$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30439/4xMkPLM8HNdoChbOrYyrvaaLE8s.roa File: 4xMkPLM8HNdoChbOrYyrvaaLE8s.roa (raw, json) Hash identifier: R4KJXXb+NXN/jGPZzHH0f1TLajePFv51hkBPiJTPXWk= Subject key identifier: E3:13:24:3C:B3:3C:1C:D7:68:0A:16:CE:AD:8C:AB:BD:A6:8B:13:CB Certificate issuer: /CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C Certificate serial: 16 Authority key identifier: 8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/4xMkPLM8HNdoChbOrYyrvaaLE8s.roa Signing time: Sat 26 Jul 2025 13:07:48 +0000 ROA not before: Sat 26 Jul 2025 13:07:48 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 45691 IP address blocks: 2401:b420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C Validity Not Before: Jul 26 13:07:48 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=E313243CB33C1CD7680A16CEAD8CABBDA68B13CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:80:06:e1:3e:57:21:b9:46:6d:43:b5:73: a8:04:5c:60:96:57:d5:ae:d5:d1:9f:b5:74:12:9c: 90:01:1b:17:92:18:44:33:56:d8:19:b8:ca:2f:19: 0e:95:d5:96:8c:eb:58:ab:c8:c6:0b:88:70:e4:39: 0f:26:6f:7a:72:c5:b5:07:a8:88:76:8d:03:2d:63: f0:1e:0d:17:59:2d:84:20:a2:76:43:97:7e:36:e3: be:dc:04:86:83:03:46:47:7a:bf:13:02:18:f4:e0: 93:9a:73:da:1c:46:fc:13:56:95:bb:17:31:b7:6f: 7c:70:69:2d:fd:bd:0d:c8:06:70:a4:00:01:3b:c3: 59:bf:f5:8e:e2:bb:69:d8:17:a6:54:08:94:b7:a8: 0f:16:c9:c0:72:ee:94:9f:fc:84:11:82:8f:9f:ae: 17:46:9a:d2:2d:6d:bc:e2:5d:5c:a9:5e:cc:5a:3d: 68:fa:43:48:08:65:aa:4e:7f:a4:1e:cd:39:00:a8: cb:4a:e6:0b:e5:f6:73:e0:7f:e4:e0:35:ea:8e:18: cd:7a:70:b6:50:6f:9f:e6:75:4e:47:7b:b3:90:68: 71:ca:8f:f3:d3:e0:d1:e3:17:5d:fa:92:ac:1e:48: 79:6f:64:eb:16:b1:80:91:e1:83:ef:78:95:55:b2: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:13:24:3C:B3:3C:1C:D7:68:0A:16:CE:AD:8C:AB:BD:A6:8B:13:CB X509v3 Authority Key Identifier: keyid:8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/4xMkPLM8HNdoChbOrYyrvaaLE8s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b420::/32 Signature Algorithm: sha256WithRSAEncryption a9:30:66:e8:53:89:0b:9b:21:0d:e9:23:1d:e2:1b:fb:fd:69: 91:b4:7e:e8:c6:3e:45:6d:6a:3f:92:44:e1:b5:b1:34:06:b7: ae:29:3f:af:73:62:04:9a:b4:cd:87:f6:e5:8e:d4:d1:ad:f5: f1:2a:e5:22:3b:9c:7d:df:f4:b2:9b:bc:5b:31:34:cd:de:cb: dd:35:09:a1:d1:34:86:17:f0:c2:ed:2a:8b:1e:9f:2e:14:98: 8d:df:d2:ca:ca:92:51:5c:55:15:c2:f1:fd:5f:3d:51:fb:1d: 11:f0:d6:a7:eb:c8:40:be:5f:c2:1c:5c:85:88:02:6d:40:88: 20:42:a4:a6:d3:e7:64:50:65:c6:a1:a8:60:cd:be:09:68:85: 16:93:1f:9a:b1:ed:85:d9:03:0a:25:5f:8b:da:f0:7b:9c:58: 11:6e:2f:dc:12:27:19:3a:b9:a3:37:09:b9:14:7f:2a:29:bb: aa:4a:f8:f9:9b:8e:96:95:99:8c:f0:e7:43:56:8c:3c:46:0b: 4b:97:5c:31:e9:85:fa:b7:e1:76:5e:42:73:12:d5:4e:9d:fa: b1:f7:46:0a:d8:20:41:cf:4b:5f:4f:fb:53:d5:46:e6:b7:c4: 33:2d:be:91:48:90:69:63:4f:73:c5:72:f8:db:63:f7:0d:71: 89:1e:95:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDAy MEE4OEZDQTBGNUFEQkI1QTU5OEFBODEyNTUzNEU1NzVDMTNDMB4XDTI1MDcyNjEz MDc0OFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoRTMxMzI0M0NCMzNDMUNE NzY4MEExNkNFQUQ4Q0FCQkRBNjhCMTNDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMeSgAbhPlchuUZtQ7VzqARcYJZX1a7V0Z+1dBKckAEbF5IYRDNW 2Bm4yi8ZDpXVlozrWKvIxguIcOQ5DyZvenLFtQeoiHaNAy1j8B4NF1kthCCidkOX fjbjvtwEhoMDRkd6vxMCGPTgk5pz2hxG/BNWlbsXMbdvfHBpLf29DcgGcKQAATvD Wb/1juK7adgXplQIlLeoDxbJwHLulJ/8hBGCj5+uF0aa0i1tvOJdXKlezFo9aPpD SAhlqk5/pB7NOQCoy0rmC+X2c+B/5OA16o4YzXpwtlBvn+Z1Tkd7s5BoccqP89Pg 0eMXXfqSrB5IeW9k6xaxgJHhg+94lVWyZrUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTjEyQ8szwc12gKFs6tjKu9posTyzAfBgNVHSMEGDAWgBSNAgqI/KD1rbtaWYqo ElU05XXBPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MzkvalFJS2lQeWc5YTI3V2xtS3FCSlZOT1Yxd1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalFJS2lQeWc5YTI3V2xtS3FCSlZO T1Yxd1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDM5LzR4TWtQTE04SE5kb0NoYk9yWXlydmFhTEU4cy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAbQgMA0GCSqGSIb3DQEBCwUAA4IBAQCpMGboU4kLmyEN6SMd4hv7 /WmRtH7oxj5FbWo/kkThtbE0BreuKT+vc2IEmrTNh/bljtTRrfXxKuUiO5x93/Sy m7xbMTTN3svdNQmh0TSGF/DC7SqLHp8uFJiN39LKypJRXFUVwvH9Xz1R+x0R8Nan 68hAvl/CHFyFiAJtQIggQqSm0+dkUGXGoahgzb4JaIUWkx+ase2F2QMKJV+L2vB7 nFgRbi/cEicZOrmjNwm5FH8qKbuqSvj5m46WlZmM8OdDVow8RgtLl1wx6YX6t+F2 XkJzEtVOnfqx90YK2CBBz0tfT/tT1Ubmt8QzLb6RSJBpY09zxXL422P3DXGJHpWu -----END CERTIFICATE-----Generated at Wed Oct 29 18:19:00 2025 by rpki-client