$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/szbIiCZav7zIJ2orCti6Cj_PDHU.roa File: szbIiCZav7zIJ2orCti6Cj_PDHU.roa (raw, json) Hash identifier: bkyira0dazPD+mV/0SPf5K00ya2LHrl4gzckbT+Cgbk= Subject key identifier: B3:36:C8:88:26:5A:BF:BC:C8:27:6A:2B:0A:D8:BA:0A:3F:CF:0C:75 Certificate issuer: /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Certificate serial: 68 Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/szbIiCZav7zIJ2orCti6Cj_PDHU.roa Signing time: Mon 01 Sep 2025 01:32:50 +0000 ROA not before: Mon 01 Sep 2025 01:32:50 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 38639 IP address blocks: 2402:c800:fff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 19:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Validity Not Before: Sep 1 01:32:50 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=B336C888265ABFBCC8276A2B0AD8BA0A3FCF0C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:f1:bc:fd:57:ee:b6:af:b6:9f:6c:3d:d9: 6b:15:20:2e:f1:bf:e1:dc:34:bc:f4:8c:a6:2c:55: 9a:1b:98:6b:26:cf:68:b6:1f:dd:81:2c:46:14:ed: 9d:f1:57:4e:03:90:88:63:a1:d4:64:9c:e0:ea:b9: e7:18:e7:30:3b:d6:ef:3d:0d:f2:ac:da:18:fe:b4: 77:8e:2b:24:77:43:24:89:3d:38:b3:db:77:2f:1e: 13:f4:a4:d1:e8:26:d6:7a:53:95:ce:22:ab:48:97: c2:86:75:92:65:db:31:37:09:bc:cd:33:e2:20:1d: cf:7c:49:7a:a6:01:8f:1b:ba:e5:bf:12:4d:4e:a1: 22:65:58:f9:7d:a0:10:ef:a5:84:3b:a6:bf:b4:ce: 1d:e0:53:62:36:56:08:85:84:a1:f7:d2:aa:da:24: 3d:7e:b4:cb:a6:a4:aa:19:f8:db:ed:99:4f:c7:26: 80:53:e5:26:5a:65:9a:4e:cb:22:f8:50:7d:23:c9: 1a:66:0d:26:43:5f:99:65:55:9c:f6:30:16:b8:ba: 2a:00:20:aa:13:b8:f2:69:c4:43:5e:cc:2c:8d:76: f7:c6:d7:24:a2:a6:72:55:51:b7:8f:53:d9:28:57: d2:fa:de:d4:c0:87:d6:fa:c6:c1:eb:f8:62:b3:81: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:36:C8:88:26:5A:BF:BC:C8:27:6A:2B:0A:D8:BA:0A:3F:CF:0C:75 X509v3 Authority Key Identifier: keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/szbIiCZav7zIJ2orCti6Cj_PDHU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:c800:fff0::/44 Signature Algorithm: sha256WithRSAEncryption 46:eb:20:99:bb:ce:3d:ca:4a:a1:8c:d9:ac:52:af:b4:76:21: ff:b4:de:cd:25:8e:ce:46:6f:79:b0:aa:66:27:68:ee:e0:c8: 88:85:ba:e6:17:ab:68:9d:f1:8c:a0:8e:ff:b2:90:44:dc:11: 6c:95:27:69:f6:77:42:e3:52:69:21:3f:0b:3c:d6:1d:ad:58: 92:0c:4c:7b:d2:45:ec:d3:32:ca:2b:37:b8:c4:78:20:a6:78: 17:f6:6e:0f:9b:8a:ce:2b:9d:1d:fe:6b:6b:1f:28:4d:f6:23: cb:44:45:89:db:34:d7:8a:a6:9f:a9:b6:25:78:c0:40:b7:fa: 08:33:5c:f1:1a:5d:12:21:75:ea:2d:ef:24:ad:c0:52:6f:ed: 46:1e:e4:4c:18:b4:98:87:14:3b:d7:ef:ad:c1:7c:d5:a6:6b: ce:05:cc:d7:bf:e5:6b:a2:c8:a9:ec:98:56:b8:3c:fe:19:05: d5:5b:d5:6f:db:13:e8:ed:8f:f7:d0:24:0b:89:1b:ae:19:64: 7d:00:39:c4:4a:11:ad:67:9e:8d:d1:c6:34:90:f2:61:e2:ff: 6d:e0:83:02:8a:cd:c6:f5:99:20:e2:c8:22:b7:78:76:a6:31: cd:34:b0:b3:e2:8c:d4:28:8c:5e:ee:df:73:9f:ec:38:79:38: 7d:58:6e:27 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTgw MURCREJFMTY4ODYzQUIwRTgwMkYwRUM5MEEzNTI1QzIzNDdDMB4XDTI1MDkwMTAx MzI1MFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQjMzNkM4ODgyNjVBQkZC Q0M4Mjc2QTJCMEFEOEJBMEEzRkNGMEM3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMzh8bz9V+62r7afbD3ZaxUgLvG/4dw0vPSMpixVmhuYaybPaLYf 3YEsRhTtnfFXTgOQiGOh1GSc4Oq55xjnMDvW7z0N8qzaGP60d44rJHdDJIk9OLPb dy8eE/Sk0egm1npTlc4iq0iXwoZ1kmXbMTcJvM0z4iAdz3xJeqYBjxu65b8STU6h ImVY+X2gEO+lhDumv7TOHeBTYjZWCIWEoffSqtokPX60y6akqhn42+2ZT8cmgFPl Jlplmk7LIvhQfSPJGmYNJkNfmWVVnPYwFri6KgAgqhO48mnEQ17MLI1298bXJKKm clVRt49T2ShX0vre1MCH1vrGwev4YrOBlYsCAwEAAaOCAiswggInMB0GA1UdDgQW BBSzNsiIJlq/vMgnaisK2LoKP88MdTAfBgNVHSMEGDAWgBSJgB29vhaIY6sOgC8O yQo1JcI0fDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwOTEvaVlBZHZiNFdpR09yRG9BdkRza0tOU1hDTkh3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVlBZHZiNFdpR09yRG9BdkRza0tO U1hDTkh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDkxL3N6YklpQ1phdjd6SUoyb3JDdGk2Q2pfUERIVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQkAsgA//AwDQYJKoZIhvcNAQELBQADggEBAEbrIJm7zj3KSqGM2axS r7R2If+03s0ljs5Gb3mwqmYnaO7gyIiFuuYXq2id8Yygjv+ykETcEWyVJ2n2d0Lj UmkhPws81h2tWJIMTHvSRezTMsorN7jEeCCmeBf2bg+bis4rnR3+a2sfKE32I8tE RYnbNNeKpp+ptiV4wEC3+ggzXPEaXRIhdeot7yStwFJv7UYe5EwYtJiHFDvX763B fNWma84FzNe/5WuiyKnsmFa4PP4ZBdVb1W/bE+jtj/fQJAuJG64ZZH0AOcRKEa1n no3RxjSQ8mHi/23ggwKKzcb1mSDiyCK3eHamMc00sLPijNQojF7u33Of7Dh5OH1Y bic= -----END CERTIFICATE-----Generated at Mon Sep 8 00:37:55 2025 by rpki-client