$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/hcpVdWaz68NS1lzqmKZe6RUW4lk.roa File: hcpVdWaz68NS1lzqmKZe6RUW4lk.roa (raw, json) Hash identifier: s5o9R3jz6Et+GYZYz//rTnJMZUngqYjE91uInA9SUeE= Subject key identifier: 85:CA:55:75:66:B3:EB:C3:52:D6:5C:EA:98:A6:5E:E9:15:16:E2:59 Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Certificate serial: 43 Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/hcpVdWaz68NS1lzqmKZe6RUW4lk.roa Signing time: Sat 01 Nov 2025 01:32:19 +0000 ROA not before: Sat 01 Nov 2025 01:32:19 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 17676 IP address blocks: 2403:9900::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 05:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Validity Not Before: Nov 1 01:32:19 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=85CA557566B3EBC352D65CEA98A65EE91516E259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:17:17:be:2b:69:90:b7:8c:ed:9f:4d:30: 42:8c:7d:22:7e:9e:cb:a9:69:4b:37:8f:bb:d8:d2: 7d:23:ff:8f:a3:76:d3:f2:43:b2:13:f0:92:c0:37: c7:af:2b:cd:59:1e:91:40:11:7d:a9:51:11:43:1a: 26:a5:56:70:6b:c0:e9:38:50:73:9c:84:6c:2a:ec: af:56:e6:82:07:58:56:36:53:54:67:6a:80:35:0b: d3:4f:08:52:b1:9d:a4:48:8a:d2:2c:a6:9a:9e:b8: 35:9e:41:70:3b:8f:62:ee:1d:b3:15:78:c8:f1:46: 99:ac:80:4a:5d:e0:34:32:eb:47:35:c2:1c:44:a2: bc:76:ad:6a:97:fb:58:49:62:e5:5f:01:bb:e1:d1: e1:c2:d4:9a:00:30:9f:9a:85:8d:0e:55:d0:49:84: f5:22:5d:be:0e:b7:55:64:74:17:e2:a8:7f:66:5b: 04:d1:c8:8c:2a:83:28:d8:a3:c3:ca:7c:8e:ba:a3: cd:40:54:1c:cf:e2:ce:b0:9e:83:db:f6:60:9c:45: 29:d8:b8:15:29:63:91:06:43:94:37:2e:52:34:5f: af:8d:34:e9:9e:72:49:55:47:c5:e5:ff:88:d3:00: 69:b7:75:f4:20:ba:cc:6d:b7:3b:ae:58:0d:45:a1: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CA:55:75:66:B3:EB:C3:52:D6:5C:EA:98:A6:5E:E9:15:16:E2:59 X509v3 Authority Key Identifier: keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/hcpVdWaz68NS1lzqmKZe6RUW4lk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:9900::/24 Signature Algorithm: sha256WithRSAEncryption 9e:8a:2f:03:63:03:e6:1d:61:cb:f5:7d:ce:93:49:64:93:79: 99:19:83:14:27:4f:94:d4:5e:88:7e:dc:5c:9b:83:db:5b:04: 37:5c:b5:60:2c:54:a9:31:82:7d:04:e0:04:74:cc:a8:8a:09: 89:92:46:bd:5f:4c:6c:19:fa:68:95:19:b4:8d:42:ea:51:22: a0:1a:49:0e:65:92:3c:0b:d3:28:06:ef:76:1b:97:93:5b:70: 89:48:d3:dd:b2:46:c2:71:e8:a4:79:b5:20:e8:c5:05:0c:e5: 3f:97:4b:48:11:cb:ad:36:66:55:28:cb:76:5a:0b:48:3f:37: 69:d7:dd:f6:72:fb:40:13:b5:10:ec:d2:a5:7f:cd:79:fd:97: 68:ca:88:62:c7:2b:3a:d0:dd:7d:b8:98:ce:99:f8:e6:e9:f0: f6:0d:e2:f4:e3:b9:5c:bb:dc:18:e9:19:21:aa:4f:f9:e8:9a: 3a:f0:cd:1f:66:8b:08:1b:12:b8:42:99:a7:8f:99:57:94:a7: e7:cd:cc:82:a2:a5:b5:38:0e:3c:d2:94:9b:66:76:84:d9:cc: 61:09:07:20:e3:2c:65:72:5c:c3:42:d5:f5:54:90:89:b5:9b: 86:44:83:30:02:7c:c8:c3:b3:af:51:50:48:2b:86:e7:22:19: 9c:fa:8f:1e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0RB RUMyMEVERjRBMjAxMDQyM0REN0IwMDRFMTU3NEYxMTNBNzM1MB4XDTI1MTEwMTAx MzIxOVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODVDQTU1NzU2NkIzRUJD MzUyRDY1Q0VBOThBNjVFRTkxNTE2RTI1OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKk9Fxe+K2mQt4ztn00wQox9In6ey6lpSzePu9jSfSP/j6N20/JD shPwksA3x68rzVkekUARfalREUMaJqVWcGvA6ThQc5yEbCrsr1bmggdYVjZTVGdq gDUL008IUrGdpEiK0iymmp64NZ5BcDuPYu4dsxV4yPFGmayASl3gNDLrRzXCHESi vHatapf7WEli5V8Bu+HR4cLUmgAwn5qFjQ5V0EmE9SJdvg63VWR0F+Kof2ZbBNHI jCqDKNijw8p8jrqjzUBUHM/izrCeg9v2YJxFKdi4FSljkQZDlDcuUjRfr4006Z5y SVVHxeX/iNMAabd19CC6zG23O65YDUWhIBECAwEAAaOCAigwggIkMB0GA1UdDgQW BBSFylV1ZrPrw1LWXOqYpl7pFRbiWTAfBgNVHSMEGDAWgBSH2uwg7fSiAQQj3XsA ThV08ROnNTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNDQvaDlyc0lPMzBvZ0VFSTkxN0FFNFZkUEVUcHpVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaDlyc0lPMzBvZ0VFSTkxN0FFNFZk UEVUcHpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTQ0L2hjcFZkV2F6NjhOUzFsenFtS1plNlJVVzRsay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgACMAYDBAAkA5kwDQYJKoZIhvcNAQELBQADggEBAJ6KLwNjA+YdYcv1fc6TSWST eZkZgxQnT5TUXoh+3Fybg9tbBDdctWAsVKkxgn0E4AR0zKiKCYmSRr1fTGwZ+miV GbSNQupRIqAaSQ5lkjwL0ygG73Ybl5NbcIlI092yRsJx6KR5tSDoxQUM5T+XS0gR y602ZlUoy3ZaC0g/N2nX3fZy+0ATtRDs0qV/zXn9l2jKiGLHKzrQ3X24mM6Z+Obp 8PYN4vTjuVy73BjpGSGqT/nomjrwzR9miwgbErhCmaePmVeUp+fNzIKipbU4DjzS lJtmdoTZzGEJByDjLGVyXMNC1fVUkIm1m4ZEgzACfMjDs69RUEgrhuciGZz6jx4= -----END CERTIFICATE-----Generated at Sun Nov 2 10:15:13 2025 by rpki-client