$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/UvAHBhFnfN0RLlKJxKwY7465uKg.roa File: UvAHBhFnfN0RLlKJxKwY7465uKg.roa (raw, json) Hash identifier: x7SzRUwhVKWA8lT5leEXkw0PraWNy7enIUfVaM8WY7M= Subject key identifier: 52:F0:07:06:11:67:7C:DD:11:2E:52:89:C4:AC:18:EF:8E:B9:B8:A8 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0223 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UvAHBhFnfN0RLlKJxKwY7465uKg.roa Signing time: Thu 01 May 2025 01:31:37 +0000 ROA not before: Thu 01 May 2025 01:31:37 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 210.154.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 12:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:37 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=52F0070611677CDD112E5289C4AC18EF8EB9B8A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b5:4c:61:51:74:98:31:43:66:e6:e3:5d:ea: ea:04:f4:c2:c2:70:2f:98:b6:21:eb:72:43:72:bb: 67:6d:d2:41:6c:b1:93:47:43:df:ec:c9:b7:b8:a9: 5c:3f:d9:2b:25:a1:8e:6e:15:c3:39:44:fa:aa:3d: 94:1b:f7:5d:01:d4:95:38:83:8d:26:4e:f5:be:09: b8:d6:e4:c3:95:15:58:98:e6:6a:2e:e3:38:4d:b9: 8e:47:c3:58:77:5a:b0:47:82:00:44:67:0d:1c:54: ca:03:a7:bd:ed:03:f2:e8:b1:c3:42:f4:47:6e:12: 9e:66:72:23:91:5a:5b:25:f7:59:c6:9b:2b:8b:e6: e4:1b:fe:44:57:ed:48:08:3f:6f:d8:e2:f7:d5:4e: 2d:ed:21:de:67:59:05:34:35:f3:1f:24:5e:9f:93: c4:62:db:12:a7:22:6e:b4:ad:0b:25:0e:48:72:48: f1:e5:64:bf:34:8b:87:a9:2c:b9:98:a5:38:d1:0a: 3e:73:4b:f8:7c:57:ad:1f:89:03:c5:77:94:9f:6d: 31:cc:2e:9b:78:a0:fc:f8:f8:c5:41:44:5a:26:f2: 28:a1:1c:94:8c:ae:20:04:4e:1f:6c:0b:ba:92:b6: 35:a5:5f:df:d8:32:2c:5b:a2:f4:c4:a0:52:3d:11: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F0:07:06:11:67:7C:DD:11:2E:52:89:C4:AC:18:EF:8E:B9:B8:A8 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UvAHBhFnfN0RLlKJxKwY7465uKg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.154.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:2e:69:90:1c:20:40:f5:c0:dc:7f:f5:e3:de:f1:94:1a:c3: 65:65:3e:b2:61:df:4d:5d:23:8b:55:f8:e2:0c:82:92:e3:a5: 44:a5:1c:20:5d:09:e0:f6:7d:2b:c6:26:57:c1:6f:3e:94:2b: f7:d8:86:51:51:4b:26:91:23:d9:1e:95:4a:11:68:8a:a1:be: 89:bf:34:f7:bc:c1:b9:db:be:0e:c7:e5:a4:71:54:70:5d:4c: 51:64:2d:ac:61:f5:6f:79:cf:89:52:59:6c:3b:6b:a9:22:7e: ac:ba:d1:e9:4f:72:60:e3:d4:24:0e:cd:23:7c:f2:80:d0:7f: 65:2e:da:ab:8e:cf:cd:96:0b:21:e4:43:7c:b5:05:aa:4c:f6: 4d:aa:7d:16:60:2c:26:b4:40:bc:a3:82:fa:5f:80:35:f9:43: 5e:73:2f:05:1d:66:23:d7:73:93:91:81:df:7f:09:31:c1:53: d0:93:90:58:da:63:d5:5a:00:c9:d1:6d:2a:7f:a8:97:3e:84: d9:f0:80:76:60:b0:4c:fe:cc:e0:85:59:87:c7:09:58:26:0e: 8c:1e:d7:8f:4f:c9:81:4e:b7:33:41:58:9e:55:39:03:85:77: fa:76:24:a9:06:db:b6:70:ce:8d:79:3a:df:42:c3:0f:b2:74: 32:70:97:66 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxMzdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUyRjAwNzA2MTE2NzdD REQxMTJFNTI4OUM0QUMxOEVGOEVCOUI4QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDstUxhUXSYMUNm5uNd6uoE9MLCcC+YtiHrckNyu2dt0kFssZNH Q9/sybe4qVw/2SsloY5uFcM5RPqqPZQb910B1JU4g40mTvW+CbjW5MOVFViY5mou 4zhNuY5Hw1h3WrBHggBEZw0cVMoDp73tA/LoscNC9EduEp5mciORWlsl91nGmyuL 5uQb/kRX7UgIP2/Y4vfVTi3tId5nWQU0NfMfJF6fk8Ri2xKnIm60rQslDkhySPHl ZL80i4epLLmYpTjRCj5zS/h8V60fiQPFd5SfbTHMLpt4oPz4+MVBRFom8iihHJSM riAETh9sC7qStjWlX9/YMixbovTEoFI9ESYTAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUUvAHBhFnfN0RLlKJxKwY7465uKgwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL1V2QUhCaEZuZk4wUkxsS0p4S3dZNzQ2NXVLZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDSmjANBgkqhkiG9w0BAQsFAAOCAQEAQy5pkBwgQPXA3H/1497xlBrDZWU+ smHfTV0ji1X44gyCkuOlRKUcIF0J4PZ9K8YmV8FvPpQr99iGUVFLJpEj2R6VShFo iqG+ib8097zBudu+DsflpHFUcF1MUWQtrGH1b3nPiVJZbDtrqSJ+rLrR6U9yYOPU JA7NI3zygNB/ZS7aq47PzZYLIeRDfLUFqkz2Tap9FmAsJrRAvKOC+l+ANflDXnMv BR1mI9dzk5GB338JMcFT0JOQWNpj1VoAydFtKn+olz6E2fCAdmCwTP7M4IVZh8cJ WCYOjB7Xj0/JgU63M0FYnlU5A4V3+nYkqQbbtnDOjXk630LDD7J0MnCXZg== -----END CERTIFICATE-----Generated at Mon Oct 27 14:33:11 2025 by rpki-client