$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/e8nRSPvy7WgkGMWyE7_zGoxoQ0I.roa File: e8nRSPvy7WgkGMWyE7_zGoxoQ0I.roa (raw, json) Hash identifier: JnkZCuJsopHZBjir/u1Q3bqwSKogrqf4V9TXwOi/fT0= Subject key identifier: 7B:C9:D1:48:FB:F2:ED:68:24:18:C5:B2:13:BF:F3:1A:8C:68:43:42 Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 24 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/e8nRSPvy7WgkGMWyE7_zGoxoQ0I.roa Signing time: Fri 12 Sep 2025 07:31:36 +0000 ROA not before: Fri 12 Sep 2025 07:31:36 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2907 IP address blocks: 192.58.12.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Sep 12 07:31:36 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=7BC9D148FBF2ED682418C5B213BFF31A8C684342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:fe:95:50:40:95:51:5b:d0:1e:36:1a:90: 91:3a:e3:4f:76:d0:55:83:c6:2c:6e:11:93:9c:99: 8c:95:7a:65:dd:34:48:4c:6c:5a:06:42:5d:30:87: 0a:e6:59:2e:2b:16:e3:1e:5c:49:bb:35:40:d8:e9: 22:50:fd:7a:9e:16:42:a9:3d:ff:8c:92:3a:44:e4: b8:b4:f1:5e:b2:ec:a9:c7:4d:4d:76:fa:16:01:55: a9:a9:c5:f9:4b:3b:2b:af:00:42:e2:14:03:36:c4: 67:de:95:58:75:2e:09:7c:7f:86:59:4f:4c:dc:f4: 6c:71:3a:25:24:f5:18:2d:ee:16:bc:47:fe:45:fd: 36:97:ef:ed:3d:70:a2:24:10:0e:7d:4a:95:74:39: 35:3d:f5:f4:ed:19:e3:b1:36:f5:55:9a:b0:96:34: b4:e8:84:08:6c:ed:ca:7a:d1:94:de:da:39:44:3e: 7e:60:86:e5:3c:e2:c4:fc:b6:56:78:71:da:d9:b0: f3:a0:64:76:9f:ff:b0:99:6a:d0:07:8d:3a:6f:7c: 25:65:68:fe:6d:b8:c8:4b:c6:d4:82:ee:5f:ed:8a: d2:c1:30:ee:e8:d8:47:6d:b6:7b:be:30:32:7c:3f: a3:47:fa:ed:ca:98:a2:77:b6:ae:1f:fe:20:b2:90: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C9:D1:48:FB:F2:ED:68:24:18:C5:B2:13:BF:F3:1A:8C:68:43:42 X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/e8nRSPvy7WgkGMWyE7_zGoxoQ0I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.58.12.0/22 Signature Algorithm: sha256WithRSAEncryption 56:ec:e3:d7:9b:b2:ff:21:5b:fe:6c:78:30:e4:bf:c9:d2:b3: d3:a2:0c:f5:b0:97:c9:d5:43:cf:c6:58:a1:54:b1:0a:e0:dc: b8:cc:06:e8:7c:ed:2a:ea:0c:f6:c2:c2:bc:31:98:ba:45:e1: 54:bf:7f:73:90:4b:33:c8:35:fc:ee:a7:b5:15:4e:3e:04:40: a7:01:f9:0a:4b:6c:7d:ad:47:62:d1:fe:d7:fb:d2:67:67:e3: f1:2d:a4:d0:7e:4a:49:e6:a8:4a:63:0e:bd:9d:35:d3:36:69: c2:8c:b7:7d:72:d7:d2:52:70:63:09:31:1a:9b:6b:4a:96:36: fa:df:08:71:6e:ba:a8:0f:d7:89:12:34:74:57:f6:48:14:7f: 98:c0:88:31:0d:35:e1:19:77:ed:92:58:90:06:07:a2:7b:ba: d3:33:7d:61:7f:8d:34:7d:fa:2b:05:7b:a7:93:76:c9:60:65: 48:fb:96:0c:93:34:d6:07:e1:e5:8c:36:d6:8a:96:4a:1f:b9: fb:5c:4c:ac:ce:62:d3:46:ba:93:91:d6:ca:37:fd:b9:0d:af: f8:d5:91:ac:8b:66:51:5a:7f:32:1b:28:26:9e:ff:95:07:fc: 2a:95:bd:85:49:df:b2:d6:ce:31:4c:07:35:10:bc:ea:f2:51: 36:12:7b:18 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI1MDkxMjA3 MzEzNloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoN0JDOUQxNDhGQkYyRUQ2 ODI0MThDNUIyMTNCRkYzMUE4QzY4NDM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK7L/pVQQJVRW9AeNhqQkTrjT3bQVYPGLG4Rk5yZjJV6Zd00SExs WgZCXTCHCuZZLisW4x5cSbs1QNjpIlD9ep4WQqk9/4ySOkTkuLTxXrLsqcdNTXb6 FgFVqanF+Us7K68AQuIUAzbEZ96VWHUuCXx/hllPTNz0bHE6JST1GC3uFrxH/kX9 Npfv7T1woiQQDn1KlXQ5NT319O0Z47E29VWasJY0tOiECGztynrRlN7aOUQ+fmCG 5TzixPy2Vnhx2tmw86Bkdp//sJlq0AeNOm98JWVo/m24yEvG1ILuX+2K0sEw7ujY R222e74wMnw/o0f67cqYone2rh/+ILKQuJkCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBR7ydFI+/LtaCQYxbITv/MajGhDQjAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni9lOG5SU1B2eTdXZ2tHTVd5RTdfekdveG9RMEkucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCwDoMMA0GCSqGSIb3DQEBCwUAA4IBAQBW7OPXm7L/IVv+bHgw5L/J0rPT ogz1sJfJ1UPPxlihVLEK4Ny4zAbofO0q6gz2wsK8MZi6ReFUv39zkEszyDX87qe1 FU4+BECnAfkKS2x9rUdi0f7X+9JnZ+PxLaTQfkpJ5qhKYw69nTXTNmnCjLd9ctfS UnBjCTEam2tKljb63whxbrqoD9eJEjR0V/ZIFH+YwIgxDTXhGXftkliQBgeie7rT M31hf400fforBXunk3bJYGVI+5YMkzTWB+HljDbWipZKH7n7XEyszmLTRrqTkdbK N/25Da/41ZGsi2ZRWn8yGygmnv+VB/wqlb2FSd+y1s4xTAc1ELzq8lE2EnsY -----END CERTIFICATE-----Generated at Wed Oct 22 20:38:19 2025 by rpki-client