$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/k9Q1wzQXiRp2dOdOjLR9fwBd2TU.roa File: k9Q1wzQXiRp2dOdOjLR9fwBd2TU.roa (raw, json) Hash identifier: Lf7R5RyWEITtGksYKgGhDyoCP5nAjP2WUn7BpVcLPUQ= Subject key identifier: 93:D4:35:C3:34:17:89:1A:76:74:E7:4E:8C:B4:7D:7F:00:5D:D9:35 Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Certificate serial: 0114 Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/k9Q1wzQXiRp2dOdOjLR9fwBd2TU.roa Signing time: Thu 01 May 2025 01:32:18 +0000 ROA not before: Thu 01 May 2025 01:32:18 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 9370 IP address blocks: 59.106.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 14:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532 Validity Not Before: May 1 01:32:18 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=93D435C33417891A7674E74E8CB47D7F005DD935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:5b:03:4f:5d:54:76:8b:32:20:f2:d6:7c: d9:c3:c0:a7:a2:87:d4:d4:71:b0:9b:a3:c1:ef:f6: 35:15:65:14:f2:70:6e:ed:ba:a9:26:c7:1f:48:c1: 50:8e:ed:b4:7c:3a:a1:6a:18:f4:96:79:a7:41:61: 95:e6:7d:54:0a:c2:c0:42:60:e0:fb:b5:e2:c0:ef: 91:59:2f:ab:0c:de:50:ea:69:55:1a:1f:02:91:51: c9:bc:ed:54:7a:5b:f0:08:9a:2d:f9:6c:00:f5:39: c5:89:27:e6:3d:bf:fc:c0:af:0e:b0:95:63:f2:fc: a5:a5:62:94:5d:fd:1d:22:33:46:91:b6:64:63:d9: 4f:16:36:77:dd:e9:00:f1:58:f2:cf:94:3c:b6:d5: fe:f0:4d:2b:36:f9:c2:51:04:25:0f:73:6d:25:7d: 77:71:4e:6d:a5:3c:92:92:ae:84:2f:15:18:02:ff: b7:ab:8c:0d:d6:51:90:ab:89:d2:c7:f4:1b:39:b7: c5:74:0c:91:f2:ce:84:62:0a:99:fb:34:7c:6a:3e: e2:0d:60:07:0d:cd:78:41:ff:39:d8:c0:2c:80:0c: 4b:a3:aa:7b:71:26:8a:b8:c2:c3:f2:4d:9e:91:7e: 64:56:2d:bf:57:f8:9b:1a:38:66:96:fc:c6:a6:75: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D4:35:C3:34:17:89:1A:76:74:E7:4E:8C:B4:7D:7F:00:5D:D9:35 X509v3 Authority Key Identifier: keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/k9Q1wzQXiRp2dOdOjLR9fwBd2TU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.106.240.0/22 Signature Algorithm: sha256WithRSAEncryption 13:74:8b:0b:42:a5:dd:48:2c:b0:e1:d3:00:a0:cc:58:f6:dc: b4:1e:ad:14:37:bf:b9:6b:55:d4:c7:b1:05:0e:40:e2:42:ee: 04:ff:13:00:a5:56:65:24:02:c2:25:b6:70:a1:de:0b:9c:ac: 1c:8f:f8:c4:d0:da:6e:09:6b:07:a1:f6:5e:de:7e:f9:8c:df: 59:c4:1d:44:f2:5a:22:d6:5c:ae:5e:44:1e:e3:8a:de:31:e8: d3:22:cd:58:13:61:2f:04:b2:bd:f0:d5:be:60:53:ec:6b:e8: 47:36:8e:0e:34:c1:d5:30:d5:39:95:59:3b:be:5e:72:b1:43: 73:b4:4b:17:ef:55:d0:21:6e:cd:8e:cf:e3:bb:e2:fc:4b:83: 49:37:48:98:87:9f:8b:24:fb:67:bf:e8:cd:ff:47:11:9c:40: 8d:e8:02:a7:1b:f0:82:bb:45:06:e3:ea:ba:40:3a:72:87:aa: 51:7a:7f:c1:6c:42:7f:a5:52:da:b7:9a:53:61:69:6e:1f:52: 70:6e:30:aa:1f:23:d2:97:df:06:b8:4b:fa:bb:47:24:66:45: 0d:af:fb:f9:33:9a:ce:f6:7e:e6:33:5e:01:c7:30:a9:00:4e: 47:ec:ff:fb:c5:46:b9:5d:82:95:0d:ab:95:bd:66:64:92:84: 36:4a:2d:cd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICARQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA1MDEw MTMyMThaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkzRDQzNUMzMzQxNzg5 MUE3Njc0RTc0RThDQjQ3RDdGMDA1REQ5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC66lsDT11UdosyIPLWfNnDwKeih9TUcbCbo8Hv9jUVZRTycG7t uqkmxx9IwVCO7bR8OqFqGPSWeadBYZXmfVQKwsBCYOD7teLA75FZL6sM3lDqaVUa HwKRUcm87VR6W/AImi35bAD1OcWJJ+Y9v/zArw6wlWPy/KWlYpRd/R0iM0aRtmRj 2U8WNnfd6QDxWPLPlDy21f7wTSs2+cJRBCUPc20lfXdxTm2lPJKSroQvFRgC/7er jA3WUZCridLH9Bs5t8V0DJHyzoRiCpn7NHxqPuINYAcNzXhB/znYwCyADEujqntx Joq4wsPyTZ6RfmRWLb9X+JsaOGaW/MamdT5PAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUk9Q1wzQXiRp2dOdOjLR9fwBd2TUwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ3L2s5UTF3elFYaVJwMmRPZE9qTFI5ZndCZDJUVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI7avAwDQYJKoZIhvcNAQELBQADggEBABN0iwtCpd1ILLDh0wCgzFj23LQe rRQ3v7lrVdTHsQUOQOJC7gT/EwClVmUkAsIltnCh3gucrByP+MTQ2m4Jaweh9l7e fvmM31nEHUTyWiLWXK5eRB7jit4x6NMizVgTYS8Esr3w1b5gU+xr6Ec2jg40wdUw 1TmVWTu+XnKxQ3O0SxfvVdAhbs2Oz+O74vxLg0k3SJiHn4sk+2e/6M3/RxGcQI3o Aqcb8IK7RQbj6rpAOnKHqlF6f8FsQn+lUtq3mlNhaW4fUnBuMKofI9KX3wa4S/q7 RyRmRQ2v+/kzms72fuYzXgHHMKkATkfs//vFRrldgpUNq5W9ZmSShDZKLc0= -----END CERTIFICATE-----Generated at Thu Nov 6 16:37:29 2025 by rpki-client