$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9P4KRmbNMMH4bNl94azT7u_2v9I.roa File: 9P4KRmbNMMH4bNl94azT7u_2v9I.roa (raw, json) Hash identifier: CQbeX02Bv6/eqDfZI/QQ78BPHlP/2cYws0d3P2opzL4= Subject key identifier: F4:FE:0A:46:66:CD:30:C1:F8:6C:D9:7D:E1:AC:D3:EE:EF:F6:BF:D2 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04FA Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9P4KRmbNMMH4bNl94azT7u_2v9I.roa Signing time: Sun 01 Jun 2025 01:30:48 +0000 ROA not before: Sun 01 Jun 2025 01:30:48 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 240a:61:7e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Jun 1 01:30:48 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=F4FE0A4666CD30C1F86CD97DE1ACD3EEEFF6BFD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:c0:87:ad:cf:d0:9e:3a:74:57:9f:5d:67: 81:8e:2d:31:0b:03:89:00:1d:33:49:b0:6b:46:a4: 11:15:13:14:e6:e7:62:19:26:26:fb:13:e2:39:17: ca:38:0c:61:47:5a:b8:1a:f1:a2:24:c5:a2:97:70: dd:dc:ec:4e:c0:2c:2a:11:a3:ba:78:17:54:2b:54: 83:2e:ff:1e:bb:26:0a:51:01:8a:ba:2a:d5:41:b4: 31:67:eb:fd:6e:99:77:b9:e3:31:7f:5e:c6:65:fc: a1:55:fe:c6:39:84:e8:99:52:9d:e5:d0:38:58:2d: 25:1d:4a:7a:60:20:29:84:2c:67:bc:31:1f:44:9e: c8:0d:66:37:5e:b2:7a:31:ea:86:6b:3a:cb:85:e4: a8:93:6b:83:e4:fe:34:33:90:ba:dd:a1:00:81:d0: 04:6f:b2:c1:99:5a:44:8f:db:4e:8b:6e:98:99:89: b5:42:cd:a3:30:16:31:e6:f0:14:02:18:c9:3b:89: c8:1f:a0:fc:dc:43:2b:ab:d2:cc:af:5e:13:df:e7: b8:89:dd:c1:6b:2e:02:f4:de:81:2a:ac:0a:ae:77: 01:21:5e:b9:ff:05:2f:c7:0a:db:2b:01:b6:89:7e: fc:47:eb:c1:06:ac:57:5c:da:0f:dd:0a:78:59:b5: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FE:0A:46:66:CD:30:C1:F8:6C:D9:7D:E1:AC:D3:EE:EF:F6:BF:D2 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9P4KRmbNMMH4bNl94azT7u_2v9I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:61:7e00::/48 Signature Algorithm: sha256WithRSAEncryption 12:1c:bb:e7:b2:cf:94:c0:f3:f8:fc:0c:d8:48:5a:08:59:9c: 44:71:03:5c:4b:1f:ce:2b:fa:7e:6d:50:73:a6:2f:5f:a2:05: e9:b5:bb:04:5f:5f:9d:1d:fb:7c:06:88:c1:f6:ac:2a:5c:0d: 5f:38:71:c6:43:8c:90:df:f4:b6:0d:f5:52:2c:ab:e4:a4:04: 71:db:f1:9e:6e:41:3c:28:4e:a0:ff:9f:19:d7:58:11:96:09: 8c:8a:a1:77:c6:24:ee:a7:8c:e6:a1:5d:4a:22:8d:ae:83:bc: d6:03:9d:13:73:72:df:a0:9c:fb:ca:5b:9d:28:83:96:bd:5f: 00:15:c0:64:66:d6:bd:42:ff:85:25:a0:08:bd:14:a3:2e:78: 1c:4d:92:0f:35:17:2d:4e:40:b5:90:21:d8:9f:d3:39:42:81: 12:bd:14:9b:c9:bb:5c:73:73:36:e9:a6:e5:2a:ae:22:ce:f6: 6e:cb:32:81:c0:82:c6:31:d8:04:58:7a:4c:21:be:ca:bb:93: 5e:2c:9b:70:5a:4f:4d:f8:17:07:00:10:c4:55:98:c1:89:5e: 76:a3:06:85:8d:57:1b:3f:2f:56:fe:9f:d9:0f:7c:34:00:c2: a9:3a:5a:7b:eb:c1:50:dd:1d:af:21:e2:fb:52:1d:b8:9b:12: 0f:1f:ce:5f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgICBPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA2MDEw MTMwNDhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEY0RkUwQTQ2NjZDRDMw QzFGODZDRDk3REUxQUNEM0VFRUZGNkJGRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7O8CHrc/Qnjp0V59dZ4GOLTELA4kAHTNJsGtGpBEVExTm52IZ Jib7E+I5F8o4DGFHWrga8aIkxaKXcN3c7E7ALCoRo7p4F1QrVIMu/x67JgpRAYq6 KtVBtDFn6/1umXe54zF/XsZl/KFV/sY5hOiZUp3l0DhYLSUdSnpgICmELGe8MR9E nsgNZjdesnox6oZrOsuF5KiTa4Pk/jQzkLrdoQCB0ARvssGZWkSP206LbpiZibVC zaMwFjHm8BQCGMk7icgfoPzcQyur0syvXhPf57iJ3cFrLgL03oEqrAqudwEhXrn/ BS/HCtsrAbaJfvxH68EGrFdc2g/dCnhZtZvxAgMBAAGjggIrMIICJzAdBgNVHQ4E FgQU9P4KRmbNMMH4bNl94azT7u/2v9IwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS85UDRLUm1iTk1NSDRiTmw5NGF6VDd1XzJ2OUku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAoAYX4AMA0GCSqGSIb3DQEBCwUAA4IBAQASHLvnss+UwPP4/AzY SFoIWZxEcQNcSx/OK/p+bVBzpi9fogXptbsEX1+dHft8BojB9qwqXA1fOHHGQ4yQ 3/S2DfVSLKvkpARx2/GebkE8KE6g/58Z11gRlgmMiqF3xiTup4zmoV1KIo2ug7zW A50Tc3LfoJz7yludKIOWvV8AFcBkZta9Qv+FJaAIvRSjLngcTZIPNRctTkC1kCHY n9M5QoESvRSbybtcc3M26ablKq4izvZuyzKBwILGMdgEWHpMIb7Ku5NeLJtwWk9N +BcHABDEVZjBiV52owaFjVcbPy9W/p/ZD3w0AMKpOlp768FQ3R2vIeL7Uh24mxIP H85f -----END CERTIFICATE-----Generated at Fri Oct 24 13:39:43 2025 by rpki-client