$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/xGJvuqHwIX5yJSJra9hAZpvMALg.roa File: xGJvuqHwIX5yJSJra9hAZpvMALg.roa (raw, json) Hash identifier: t1GswGSfLtGsgfl+sgBWO0xe8IbsgwPkRvYe/TaLsXA= Subject key identifier: C4:62:6F:BA:A1:F0:21:7E:72:25:22:6B:6B:D8:40:66:9B:CC:00:B8 Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Certificate serial: 3A Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/xGJvuqHwIX5yJSJra9hAZpvMALg.roa Signing time: Mon 01 Sep 2025 01:32:03 +0000 ROA not before: Mon 01 Sep 2025 01:32:03 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 0 IP address blocks: 2405:25c0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 12:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Validity Not Before: Sep 1 01:32:03 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=C4626FBAA1F0217E7225226B6BD840669BCC00B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:07:82:ba:ea:47:5e:d5:19:5e:ac:e3:56:c5: 55:3c:f0:80:c4:ea:cb:98:1f:61:ce:8b:2c:72:15: 16:a7:3a:f5:5f:39:05:ea:8d:3a:2a:0f:f1:49:a4: b1:9a:be:23:5d:39:96:38:84:c1:d4:a7:64:4f:3a: 8d:31:2a:96:35:b4:74:b3:85:02:53:b2:6a:af:81: 29:6c:71:d5:d1:66:16:85:07:d1:1c:d8:4f:57:78: 8a:93:fd:7a:2c:ad:66:90:d2:cc:4e:e5:60:d0:65: 55:7a:d7:46:bc:e5:89:9d:53:c3:66:47:2f:db:4b: 6e:f4:46:29:46:68:4a:89:04:74:21:25:4a:a1:12: c2:7d:8b:41:96:85:9d:82:02:e9:e3:e2:50:21:88: dc:9c:c5:d0:99:da:87:24:9b:02:df:f6:ad:b3:6a: 9c:af:8a:82:1a:72:7d:ba:38:0b:d4:c9:48:50:ff: d2:e1:2d:81:57:99:fe:c9:2e:9a:43:33:d1:8c:0f: aa:58:a6:61:7f:c2:0d:d3:a6:8f:0a:8a:d6:6a:39: ed:9a:cd:30:05:b3:d0:89:4e:6e:cc:38:74:82:8c: 24:bb:5f:1f:a2:c0:73:f5:2b:61:3d:31:30:b2:41: 81:15:e1:f9:85:2e:42:a0:4b:b1:88:db:2d:f3:e0: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:62:6F:BA:A1:F0:21:7E:72:25:22:6B:6B:D8:40:66:9B:CC:00:B8 X509v3 Authority Key Identifier: keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/xGJvuqHwIX5yJSJra9hAZpvMALg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:25c0:5000::/36 Signature Algorithm: sha256WithRSAEncryption 74:09:92:b1:bb:99:97:7e:c5:9b:99:db:69:6d:73:c6:66:c8: 6a:57:d6:35:05:91:7d:11:9e:56:ca:e9:bc:be:08:c0:13:49: 4a:6e:bf:a2:46:ea:c0:48:d7:b7:94:9a:c2:22:0e:2e:f9:04: ba:23:95:77:ff:82:eb:2d:c7:f7:03:be:d1:97:1a:66:78:9c: c5:d3:f7:16:08:29:29:31:e8:c6:76:55:ab:26:88:89:12:4f: 9c:97:5d:13:9b:91:7e:a1:07:02:d2:b3:a7:30:b9:a8:09:3d: 57:c6:03:bf:db:41:ce:0e:b3:0e:b6:6e:6e:41:ef:46:34:5c: 59:78:92:94:36:c3:5c:a6:25:07:95:a7:d5:f7:00:e2:e6:2f: c7:3c:d9:40:ce:71:58:38:48:47:45:62:d4:c8:d2:53:a9:16: d6:55:cb:3f:81:ba:2c:5a:49:d4:f2:e1:d4:3a:20:8b:d7:38: 18:94:ba:79:27:84:25:6f:fc:81:6a:1c:33:5d:d0:e8:ae:d9: 9a:8b:3c:83:09:75:49:30:ad:80:74:ff:67:97:76:b0:ae:96: f6:88:f0:b0:de:96:40:3a:41:2c:76:95:eb:38:d0:3c:80:52: a8:83:49:1c:07:22:6f:75:05:88:a6:07:15:b8:0b:d2:ad:a5: a2:d1:5b:b5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI1MDkwMTAx MzIwM1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzQ2MjZGQkFBMUYwMjE3 RTcyMjUyMjZCNkJEODQwNjY5QkNDMDBCODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKkHgrrqR17VGV6s41bFVTzwgMTqy5gfYc6LLHIVFqc69V85BeqN OioP8UmksZq+I105ljiEwdSnZE86jTEqljW0dLOFAlOyaq+BKWxx1dFmFoUH0RzY T1d4ipP9eiytZpDSzE7lYNBlVXrXRrzliZ1Tw2ZHL9tLbvRGKUZoSokEdCElSqES wn2LQZaFnYIC6ePiUCGI3JzF0JnahySbAt/2rbNqnK+Kghpyfbo4C9TJSFD/0uEt gVeZ/skumkMz0YwPqlimYX/CDdOmjwqK1mo57ZrNMAWz0IlObsw4dIKMJLtfH6LA c/UrYT0xMLJBgRXh+YUuQqBLsYjbLfPgi3ECAwEAAaOCAiowggImMB0GA1UdDgQW BBTEYm+6ofAhfnIlImtr2EBmm8wAuDAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6 Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzQ5L3hHSnZ1cUh3SVg1eUpTSnJhOWhBWnB2TUFMZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkBSXAUDANBgkqhkiG9w0BAQsFAAOCAQEAdAmSsbuZl37Fm5nbaW1z xmbIalfWNQWRfRGeVsrpvL4IwBNJSm6/okbqwEjXt5SawiIOLvkEuiOVd/+C6y3H 9wO+0ZcaZnicxdP3FggpKTHoxnZVqyaIiRJPnJddE5uRfqEHAtKzpzC5qAk9V8YD v9tBzg6zDrZubkHvRjRcWXiSlDbDXKYlB5Wn1fcA4uYvxzzZQM5xWDhIR0Vi1MjS U6kW1lXLP4G6LFpJ1PLh1Dogi9c4GJS6eSeEJW/8gWocM13Q6K7Zmos8gwl1STCt gHT/Z5d2sK6W9ojwsN6WQDpBLHaV6zjQPIBSqINJHAcib3UFiKYHFbgL0q2lotFb tQ== -----END CERTIFICATE-----Generated at Wed Oct 8 14:01:44 2025 by rpki-client