$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/hg5Pm1d5xxkBw79JjF_5LptDuVE.roa File: hg5Pm1d5xxkBw79JjF_5LptDuVE.roa (raw, json) Hash identifier: s26AObcllrVxtaLUV8F3/W5S0dDSJyccWn8orDqhnFo= Subject key identifier: 86:0E:4F:9B:57:79:C7:19:01:C3:BF:49:8C:5F:F9:2E:9B:43:B9:51 Certificate issuer: /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Certificate serial: 4E Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/hg5Pm1d5xxkBw79JjF_5LptDuVE.roa Signing time: Sat 01 Nov 2025 01:35:30 +0000 ROA not before: Sat 01 Nov 2025 01:35:30 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 150362 IP address blocks: 2401:d20:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 05:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Validity Not Before: Nov 1 01:35:30 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=860E4F9B5779C71901C3BF498C5FF92E9B43B951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:db:e1:45:75:eb:6d:24:f2:7e:e5:eb:f5: a9:e8:5e:8e:70:46:70:81:42:f2:21:65:bb:f8:ce: bb:36:f9:27:7d:20:55:d9:18:c9:86:ec:07:49:c1: 16:46:7b:2a:b9:c6:5f:75:5c:2c:0b:66:8a:67:3d: be:6d:bc:69:5a:a4:4c:f7:03:15:86:1d:c6:f3:89: c2:0c:c0:34:a2:18:e3:7b:56:6d:11:9f:f0:6c:f2: 6a:88:33:8c:8d:ea:0c:79:98:92:df:bf:aa:cd:1d: 75:77:77:82:f0:11:f6:15:a5:d4:9f:f3:b4:65:bc: a5:5d:3e:31:7d:31:7a:c0:e3:d2:c2:f3:66:28:59: b6:b8:c2:ea:21:50:ff:e5:75:a4:4c:99:0c:83:04: ef:42:0d:9a:92:ab:f6:1b:8b:90:00:1c:67:95:4a: cf:0c:81:b7:31:50:53:99:5d:45:56:cb:52:98:03: 55:86:d2:5e:1d:91:b1:27:e4:d3:63:38:2f:23:5e: 98:e1:2d:61:4a:02:6f:c2:1e:2a:c3:9a:a3:de:ba: f7:11:db:e4:5d:2e:c8:d6:51:7e:d3:70:35:da:bf: 3d:ce:7c:b5:0a:b7:df:37:a8:6f:18:05:d5:5b:2b: 48:5f:3a:fe:63:b2:eb:37:1b:de:f0:a1:97:14:b9: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0E:4F:9B:57:79:C7:19:01:C3:BF:49:8C:5F:F9:2E:9B:43:B9:51 X509v3 Authority Key Identifier: keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/hg5Pm1d5xxkBw79JjF_5LptDuVE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d20:b::/48 Signature Algorithm: sha256WithRSAEncryption 38:0a:5c:f3:6c:32:27:19:a6:ef:bc:06:db:b8:74:39:03:9e: 31:99:c2:04:b0:d3:44:a0:92:b1:9b:a9:4a:57:5c:f1:61:7f: f2:47:7d:7e:5c:e5:a4:b4:bb:de:53:9e:44:36:5a:12:69:5e: 31:75:20:a0:18:46:68:ae:e9:0a:89:7a:f1:53:78:95:0f:14: 18:cb:6b:44:a2:e7:2a:99:3b:40:50:ad:3c:d0:0f:ae:62:77: 9e:82:6d:cd:5b:af:86:86:d2:cf:c6:2b:42:5a:6f:ff:7e:9d: af:81:ae:ee:64:69:22:ca:65:56:ed:b1:55:bf:6e:11:29:3b: 70:c7:de:30:b2:6c:8f:59:af:95:92:d9:11:3d:32:f8:c4:0a: ce:85:f5:4f:b9:2e:42:06:09:f4:31:4e:86:d9:6a:0b:ba:a9: f9:ad:ca:f5:98:f9:56:1b:49:41:a5:59:97:40:6e:94:ca:ab: 58:72:57:25:2d:46:28:3a:01:74:a5:a5:66:35:7f:47:9d:54: 31:0d:e2:89:8d:5b:77:d7:c4:19:9d:81:04:17:c1:f9:1f:a7: 04:f3:48:35:8f:62:4b:83:03:ee:41:a0:d1:f0:6b:35:35:bf: 1b:49:f9:b3:3f:71:78:4f:9d:9c:2d:3d:30:59:83:4d:0e:96: ce:4b:68:1f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI1MTEwMTAx MzUzMFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODYwRTRGOUI1Nzc5Qzcx OTAxQzNCRjQ5OEM1RkY5MkU5QjQzQjk1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMpu2+FFdettJPJ+5ev1qehejnBGcIFC8iFlu/jOuzb5J30gVdkY yYbsB0nBFkZ7KrnGX3VcLAtmimc9vm28aVqkTPcDFYYdxvOJwgzANKIY43tWbRGf 8GzyaogzjI3qDHmYkt+/qs0ddXd3gvAR9hWl1J/ztGW8pV0+MX0xesDj0sLzZihZ trjC6iFQ/+V1pEyZDIME70INmpKr9huLkAAcZ5VKzwyBtzFQU5ldRVbLUpgDVYbS Xh2RsSfk02M4LyNemOEtYUoCb8IeKsOao9669xHb5F0uyNZRftNwNdq/Pc58tQq3 3zeobxgF1VsrSF86/mOy6zcb3vChlxS5rQ8CAwEAAaOCAiswggInMB0GA1UdDgQW BBSGDk+bV3nHGQHDv0mMX/kum0O5UTAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDIzL2hnNVBtMWQ1eHhrQnc3OUpqRl81THB0RHVWRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAQ0gAAswDQYJKoZIhvcNAQELBQADggEBADgKXPNsMicZpu+8Btu4 dDkDnjGZwgSw00SgkrGbqUpXXPFhf/JHfX5c5aS0u95TnkQ2WhJpXjF1IKAYRmiu 6QqJevFTeJUPFBjLa0Si5yqZO0BQrTzQD65id56Cbc1br4aG0s/GK0Jab/9+na+B ru5kaSLKZVbtsVW/bhEpO3DH3jCybI9Zr5WS2RE9MvjECs6F9U+5LkIGCfQxTobZ agu6qfmtyvWY+VYbSUGlWZdAbpTKq1hyVyUtRig6AXSlpWY1f0edVDEN4omNW3fX xBmdgQQXwfkfpwTzSDWPYkuDA+5BoNHwazU1vxtJ+bM/cXhPnZwtPTBZg00Ols5L aB8= -----END CERTIFICATE-----Generated at Sat Nov 1 06:17:15 2025 by rpki-client