$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/kaeLlHb8xHqdV0Dp0C_jmN5WQOk.roa File: kaeLlHb8xHqdV0Dp0C_jmN5WQOk.roa (raw, json) Hash identifier: xhUtJoTyozg7bEkzfD4lC5sudzqkR1pHOtyvThF1y48= Subject key identifier: 91:A7:8B:94:76:FC:C4:7A:9D:57:40:E9:D0:2F:E3:98:DE:56:40:E9 Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Certificate serial: 2F Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/kaeLlHb8xHqdV0Dp0C_jmN5WQOk.roa Signing time: Wed 01 Oct 2025 01:28:35 +0000 ROA not before: Wed 01 Oct 2025 01:28:35 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 131925 IP address blocks: 2401:4d44::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Validity Not Before: Oct 1 01:28:35 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=91A78B9476FCC47A9D5740E9D02FE398DE5640E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:0e:29:c2:7b:9d:cb:73:67:e9:df:76:3f: b8:ec:49:a5:f0:ed:38:62:4b:f6:5b:60:b8:1f:77: 28:c5:01:1b:33:6f:4f:b5:87:53:f0:2f:48:23:2c: 73:8f:ba:1e:9a:3d:37:aa:94:25:2e:22:2a:ce:67: 24:2c:f0:80:33:81:04:ec:a0:2d:a5:6f:4b:55:7b: 40:a7:6a:04:12:a3:ad:22:52:56:b5:19:d2:9e:16: 25:c4:1c:03:91:0b:2b:2a:ee:5c:17:b3:70:87:09: e5:1d:f3:17:1f:a2:ee:23:0e:40:36:ac:ff:5c:4c: db:f6:0c:3c:ea:38:6e:b5:1d:ab:49:54:0a:0f:7e: 60:e4:dc:de:ce:24:55:c5:f3:9b:ee:f4:bd:4a:f8: ec:5c:a2:12:68:a2:51:1f:5a:f6:bb:b5:e1:3e:09: 20:d5:90:cb:eb:82:4d:40:87:dd:ff:ab:68:44:cf: 37:5a:d9:74:bf:7f:29:d6:1a:3b:ce:9a:fe:df:9b: b0:57:92:ad:2a:fd:65:d3:62:0f:95:48:fe:c9:cf: 9d:e8:5a:fc:02:fe:86:f2:65:33:ec:f3:33:2d:07: 2f:95:ca:ab:27:4f:45:07:13:19:6d:e3:39:59:28: 35:57:74:49:95:84:ff:2f:d3:76:e3:c9:5f:f8:71: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A7:8B:94:76:FC:C4:7A:9D:57:40:E9:D0:2F:E3:98:DE:56:40:E9 X509v3 Authority Key Identifier: keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/kaeLlHb8xHqdV0Dp0C_jmN5WQOk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:4d44::/30 Signature Algorithm: sha256WithRSAEncryption 06:a9:cc:18:43:b6:2b:d8:3c:f4:08:47:a7:3f:4c:49:60:4d: 92:4b:8c:ec:c5:cb:08:3c:66:59:90:5d:b8:82:87:4b:a9:d2: 69:d9:46:dd:97:86:7e:fd:c3:b8:76:39:b0:93:6f:94:30:66: 9f:a4:cf:8c:4b:3f:ee:93:3b:f6:ce:38:0b:5b:87:f5:78:52: b1:cc:ac:e3:93:2e:a9:0d:35:9e:93:9a:53:8b:85:8f:58:13: fc:46:4c:e1:c6:1d:6d:0d:0c:9d:2a:2e:3c:f6:00:ec:88:b9: 39:37:15:f1:db:44:2c:61:07:13:dd:d1:ec:c4:86:32:25:8d: 10:b4:35:4d:8e:ea:5d:0d:d0:f2:70:ba:76:bc:60:b5:47:52: 2a:06:fd:19:70:ee:7e:e8:07:25:3c:96:72:92:46:a7:fa:11: 65:5a:b0:d5:e3:12:68:56:72:a2:d2:5d:a0:b8:20:4c:6b:82: b9:ca:62:32:8a:a9:06:2b:03:53:6b:a3:bc:58:86:8b:68:3d: c7:0f:87:32:b4:04:24:54:9a:ae:7c:05:da:e0:1c:55:13:bd: 1e:91:e7:8b:07:14:6b:54:63:8a:c2:9f:38:1b:c0:4b:98:6b: 02:79:28:ee:87:2b:db:02:e1:20:12:0c:e0:af:26:2b:68:78: bc:1a:31:a4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQ0I2 MEI0MEE5OEFFQUUwNTRDQUVFNEMwOUNCN0Q5QUVBREUzRTlEMB4XDTI1MTAwMTAx MjgzNVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoOTFBNzhCOTQ3NkZDQzQ3 QTlENTc0MEU5RDAyRkUzOThERTU2NDBFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKSmDinCe53Lc2fp33Y/uOxJpfDtOGJL9ltguB93KMUBGzNvT7WH U/AvSCMsc4+6Hpo9N6qUJS4iKs5nJCzwgDOBBOygLaVvS1V7QKdqBBKjrSJSVrUZ 0p4WJcQcA5ELKyruXBezcIcJ5R3zFx+i7iMOQDas/1xM2/YMPOo4brUdq0lUCg9+ YOTc3s4kVcXzm+70vUr47FyiEmiiUR9a9ru14T4JINWQy+uCTUCH3f+raETPN1rZ dL9/KdYaO86a/t+bsFeSrSr9ZdNiD5VI/snPneha/AL+hvJlM+zzMy0HL5XKqydP RQcTGW3jOVkoNVd0SZWE/y/TduPJX/hx0mMCAwEAAaOCAikwggIlMB0GA1UdDgQW BBSRp4uUdvzEep1XQOnQL+OY3lZA6TAfBgNVHSMEGDAWgBQctgtAqYrq4FTK7kwJ y32a6t4+nTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTEvSExZTFFLbUs2dUJVeXU1TUNjdDltdXJlUHAwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSExZTFFLbUs2dUJVeXU1TUNjdDlt dXJlUHAwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjkxL2thZUxsSGI4eEhxZFYwRHAwQ19qbU41V1FPay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQIkAU1EMA0GCSqGSIb3DQEBCwUAA4IBAQAGqcwYQ7Yr2Dz0CEenP0xJ YE2SS4zsxcsIPGZZkF24godLqdJp2Ubdl4Z+/cO4djmwk2+UMGafpM+MSz/ukzv2 zjgLW4f1eFKxzKzjky6pDTWek5pTi4WPWBP8Rkzhxh1tDQydKi489gDsiLk5NxXx 20QsYQcT3dHsxIYyJY0QtDVNjupdDdDycLp2vGC1R1IqBv0ZcO5+6AclPJZykkan +hFlWrDV4xJoVnKi0l2guCBMa4K5ymIyiqkGKwNTa6O8WIaLaD3HD4cytAQkVJqu fAXa4BxVE70ekeeLBxRrVGOKwp84G8BLmGsCeSjuhyvbAuEgEgzgryYraHi8GjGk -----END CERTIFICATE-----Generated at Thu Oct 23 02:16:52 2025 by rpki-client