$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/C0cLkHHf7aA_EhuKCJ5vC_FF4Hs.roa File: C0cLkHHf7aA_EhuKCJ5vC_FF4Hs.roa (raw, json) Hash identifier: BVxjXFQzhW7eSE+Hxnr4mvQ9+g3Q1k1Aiaq/ieEDI0A= Subject key identifier: 0B:47:0B:90:71:DF:ED:A0:3F:12:1B:8A:08:9E:6F:0B:F1:45:E0:7B Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 01FF Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/C0cLkHHf7aA_EhuKCJ5vC_FF4Hs.roa Signing time: Sat 01 Mar 2025 01:31:02 +0000 ROA not before: Sat 01 Mar 2025 01:31:02 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 61.118.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 12:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:02 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=0B470B9071DFEDA03F121B8A089E6F0BF145E07B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:44:5f:b3:8b:1d:cf:69:65:be:d5:85:c5: 25:88:c0:cc:51:b2:ef:95:48:93:d3:26:ed:e3:0f: 36:a8:bf:54:37:37:24:0b:13:97:b1:49:bd:57:13: 7b:7c:a9:46:c8:7d:34:64:2c:91:42:55:6c:06:87: d1:5c:6d:cf:d6:d3:69:ec:68:54:f3:9c:fe:2d:8b: 48:99:c8:4f:00:5c:b1:0f:03:33:66:73:0b:be:96: 8c:03:2f:48:fa:32:3f:76:a4:a3:47:1f:82:7c:73: da:9d:4d:0c:36:a4:4e:7b:21:64:07:39:e8:39:62: 3e:d9:6d:bb:f2:3e:a4:0b:da:0c:59:78:4f:21:d9: 01:f2:09:ca:e7:3e:87:98:69:e8:5c:ac:f7:b9:f8: d0:f0:71:7e:e0:f2:8b:9c:c2:f9:86:d7:07:1a:fa: 2d:dd:c3:23:5e:55:ae:93:ec:71:0c:db:26:39:7b: 67:df:ee:37:d0:35:8f:62:33:62:30:b7:78:4a:33: 22:1e:e0:4b:b4:6e:a0:c2:05:79:5c:53:92:a3:f5: 5f:bc:35:45:ac:d8:d9:9c:c1:23:a4:8e:02:0d:82: 63:c0:45:f0:b2:95:ba:29:b8:aa:ca:50:89:10:3d: 06:17:61:ed:4b:1d:4b:d6:59:86:21:7d:54:69:25: 02:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:47:0B:90:71:DF:ED:A0:3F:12:1B:8A:08:9E:6F:0B:F1:45:E0:7B X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/C0cLkHHf7aA_EhuKCJ5vC_FF4Hs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.118.0.0/15 Signature Algorithm: sha256WithRSAEncryption 54:43:4e:90:92:bb:47:e9:97:42:3e:48:d0:69:90:52:18:55: b3:75:98:77:f2:2c:e7:b0:de:69:ba:b2:5d:76:b3:b6:b8:86: d2:38:80:e4:d1:3a:0a:5c:02:64:fc:51:4b:a6:13:42:55:58: 15:70:48:4e:03:db:ea:78:c8:5a:17:e1:b5:09:6a:f7:17:1f: 42:c9:13:08:96:ba:58:e4:65:c9:09:da:75:ef:86:ca:e0:7c: 4c:e2:c3:2d:54:08:93:55:37:85:c4:89:f9:46:d8:75:96:65: 9e:be:ca:40:32:be:e4:fb:bf:ad:e3:83:4d:7f:a8:f8:b8:98: d3:30:69:6e:e8:0c:be:1f:20:2d:94:41:7e:a7:05:ad:79:38: 05:37:93:f4:ef:86:14:fa:d7:8c:7f:e3:84:73:41:6f:d3:69: f7:bc:9d:7e:8e:ec:0d:b3:bf:53:d4:2c:d7:1f:bd:4f:90:15: 63:06:1d:31:53:4f:9e:59:2f:3d:5a:d3:75:99:8e:a7:db:a8: 7d:30:13:44:63:c5:0e:0a:cb:6c:f7:ef:53:6f:9f:90:2a:7a: ac:b5:fd:a5:f6:cd:7f:c7:b9:04:05:32:79:4e:bf:4a:fb:44: f1:c3:11:e1:a5:a1:96:9b:be:6c:69:97:0d:4c:e9:73:e9:4e: 8b:41:1f:1d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMDJaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBCNDcwQjkwNzFERkVE QTAzRjEyMUI4QTA4OUU2RjBCRjE0NUUwN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9RkRfs4sdz2llvtWFxSWIwMxRsu+VSJPTJu3jDzaov1Q3NyQL E5exSb1XE3t8qUbIfTRkLJFCVWwGh9Fcbc/W02nsaFTznP4ti0iZyE8AXLEPAzNm cwu+lowDL0j6Mj92pKNHH4J8c9qdTQw2pE57IWQHOeg5Yj7ZbbvyPqQL2gxZeE8h 2QHyCcrnPoeYaehcrPe5+NDwcX7g8oucwvmG1wca+i3dwyNeVa6T7HEM2yY5e2ff 7jfQNY9iM2Iwt3hKMyIe4Eu0bqDCBXlcU5Kj9V+8NUWs2NmcwSOkjgINgmPARfCy lbopuKrKUIkQPQYXYe1LHUvWWYYhfVRpJQK7AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUC0cLkHHf7aA/EhuKCJ5vC/FF4HswHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL0MwY0xrSEhmN2FBX0VodUtDSjV2Q19GRjRIcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE9djANBgkqhkiG9w0BAQsFAAOCAQEAVENOkJK7R+mXQj5I0GmQUhhVs3WY d/Is57DeabqyXXaztriG0jiA5NE6ClwCZPxRS6YTQlVYFXBITgPb6njIWhfhtQlq 9xcfQskTCJa6WORlyQnade+GyuB8TOLDLVQIk1U3hcSJ+UbYdZZlnr7KQDK+5Pu/ reODTX+o+LiY0zBpbugMvh8gLZRBfqcFrXk4BTeT9O+GFPrXjH/jhHNBb9Np97yd fo7sDbO/U9Qs1x+9T5AVYwYdMVNPnlkvPVrTdZmOp9uofTATRGPFDgrLbPfvU2+f kCp6rLX9pfbNf8e5BAUyeU6/SvtE8cMR4aWhlpu+bGmXDUzpc+lOi0EfHQ== -----END CERTIFICATE-----Generated at Mon Oct 27 14:33:12 2025 by rpki-client