$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/3EWApxNC268sms1lpohWAOjVgsI.roa File: 3EWApxNC268sms1lpohWAOjVgsI.roa (raw, json) Hash identifier: v6aYVsjfR3M3niDfFCEJm28L+lvwPMu97EFu/UI6LMA= Subject key identifier: DC:45:80:A7:13:42:DB:AF:2C:9A:CD:65:A6:88:56:00:E8:D5:82:C2 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0235 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3EWApxNC268sms1lpohWAOjVgsI.roa Signing time: Thu 01 May 2025 01:31:47 +0000 ROA not before: Thu 01 May 2025 01:31:47 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 218.43.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 12:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:47 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=DC4580A71342DBAF2C9ACD65A6885600E8D582C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:75:39:c7:2c:99:11:d7:be:30:89:4a:91: 77:84:de:49:a9:bb:44:a8:42:32:e4:86:3a:eb:38: ee:44:4b:9c:ac:73:c9:9b:93:8d:da:74:b5:67:5f: 7b:f5:a8:e4:65:db:5d:d8:f3:7c:6e:65:74:df:f1: bf:9e:e6:13:fe:52:39:44:a4:99:d4:3e:af:3f:f6: 82:9f:93:db:0c:25:5d:99:0e:7b:ee:28:ca:1d:2a: 52:dc:1a:d1:5e:a8:f6:68:4f:5b:a1:fc:5d:86:9a: 0d:90:77:24:53:4f:8d:ea:ff:c8:d4:f3:0c:52:84: 68:fd:31:bb:1b:c5:72:1c:48:03:fe:03:cb:9d:e0: db:96:df:d7:00:37:c9:78:5b:8d:c9:b2:cc:82:3b: 7f:17:24:03:63:71:70:ec:ee:97:b8:56:06:c4:78: bc:ac:13:40:c9:f5:e6:cb:4d:38:65:90:48:ab:19: 76:f5:9b:0a:f2:11:0c:13:5a:f6:9b:63:19:bc:7f: 25:63:12:c0:02:98:f3:47:1b:8c:27:6b:dc:d1:b5: 36:7d:cd:63:55:82:7b:09:55:2c:7e:a0:33:34:8a: ac:99:61:8d:c0:2b:11:35:3d:ad:a8:98:05:23:ee: 51:58:df:92:c1:92:b8:fa:5c:54:d8:64:d1:cb:44: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:45:80:A7:13:42:DB:AF:2C:9A:CD:65:A6:88:56:00:E8:D5:82:C2 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3EWApxNC268sms1lpohWAOjVgsI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.43.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:6c:fa:85:08:ab:30:67:53:cc:44:54:3d:d7:4b:da:67:71: fc:06:b5:33:71:a1:31:9f:0d:24:99:ca:d4:c2:54:b2:48:a8: 40:bc:95:78:a8:34:34:27:43:1e:ab:e0:cd:50:94:09:c8:e1: a9:b3:00:6c:64:8c:68:11:2a:ac:31:03:bb:a6:0f:b2:25:04: 29:66:d6:82:33:97:f6:de:e9:ef:0f:27:40:e1:a3:59:43:c9: a1:e8:0a:da:0e:17:85:02:a8:09:70:ac:a3:fc:de:88:5e:d0: 4e:6b:66:71:43:d0:ba:75:47:f7:c3:c1:95:a9:0c:1b:a2:c8: 0f:24:ff:8b:0e:25:84:34:aa:3f:a3:7f:36:31:85:69:b7:bb: 38:0b:0f:ec:5f:69:ad:ed:f7:07:66:0d:95:5a:37:c1:da:1e: 6f:fd:1e:a7:03:8b:0e:fa:6e:43:79:d0:1b:5d:e6:9d:5d:73: ac:29:f6:56:06:b9:57:5d:a0:f4:36:93:55:a9:24:33:e6:40: ec:d1:cc:bc:63:48:35:16:69:ec:b1:01:76:63:16:fa:c5:f5: 02:10:f2:2c:b0:80:e3:43:97:6f:27:ce:6f:a7:c0:0e:87:6b: d6:45:33:64:7e:4a:3b:d5:26:12:61:b7:ee:d6:eb:6c:fc:22: ac:43:c6:d0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxNDdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKERDNDU4MEE3MTM0MkRC QUYyQzlBQ0Q2NUE2ODg1NjAwRThENTgyQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9aHU5xyyZEde+MIlKkXeE3kmpu0SoQjLkhjrrOO5ES5ysc8mb k43adLVnX3v1qORl213Y83xuZXTf8b+e5hP+UjlEpJnUPq8/9oKfk9sMJV2ZDnvu KModKlLcGtFeqPZoT1uh/F2Gmg2QdyRTT43q/8jU8wxShGj9MbsbxXIcSAP+A8ud 4NuW39cAN8l4W43JssyCO38XJANjcXDs7pe4VgbEeLysE0DJ9ebLTThlkEirGXb1 mwryEQwTWvabYxm8fyVjEsACmPNHG4wna9zRtTZ9zWNVgnsJVSx+oDM0iqyZYY3A KxE1Pa2omAUj7lFY35LBkrj6XFTYZNHLRE7xAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU3EWApxNC268sms1lpohWAOjVgsIwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxLzNFV0FweE5DMjY4c21zMWxwb2hXQU9qVmdzSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDaKzANBgkqhkiG9w0BAQsFAAOCAQEAhmz6hQirMGdTzERUPddL2mdx/Aa1 M3GhMZ8NJJnK1MJUskioQLyVeKg0NCdDHqvgzVCUCcjhqbMAbGSMaBEqrDEDu6YP siUEKWbWgjOX9t7p7w8nQOGjWUPJoegK2g4XhQKoCXCso/zeiF7QTmtmcUPQunVH 98PBlakMG6LIDyT/iw4lhDSqP6N/NjGFabe7OAsP7F9pre33B2YNlVo3wdoeb/0e pwOLDvpuQ3nQG13mnV1zrCn2Vga5V12g9DaTVakkM+ZA7NHMvGNINRZp7LEBdmMW +sX1AhDyLLCA40OXbyfOb6fADodr1kUzZH5KO9UmEmG37tbrbPwirEPG0A== -----END CERTIFICATE-----Generated at Mon Oct 27 14:37:00 2025 by rpki-client