:81:2f:4f:6b:74:2a: 82:e9:c4:1a:75:0a:ae:78:e0:ff:ec:76:e5:fa:1e: 54:24:c1:62:71:71:b6:30:72:4c:e3:05:0b:76:5f: c3:6b:56:cd:f9:21:c1:21:69:ee:24:a4:31:b2:98: 61:c0:5a:43:b7:2b:31:ea:d6:5b:d1:2e:30:1a:8f: 3f:85:04:b2:0b:d9:70:b5:c8:dd:92:0f:a0:bb:ea: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:2C:0E:F4:A1:55:7C:CD:6F:3A:8C:AF:8F:51:45:E5:D3:00:14 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/m1AsDvShVXzNbzqMr49RReXTABQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.143.122.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:3e:f0:ac:e8:3c:d8:32:10:b7:be:47:c8:18:63:14:f9:38: ac:d6:13:c2:9e:6d:3d:5f:9f:28:fa:f9:f8:a9:62:bc:d8:4d: e8:8e:c3:0d:0e:81:1a:e1:ad:80:d7:36:10:f4:84:0a:36:cf: b6:80:6d:f7:59:50:8a:1f:64:66:7e:44:a6:2a:eb:ce:02:84: 28:53:f9:36:80:44:ca:4a:85:f9:80:9c:7e:b8:c1:c6:c7:64: 88:bf:f2:64:f1:8e:8e:71:12:92:fe:0b:16:14:68:f1:f4:3b: 04:c6:b7:fa:dc:43:db:b8:a8:00:81:34:71:6d:78:28:e8:16: 10:46:17:e0:35:4d:1b:89:31:88:49:88:d8:5b:2c:21:3c:8e: 0e:c6:87:ab:a3:98:58:2d:ce:37:3d:d4:09:77:c5:55:6e:b8: 9a:b0:e2:b0:6a:63:25:24:a9:7d:61:74:db:2f:b0:20:a0:2f: 82:8b:84:e8:20:5d:51:55:00:5f:20:ae:31:a7:3a:f9:08:71: e3:43:1a:39:5a:e7:68:0a:5d:4f:95:0a:c9:37:a7:49:1e:a8: bb:2a:d0:da:46:8b:67:ef:ca:ee:d6:c7:5a:d5:af:73:e1:bc: 51:d7:b1:d5:00:fd:28:87:20:85:be:b9:5e:c4:7b:8a:a9:99: 5b:3d:5c:4e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI1MTAwMTAx MzIxMloXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoOUI1MDJDMEVGNEExNTU3 Q0NENkYzQThDQUY4RjUxNDVFNUQzMDAxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJkcOdrVjrBkJaUDOtn2JlApyNr3b8+oNVn1PlJtiCa7QVnLsACJ +7uchKofL0bb02ep2eT3Uoif6Aky1SwZWs6mOb7fYpzAOF0H4VlXVVRIkvho1XUy 8+fSCVGN2fTuv9HlykeraEtJwJgM2SgDOskqNEtSQnUANW1B0kQu25R9Ao7ixnE7 AFjdkTmVAnjeF4IefcmZcV9d4AIdf0EuoJ2ExJn4Q92eX94gsDxKgS9Pa3QqgunE GnUKrnjg/+x25foeVCTBYnFxtjByTOMFC3Zfw2tWzfkhwSFp7iSkMbKYYcBaQ7cr MerWW9EuMBqPP4UEsgvZcLXI3ZIPoLvqgWECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSbUCwO9KFVfM1vOoyvj1FF5dMAFDAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvbTFBc0R2U2hWWHpOYnpxTXI0OVJSZVhUQUJRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAdKPejANBgkqhkiG9w0BAQsFAAOCAQEATD7wrOg82DIQt75HyBhjFPk4rNYT wp5tPV+fKPr5+KlivNhN6I7DDQ6BGuGtgNc2EPSECjbPtoBt91lQih9kZn5Epirr zgKEKFP5NoBEykqF+YCcfrjBxsdkiL/yZPGOjnESkv4LFhRo8fQ7BMa3+txD27io AIE0cW14KOgWEEYX4DVNG4kxiEmI2FssITyODsaHq6OYWC3ONz3UCXfFVW64mrDi sGpjJSSpfWF02y+wIKAvgouE6CBdUVUAXyCuMac6+Qhx40MaOVrnaApdT5UKyTen SR6ouyrQ2kaLZ+/K7tbHWtWvc+G8Udex1QD9KIcghb65XsR7iqmZWz1cTg== -----END CERTIFICATE-----Generated at Wed Oct 8 21:28:23 2025 by rpki-client