$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ycWCenlntxeizb9ze4C01KtrEZs.roa File: ycWCenlntxeizb9ze4C01KtrEZs.roa (raw, json) Hash identifier: zo8tBHLYYULyNpzkCCJWX+JSpkDGhlpT2JtoLS4w/B4= Subject key identifier: C9:C5:82:7A:79:67:B7:17:A2:CD:BF:73:7B:80:B4:D4:AB:6B:11:9B Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Certificate serial: 4C Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ycWCenlntxeizb9ze4C01KtrEZs.roa Signing time: Mon 01 Sep 2025 01:37:01 +0000 ROA not before: Mon 01 Sep 2025 01:37:01 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 0 IP address blocks: 2405:25c0:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 12:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Validity Not Before: Sep 1 01:37:01 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=C9C5827A7967B717A2CDBF737B80B4D4AB6B119B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:59:06:c2:b6:c8:40:03:0e:3e:4c:ee:c4:18: 64:dc:d8:3d:eb:ce:40:52:cd:6a:18:fa:7b:c7:e6: e5:7e:f5:1a:8e:14:24:22:6a:6d:ed:4c:2c:5c:a8: 7e:39:0c:55:8b:a8:75:42:c1:5c:44:d0:6c:d6:4d: 6e:f1:b3:25:01:23:19:02:66:e7:1f:2f:4f:00:ea: 43:13:cd:1a:74:95:d6:15:3c:5f:a3:7e:f9:ef:56: 17:5e:7a:c0:50:e1:fe:77:e2:e6:74:98:cc:d2:0f: 71:6b:f7:61:1f:47:1a:53:94:db:ec:b6:66:e3:41: 69:9d:2a:7b:2b:2f:b9:4f:61:39:02:8d:e0:c6:fc: 7c:12:e5:e7:5b:c4:c2:67:b2:37:8a:16:8e:ad:ef: 11:bf:34:58:ad:dd:a8:01:4b:90:d1:18:5f:18:c1: b3:7e:f8:44:3a:f8:23:67:0c:56:90:11:86:f4:74: 07:4c:15:63:1c:c6:be:35:8a:75:7a:41:9a:68:e9: b0:7c:ca:2a:54:ea:7b:88:94:b5:c2:9b:a0:2f:e8: ab:d9:a2:4f:8d:41:db:b5:0b:73:13:f3:6f:35:ac: 66:3e:7b:f9:c3:4a:76:13:bc:8a:26:7c:fa:3c:6e: f3:9f:09:a4:16:c8:fb:33:c8:97:86:22:8a:b6:b3: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C5:82:7A:79:67:B7:17:A2:CD:BF:73:7B:80:B4:D4:AB:6B:11:9B X509v3 Authority Key Identifier: keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ycWCenlntxeizb9ze4C01KtrEZs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:25c0:c000::/36 Signature Algorithm: sha256WithRSAEncryption b9:46:a3:97:93:ec:05:eb:5a:ff:a8:af:7e:a0:68:50:f0:fc: 77:9b:c1:a6:72:fe:04:75:4c:dd:0d:4b:95:f4:a5:a2:80:6c: b8:b3:6d:35:77:91:22:92:bb:ee:e1:c6:f5:5e:e8:2f:b9:95: 92:cf:5c:7c:48:f9:2d:72:8e:ec:3a:48:5f:52:4d:70:98:aa: 54:6a:3c:0e:cb:d2:f4:40:dd:f0:7a:f2:d0:01:c2:3e:ec:16: 38:e6:7e:ea:59:ab:09:f0:07:58:0b:80:59:62:4f:25:4d:58: bf:77:b3:e5:78:2d:8d:b4:84:35:37:eb:ea:8d:48:78:a1:5c: bc:62:70:ed:f0:1c:8f:a5:c1:b3:32:82:9e:1e:56:99:ef:6c: 26:df:25:8b:7b:63:b6:70:58:63:33:cc:bc:b0:27:09:b4:6b: 12:89:ec:84:63:99:9c:89:11:43:d4:65:0d:6a:5d:33:d6:2c: 46:e2:70:e0:09:b1:3e:31:e9:7f:14:64:24:6d:4e:b6:0f:94: 5d:24:db:be:60:8e:ee:ac:a3:c3:ef:a3:41:7a:4a:54:18:4a: a2:f1:b2:f2:e6:ef:e4:21:8c:e1:a3:73:ce:90:9f:39:e6:ea: 72:f2:a0:52:ef:22:03:80:ba:2d:6d:90:34:57:37:44:ec:e1: 52:e6:44:d2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI1MDkwMTAx MzcwMVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzlDNTgyN0E3OTY3Qjcx N0EyQ0RCRjczN0I4MEI0RDRBQjZCMTE5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOtZBsK2yEADDj5M7sQYZNzYPevOQFLNahj6e8fm5X71Go4UJCJq be1MLFyofjkMVYuodULBXETQbNZNbvGzJQEjGQJm5x8vTwDqQxPNGnSV1hU8X6N+ +e9WF156wFDh/nfi5nSYzNIPcWv3YR9HGlOU2+y2ZuNBaZ0qeysvuU9hOQKN4Mb8 fBLl51vEwmeyN4oWjq3vEb80WK3dqAFLkNEYXxjBs374RDr4I2cMVpARhvR0B0wV YxzGvjWKdXpBmmjpsHzKKlTqe4iUtcKboC/oq9miT41B27ULcxPzbzWsZj57+cNK dhO8iiZ8+jxu858JpBbI+zPIl4YiirazkscCAwEAAaOCAiowggImMB0GA1UdDgQW BBTJxYJ6eWe3F6LNv3N7gLTUq2sRmzAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6 Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzQ5L3ljV0NlbmxudHhlaXpiOXplNEMwMUt0ckVacy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkBSXAwDANBgkqhkiG9w0BAQsFAAOCAQEAuUajl5PsBeta/6ivfqBo UPD8d5vBpnL+BHVM3Q1LlfSlooBsuLNtNXeRIpK77uHG9V7oL7mVks9cfEj5LXKO 7DpIX1JNcJiqVGo8DsvS9EDd8Hry0AHCPuwWOOZ+6lmrCfAHWAuAWWJPJU1Yv3ez 5XgtjbSENTfr6o1IeKFcvGJw7fAcj6XBszKCnh5Wme9sJt8li3tjtnBYYzPMvLAn CbRrEonshGOZnIkRQ9RlDWpdM9YsRuJw4AmxPjHpfxRkJG1Otg+UXSTbvmCO7qyj w++jQXpKVBhKovGy8ubv5CGM4aNzzpCfOebqcvKgUu8iA4C6LW2QNFc3ROzhUuZE 0g== -----END CERTIFICATE-----Generated at Wed Oct 8 14:05:11 2025 by rpki-client