$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/Xe_4ktmtned1Hg8dTQGb02a91ZI.roa File: Xe_4ktmtned1Hg8dTQGb02a91ZI.roa (raw, json) Hash identifier: QXojnVmEZ2YernKm3cEKteyT4S+3Gj8cRaIQg2J145w= Subject key identifier: 5D:EF:F8:92:D9:AD:9D:E7:75:1E:0F:1D:4D:01:9B:D3:66:BD:D5:92 Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697 Certificate serial: 6C Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/Xe_4ktmtned1Hg8dTQGb02a91ZI.roa Signing time: Mon 01 Sep 2025 01:33:22 +0000 ROA not before: Mon 01 Sep 2025 01:33:22 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2907 IP address blocks: 202.235.128.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697 Validity Not Before: Sep 1 01:33:22 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=5DEFF892D9AD9DE7751E0F1D4D019BD366BDD592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:e2:24:c7:55:be:c1:22:8a:94:f2:57:d0: 8c:d7:30:23:9c:4f:06:ed:09:ed:31:9f:2f:3c:29: 99:eb:b0:bc:8c:24:ab:d9:f5:85:f1:af:74:15:0c: 4d:80:03:b6:1d:70:fe:50:84:1d:2e:8d:10:d7:27: ad:8e:90:2e:29:43:7c:bb:78:f2:e5:82:52:d9:09: b2:58:d2:40:1c:19:ba:24:dc:aa:a5:02:cb:59:07: d4:54:6a:b7:1c:1f:88:b3:e5:7a:79:71:eb:4a:d0: 6f:f7:b6:f3:3f:6f:3e:d2:81:ce:b3:c2:b2:4e:cd: 9c:45:49:56:cb:02:70:2f:37:35:2d:bb:65:74:80: d7:30:f6:69:ae:12:ea:b1:12:b0:65:66:41:51:09: 57:68:da:62:20:30:ab:34:d4:ca:60:1c:ac:b9:da: 0b:2b:f6:45:a3:78:4b:eb:dc:05:c5:3f:ad:c6:76: 37:a9:aa:57:a7:eb:15:b6:59:3e:68:ae:86:97:d4: 6d:cb:b2:3b:2d:8c:0a:33:16:d0:fb:93:d6:25:e8: f5:98:b4:c1:a7:ba:de:d8:6c:68:62:d7:c7:8f:db: 12:6d:00:72:be:08:34:e9:a8:e3:8c:1f:f4:f3:d3: bf:98:95:2d:69:2d:1a:89:9e:10:68:2f:03:4c:06: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EF:F8:92:D9:AD:9D:E7:75:1E:0F:1D:4D:01:9B:D3:66:BD:D5:92 X509v3 Authority Key Identifier: keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/Xe_4ktmtned1Hg8dTQGb02a91ZI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.235.128.0/18 Signature Algorithm: sha256WithRSAEncryption 1d:ff:df:34:7e:7a:1e:a0:e5:f8:8b:04:4e:4f:a9:7a:3e:c8: 65:1c:d9:55:0e:b1:24:ff:d2:3b:a2:1f:a9:fc:9f:d2:b0:2f: 94:38:2e:f4:12:48:df:ef:6e:ab:e2:96:01:7c:77:b2:65:48: aa:ea:e2:87:cb:3e:e9:d0:35:26:62:f1:35:cb:34:7a:ee:61: e2:2b:9c:05:07:bd:1d:50:37:19:bd:86:90:b0:93:4f:c3:74: 5f:d5:8f:18:94:e6:b8:b1:ef:70:84:45:d5:b0:2c:51:8d:06: 0a:fe:42:4a:63:6a:ba:32:ef:4a:f3:8b:7f:47:e8:ed:38:70: 62:e6:3b:56:62:ed:2b:a5:04:39:4b:07:90:0c:77:24:2c:42: 69:98:cd:74:c9:27:4c:c0:e6:06:f2:75:7b:3a:4e:df:7a:0e: d3:d8:32:28:67:76:79:77:4b:de:5f:95:9e:60:70:35:17:38: ad:3a:8c:de:8e:f5:0e:b1:35:91:56:5f:b4:9e:47:ad:49:ad: 65:c0:02:52:90:1a:60:62:60:9a:f9:30:01:2e:94:c2:97:6f: bf:f5:c9:91:5e:28:7d:c3:d3:2c:42:a0:6c:eb:6a:2c:a2:c8: b4:df:1b:47:49:f9:bc:81:06:21:51:d9:1d:15:60:b6:16:2c: 9e:91:df:fd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5 RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTI1MDkwMTAx MzMyMloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNURFRkY4OTJEOUFEOURF Nzc1MUUwRjFENEQwMTlCRDM2NkJERDU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM5j4iTHVb7BIoqU8lfQjNcwI5xPBu0J7TGfLzwpmeuwvIwkq9n1 hfGvdBUMTYADth1w/lCEHS6NENcnrY6QLilDfLt48uWCUtkJsljSQBwZuiTcqqUC y1kH1FRqtxwfiLPlenlx60rQb/e28z9vPtKBzrPCsk7NnEVJVssCcC83NS27ZXSA 1zD2aa4S6rESsGVmQVEJV2jaYiAwqzTUymAcrLnaCyv2RaN4S+vcBcU/rcZ2N6mq V6frFbZZPmiuhpfUbcuyOy2MCjMW0PuT1iXo9Zi0wae63thsaGLXx4/bEm0Acr4I NOmo44wf9PPTv5iVLWktGomeEGgvA0wGupMCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBRd7/iS2a2d53UeDx1NAZvTZr3VkjAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2 dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEyL1hlXzRrdG10bmVkMUhnOGRUUUdiMDJhOTFaSS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAbK64AwDQYJKoZIhvcNAQELBQADggEBAB3/3zR+eh6g5fiLBE5PqXo+yGUc2VUO sST/0juiH6n8n9KwL5Q4LvQSSN/vbqvilgF8d7JlSKrq4ofLPunQNSZi8TXLNHru YeIrnAUHvR1QNxm9hpCwk0/DdF/VjxiU5rix73CERdWwLFGNBgr+Qkpjaroy70rz i39H6O04cGLmO1Zi7SulBDlLB5AMdyQsQmmYzXTJJ0zA5gbydXs6Tt96DtPYMihn dnl3S95flZ5gcDUXOK06jN6O9Q6xNZFWX7SeR61JrWXAAlKQGmBiYJr5MAEulMKX b7/1yZFeKH3D0yxCoGzraiyiyLTfG0dJ+byBBiFR2R0VYLYWLJ6R3/0= -----END CERTIFICATE-----Generated at Tue Sep 9 09:24:24 2025 by rpki-client