$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/Xh5dF9I8BTma9KSokNlAJzhM1fw.roa File: Xh5dF9I8BTma9KSokNlAJzhM1fw.roa (raw, json) Hash identifier: RaocUQr3rhFGZeXHvI9SX8tHn7sq0Xe6dj7CX6E5P28= Subject key identifier: 5E:1E:5D:17:D2:3C:05:39:9A:F4:A4:A8:90:D9:40:27:38:4C:D5:FC Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Certificate serial: 4B Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/Xh5dF9I8BTma9KSokNlAJzhM1fw.roa Signing time: Wed 24 Sep 2025 22:37:45 +0000 ROA not before: Wed 24 Sep 2025 22:37:45 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 18274 IP address blocks: 219.97.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 20:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Validity Not Before: Sep 24 22:37:45 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=5E1E5D17D23C05399AF4A4A890D94027384CD5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:cd:00:cb:d4:58:f2:ca:d4:15:5d:e0:44: ca:a3:41:be:2d:f5:86:0d:69:f7:01:88:53:bc:df: 30:6f:95:27:e5:4c:33:5d:d1:b8:7f:87:09:da:68: 2e:5e:3a:8d:98:c0:56:9f:e8:e2:e2:19:ca:eb:a4: e1:b5:af:94:ca:3e:3d:99:00:f5:34:cc:e5:c7:55: 0c:13:68:06:f3:a2:53:c8:ff:dc:d8:31:8c:e9:d3: b8:6d:6e:92:8a:57:b4:bf:82:79:9b:e4:fb:87:d9: 43:99:aa:9c:9b:ea:ba:33:5a:af:6a:2c:6c:72:b5: 2e:19:f3:e0:a4:23:84:c8:d2:01:cb:26:21:de:c1: fb:9a:87:22:ef:67:b5:46:5b:6b:2a:74:ca:c9:d8: 70:f3:84:6a:a9:18:8c:17:6e:82:73:9c:aa:b1:7a: 4e:9f:13:9b:4d:ec:28:3f:b1:b1:95:f8:71:1a:e0: 5a:db:29:31:63:65:72:f5:82:22:76:37:95:2d:f9: 56:ad:bb:67:9d:5a:32:c1:d5:9f:9e:d7:20:27:22: 40:a0:f6:07:6b:9b:fb:aa:f1:90:40:3d:cb:1c:c1: 4b:ac:39:48:b9:11:49:c0:0a:64:41:4b:ea:4b:82: ef:98:74:c2:bb:67:34:a8:2a:07:32:08:86:0e:54: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1E:5D:17:D2:3C:05:39:9A:F4:A4:A8:90:D9:40:27:38:4C:D5:FC X509v3 Authority Key Identifier: keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/Xh5dF9I8BTma9KSokNlAJzhM1fw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.97.112.0/21 Signature Algorithm: sha256WithRSAEncryption 56:35:9b:2f:e0:6c:6a:fa:df:28:78:94:fa:dc:e0:41:2d:ad: 8f:81:df:08:d2:a6:d1:50:4d:9c:17:db:58:57:44:70:be:ba: 91:73:85:a1:28:70:6c:71:75:97:04:13:e0:9e:41:90:eb:43: bf:99:c1:ec:7b:c2:15:ab:91:ac:08:76:2d:d3:cd:90:9a:5c: 06:0b:5a:bd:c4:78:a9:28:d5:04:67:f1:e9:8c:bd:4b:f1:4f: b3:c6:1a:1a:4c:49:30:ba:dd:71:20:39:cb:89:95:75:2c:22: ef:f3:f9:da:fa:34:8c:d6:b0:1c:94:2e:a1:ea:43:cc:68:0b: 9a:d7:49:33:c1:cc:b7:54:b6:39:3c:58:cc:d4:d8:48:4b:e1: 22:11:1b:ea:06:81:ca:fb:4c:ef:4a:76:4a:1f:e0:d2:10:25: 3d:2e:58:e3:0d:fa:be:dc:66:35:2b:a6:1d:d0:99:cd:ea:3a: 03:91:7b:c3:86:61:bc:f4:11:11:b9:e6:15:5a:79:84:35:84: 54:29:ac:7e:8d:f7:2f:67:31:6a:1d:c4:88:45:b8:37:d3:fa: 6e:ad:a5:53:da:76:0b:0e:83:5d:90:0f:8d:ba:2b:22:ee:be: 1c:f1:49:e7:d8:b9:81:3e:b2:5b:46:fc:48:f4:48:b0:28:41: 17:b5:1d:46 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDhE MjY1ODgxNUNBM0M0RUU1QTUzRjkxQkE2MTI2OEUzRjRDMEUxMB4XDTI1MDkyNDIy Mzc0NVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNUUxRTVEMTdEMjNDMDUz OTlBRjRBNEE4OTBEOTQwMjczODRDRDVGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK+7zQDL1FjyytQVXeBEyqNBvi31hg1p9wGIU7zfMG+VJ+VMM13R uH+HCdpoLl46jZjAVp/o4uIZyuuk4bWvlMo+PZkA9TTM5cdVDBNoBvOiU8j/3Ngx jOnTuG1ukopXtL+CeZvk+4fZQ5mqnJvqujNar2osbHK1Lhnz4KQjhMjSAcsmId7B +5qHIu9ntUZbayp0ysnYcPOEaqkYjBdugnOcqrF6Tp8Tm03sKD+xsZX4cRrgWtsp MWNlcvWCInY3lS35Vq27Z51aMsHVn57XICciQKD2B2ub+6rxkEA9yxzBS6w5SLkR ScAKZEFL6kuC75h0wrtnNKgqBzIIhg5UILECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBReHl0X0jwFOZr0pKiQ2UAnOEzV/DAfBgNVHSMEGDAWgBSNjSZYgVyjxO5aU/kb phJo4/TA4TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzkzL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9QMHdPRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9Q MHdPRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83OTMvWGg1ZEY5SThCVG1hOUtTb2tObEFKemhNMWZ3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9thcDANBgkqhkiG9w0BAQsFAAOCAQEAVjWbL+BsavrfKHiU+tzgQS2tj4Hf CNKm0VBNnBfbWFdEcL66kXOFoShwbHF1lwQT4J5BkOtDv5nB7HvCFauRrAh2LdPN kJpcBgtavcR4qSjVBGfx6Yy9S/FPs8YaGkxJMLrdcSA5y4mVdSwi7/P52vo0jNaw HJQuoepDzGgLmtdJM8HMt1S2OTxYzNTYSEvhIhEb6gaByvtM70p2Sh/g0hAlPS5Y 4w36vtxmNSumHdCZzeo6A5F7w4ZhvPQREbnmFVp5hDWEVCmsfo33L2cxah3EiEW4 N9P6bq2lU9p2Cw6DXZAPjborIu6+HPFJ59i5gT6yW0b8SPRIsChBF7UdRg== -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:31 2025 by rpki-client