$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/KZfW_6w_kXgF0sJuo5JT366OJgE.roa File: KZfW_6w_kXgF0sJuo5JT366OJgE.roa (raw, json) Hash identifier: qxPT+83dNjVm7UkWHk+tDgZ6yPOd3ipj18VhvbzZ01M= Subject key identifier: 29:97:D6:FF:AC:3F:91:78:05:D2:C2:6E:A3:92:53:DF:AE:8E:26:01 Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Certificate serial: 38 Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/KZfW_6w_kXgF0sJuo5JT366OJgE.roa Signing time: Mon 01 Sep 2025 01:32:00 +0000 ROA not before: Mon 01 Sep 2025 01:32:00 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 0 IP address blocks: 2405:25c0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 12:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Validity Not Before: Sep 1 01:32:00 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=2997D6FFAC3F917805D2C26EA39253DFAE8E2601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e7:42:a4:f0:15:0d:33:40:8e:81:dd:66:31: 97:fa:e3:a3:fe:24:8a:01:4c:08:99:f3:59:11:40: 61:79:66:7a:5a:1f:81:b0:58:79:44:70:36:ea:e3: 8d:30:74:a0:4b:95:b0:26:2d:5c:57:1e:88:64:29: dd:0d:d3:90:40:a3:81:86:33:04:5a:fd:8d:6b:32: d3:ab:a4:1c:d7:0e:30:76:4f:28:fc:b8:1f:95:16: da:99:bf:00:69:7b:4a:15:32:c3:4b:d3:4c:79:af: 88:e8:f0:38:0b:88:e7:34:e3:28:c1:59:b9:5e:8f: e1:2d:bf:08:a2:a9:b4:3b:19:4e:21:40:e2:34:e7: e8:6d:e0:14:68:15:ad:df:90:61:c4:be:7b:be:98: f4:d9:ba:cd:f0:17:ad:13:cc:d0:ef:b3:ca:a7:34: 5e:ca:5b:b7:86:ef:70:4f:c2:86:7c:ac:c4:6f:fb: db:9b:3a:63:58:4d:85:e9:d3:bd:14:1a:7f:a2:9a: 86:d7:c1:d4:5a:e7:82:d8:78:8d:b0:d6:db:64:72: fb:a8:65:14:5d:4a:b9:3d:16:90:61:d1:fd:61:c5: 91:a9:14:98:ff:41:e4:d0:e8:f2:1a:f1:16:6d:5a: 3d:d2:04:64:ff:c0:df:7a:4c:f9:2d:20:58:49:5e: 21:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:97:D6:FF:AC:3F:91:78:05:D2:C2:6E:A3:92:53:DF:AE:8E:26:01 X509v3 Authority Key Identifier: keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/KZfW_6w_kXgF0sJuo5JT366OJgE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:25c0:3000::/36 Signature Algorithm: sha256WithRSAEncryption 24:cb:c8:40:b3:8b:f8:c7:7c:5a:1c:1c:85:a6:2c:b3:ea:f1: 41:bc:0f:a6:e0:73:e5:93:68:48:90:32:e9:b0:fb:02:af:60: 3a:df:5b:6b:53:e7:cc:57:6d:33:86:e7:c8:b5:0c:33:8b:a2: 08:c9:07:e5:3b:35:c1:e7:50:e2:07:06:02:e9:66:d8:07:96: ec:a8:ef:0b:6a:e6:af:3d:04:c3:7b:0d:7b:b3:6d:2d:48:c2: 17:b3:9c:63:62:ab:f4:d1:98:46:50:c9:e0:f8:bb:2a:9d:fb: 48:49:b5:87:3b:9f:8c:b8:ff:ca:97:1c:cd:0c:66:13:65:35: af:a5:1e:a9:20:80:db:fc:bd:f3:51:d9:91:95:f3:c3:59:45: 09:87:0c:d5:af:fe:b6:ab:83:28:e2:6c:f1:ba:36:ae:70:b2: 8b:87:9d:c8:b7:a8:23:47:eb:b5:03:28:2f:a9:dd:bb:bf:f7: 6a:c7:b2:8f:a2:3f:87:8b:a4:c3:d4:37:97:80:97:0c:d1:d8: ab:14:c2:7b:72:46:ce:5d:49:73:49:cd:08:5c:94:da:f9:07: a8:66:48:ed:2d:90:41:a1:2c:0b:f9:b8:a5:5b:98:34:58:6a: 72:d9:6a:ce:17:7a:8e:98:78:7c:f3:c2:91:67:eb:65:b0:74: 52:3d:30:60 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI1MDkwMTAx MzIwMFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMjk5N0Q2RkZBQzNGOTE3 ODA1RDJDMjZFQTM5MjUzREZBRThFMjYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANjnQqTwFQ0zQI6B3WYxl/rjo/4kigFMCJnzWRFAYXlmelofgbBY eURwNurjjTB0oEuVsCYtXFceiGQp3Q3TkECjgYYzBFr9jWsy06ukHNcOMHZPKPy4 H5UW2pm/AGl7ShUyw0vTTHmviOjwOAuI5zTjKMFZuV6P4S2/CKKptDsZTiFA4jTn 6G3gFGgVrd+QYcS+e76Y9Nm6zfAXrRPM0O+zyqc0Xspbt4bvcE/ChnysxG/725s6 Y1hNhenTvRQaf6KahtfB1Frngth4jbDW22Ry+6hlFF1KuT0WkGHR/WHFkakUmP9B 5NDo8hrxFm1aPdIEZP/A33pM+S0gWEleIckCAwEAAaOCAiowggImMB0GA1UdDgQW BBQpl9b/rD+ReAXSwm6jklPfro4mATAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6 Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzQ5L0taZldfNndfa1hnRjBzSnVvNUpUMzY2T0pnRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkBSXAMDANBgkqhkiG9w0BAQsFAAOCAQEAJMvIQLOL+Md8WhwchaYs s+rxQbwPpuBz5ZNoSJAy6bD7Aq9gOt9ba1PnzFdtM4bnyLUMM4uiCMkH5Ts1wedQ 4gcGAulm2AeW7KjvC2rmrz0Ew3sNe7NtLUjCF7OcY2Kr9NGYRlDJ4Pi7Kp37SEm1 hzufjLj/ypcczQxmE2U1r6UeqSCA2/y981HZkZXzw1lFCYcM1a/+tquDKOJs8bo2 rnCyi4edyLeoI0frtQMoL6ndu7/3aseyj6I/h4ukw9Q3l4CXDNHYqxTCe3JGzl1J c0nNCFyU2vkHqGZI7S2QQaEsC/m4pVuYNFhqctlqzhd6jph4fPPCkWfrZbB0Uj0w YA== -----END CERTIFICATE-----Generated at Wed Oct 8 14:05:13 2025 by rpki-client