$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/Dl-LohYFZLIZtJ-Hp6Y9GeWfpxU.roa File: Dl-LohYFZLIZtJ-Hp6Y9GeWfpxU.roa (raw, json) Hash identifier: hGrjVrcbKpEoui3BnvLHHsOGhjJ3aAjgMVHYq6Ekwck= Subject key identifier: 0E:5F:8B:A2:16:05:64:B2:19:B4:9F:87:A7:A6:3D:19:E5:9F:A7:15 Certificate issuer: /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Certificate serial: 6A Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/Dl-LohYFZLIZtJ-Hp6Y9GeWfpxU.roa Signing time: Mon 01 Sep 2025 01:32:51 +0000 ROA not before: Mon 01 Sep 2025 01:32:51 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 38639 IP address blocks: 2402:c800:ff7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 20:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Validity Not Before: Sep 1 01:32:51 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=0E5F8BA2160564B219B49F87A7A63D19E59FA715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:e7:2f:45:d2:ef:e6:9b:7c:64:e9:5d:70: 8a:af:ad:c5:53:dd:c1:04:ae:23:6a:c3:dc:c2:55: be:74:62:a3:a7:03:92:6f:bf:92:5b:fa:b3:55:b1: c4:68:ac:ad:90:d6:1d:09:11:b0:27:d2:b9:1c:0d: 5f:16:e7:67:c8:63:5c:af:4f:74:6c:16:9b:94:ad: a9:6c:7c:79:3d:f5:3a:86:d7:77:4f:40:e6:10:86: 0c:0b:1f:3a:af:37:b4:7a:30:9b:ec:47:09:cf:51: a0:56:a9:b4:2a:06:82:05:8c:a1:a8:0b:4a:6c:e4: 95:16:c9:69:c6:93:ff:4a:9d:9e:b0:de:37:a3:2d: 73:c1:6e:b1:ce:3c:d1:a6:06:fa:c1:92:de:e3:7b: 28:2b:05:3b:fc:26:52:98:14:a6:86:64:e9:ad:59: 15:f0:5f:77:b2:54:47:54:6a:64:30:9d:95:0d:45: 1e:2a:42:16:50:24:2e:b3:5c:48:52:e9:6e:e6:33: 58:d1:39:07:24:1b:43:fe:ea:f8:b6:2f:93:a8:9d: 8a:47:f6:28:c9:01:0e:75:a8:72:b0:1e:20:54:f6: 98:c2:9e:f2:e8:24:ee:62:8d:d7:a1:ba:8d:a5:07: 68:cf:f1:e7:71:3c:ab:1d:79:d2:a5:da:b1:17:3f: 32:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:8B:A2:16:05:64:B2:19:B4:9F:87:A7:A6:3D:19:E5:9F:A7:15 X509v3 Authority Key Identifier: keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/Dl-LohYFZLIZtJ-Hp6Y9GeWfpxU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:c800:ff7b::/48 Signature Algorithm: sha256WithRSAEncryption a7:c7:a1:b3:3b:01:58:9e:ad:eb:2d:58:4c:c2:ee:62:ae:a9: ef:c5:d5:ca:2b:f6:ef:56:f2:51:2d:59:d3:8a:4b:be:5b:9c: 4c:40:34:07:0f:33:b2:f7:ab:d1:4a:76:d9:1c:75:0b:b6:8a: d5:dd:11:8b:25:2b:9f:42:af:51:2e:1a:88:72:90:1a:09:9e: 42:2c:56:85:5f:4d:2c:25:5a:5f:72:0f:e9:30:17:d2:92:1f: 06:04:23:be:3b:f4:40:94:c5:ed:4a:26:cc:ec:8d:18:41:b0: 92:47:55:0b:73:ea:2d:a3:00:c4:1a:70:b2:e6:11:4a:3a:d4: e2:39:11:b4:55:b2:40:72:1b:3b:97:a4:1e:fb:03:ec:1a:4c: ee:7c:c0:f1:82:1c:0a:78:1e:1b:d2:77:4e:af:25:3e:38:7b: db:88:a7:d8:a8:f1:a5:57:f8:0c:f8:24:c8:ea:40:e1:b9:9a: 6e:9c:ff:85:b4:a4:9a:91:fe:8d:7f:71:17:b4:b0:1f:64:8d: 8f:96:e9:6e:4d:5c:85:38:f2:87:19:52:46:4d:4a:0d:8a:76: 71:7d:ae:af:dc:5e:d2:72:12:b1:03:8a:6c:7c:fc:8a:75:02: 3e:6f:6e:03:6d:89:37:73:50:32:2c:64:fc:89:05:72:ab:6c: 9a:5e:81:86 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTgw MURCREJFMTY4ODYzQUIwRTgwMkYwRUM5MEEzNTI1QzIzNDdDMB4XDTI1MDkwMTAx MzI1MVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMEU1RjhCQTIxNjA1NjRC MjE5QjQ5Rjg3QTdBNjNEMTlFNTlGQTcxNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+j5y9F0u/mm3xk6V1wiq+txVPdwQSuI2rD3MJVvnRio6cDkm+/ klv6s1WxxGisrZDWHQkRsCfSuRwNXxbnZ8hjXK9PdGwWm5StqWx8eT31OobXd09A 5hCGDAsfOq83tHowm+xHCc9RoFaptCoGggWMoagLSmzklRbJacaT/0qdnrDeN6Mt c8Fusc480aYG+sGS3uN7KCsFO/wmUpgUpoZk6a1ZFfBfd7JUR1RqZDCdlQ1FHipC FlAkLrNcSFLpbuYzWNE5ByQbQ/7q+LYvk6idikf2KMkBDnWocrAeIFT2mMKe8ugk 7mKN16G6jaUHaM/x53E8qx150qXasRc/MjcCAwEAAaOCAiswggInMB0GA1UdDgQW BBQOX4uiFgVkshm0n4enpj0Z5Z+nFTAfBgNVHSMEGDAWgBSJgB29vhaIY6sOgC8O yQo1JcI0fDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwOTEvaVlBZHZiNFdpR09yRG9BdkRza0tOU1hDTkh3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVlBZHZiNFdpR09yRG9BdkRza0tO U1hDTkh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDkxL0RsLUxvaFlGWkxJWnRKLUhwNlk5R2VXZnB4VS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAsgA/3swDQYJKoZIhvcNAQELBQADggEBAKfHobM7AVierestWEzC 7mKuqe/F1cor9u9W8lEtWdOKS75bnExANAcPM7L3q9FKdtkcdQu2itXdEYslK59C r1EuGohykBoJnkIsVoVfTSwlWl9yD+kwF9KSHwYEI7479ECUxe1KJszsjRhBsJJH VQtz6i2jAMQacLLmEUo61OI5EbRVskByGzuXpB77A+waTO58wPGCHAp4HhvSd06v JT44e9uIp9io8aVX+Az4JMjqQOG5mm6c/4W0pJqR/o1/cRe0sB9kjY+W6W5NXIU4 8ocZUkZNSg2KdnF9rq/cXtJyErEDimx8/Ip1Aj5vbgNtiTdzUDIsZPyJBXKrbJpe gYY= -----END CERTIFICATE-----Generated at Mon Oct 27 22:09:32 2025 by rpki-client