$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/QiSxZcI3mf8GFdRmCC6ZOZFilHI.roa File: QiSxZcI3mf8GFdRmCC6ZOZFilHI.roa (raw, json) Hash identifier: WOfLCaK03J7IONX1q2abRSMWZaX+mazqTXju2xOJt4w= Subject key identifier: 42:24:B1:65:C2:37:99:FF:06:15:D4:66:08:2E:99:39:91:62:94:72 Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C Certificate serial: 1F Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/QiSxZcI3mf8GFdRmCC6ZOZFilHI.roa Signing time: Mon 01 Sep 2025 01:31:52 +0000 ROA not before: Mon 01 Sep 2025 01:31:52 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 9354 IP address blocks: 211.2.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 09:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C Validity Not Before: Sep 1 01:31:52 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=4224B165C23799FF0615D466082E993991629472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:f2:0e:9e:4c:fc:f9:30:a7:8d:aa:ee:ae: 05:28:43:df:00:50:c7:f9:f4:72:a7:2c:83:62:aa: 15:cb:16:75:1f:63:57:87:54:f7:1f:08:60:ba:71: de:d2:a4:aa:bb:60:73:2b:df:3e:67:60:a8:35:2e: 33:e1:86:f8:22:24:60:27:31:12:7f:de:f9:0c:27: 73:dc:fa:0f:b9:e1:70:64:e5:2c:ad:ef:e8:62:bc: b5:6c:55:d6:27:a9:82:db:23:88:a7:3e:95:a2:a9: b2:69:c2:3b:d3:f2:13:90:d4:65:da:a7:14:74:c6: 94:30:c8:f1:51:48:1e:10:46:4c:ac:8c:1f:51:e1: 23:a1:3e:54:96:8c:b5:b0:b5:46:29:0c:e0:0b:db: 33:82:c3:ab:0d:92:c3:0c:9e:1a:0c:77:13:bf:a8: 79:5c:14:44:c7:df:4a:2c:d8:a0:58:5a:94:2d:f9: 11:ac:03:b3:b6:37:f4:b8:c6:5d:93:d9:de:96:f5: 33:2f:cc:b6:6b:3b:42:9a:b6:1d:8b:13:96:0c:00: d3:78:8c:d9:39:45:c6:f3:32:50:0a:d7:3c:d5:a1: 27:69:c2:91:01:55:c4:2d:52:4d:96:16:0e:b1:e4: 30:1a:c9:18:d5:0f:cc:ee:5b:cc:2a:0e:ae:4f:7c: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:24:B1:65:C2:37:99:FF:06:15:D4:66:08:2E:99:39:91:62:94:72 X509v3 Authority Key Identifier: keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/QiSxZcI3mf8GFdRmCC6ZOZFilHI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.2.64.0/18 Signature Algorithm: sha256WithRSAEncryption 42:c3:04:56:27:38:c3:24:23:b1:1e:e2:16:44:ce:7d:e8:bd: dc:9e:88:2e:73:eb:4a:69:a3:e3:b2:94:51:17:86:78:ee:a6: a7:6c:6a:ce:1a:a8:85:f1:d0:d8:12:1b:fa:ba:f9:bd:d6:e3: 42:32:a5:44:d8:cd:1e:06:a9:46:d2:b2:5e:16:4a:26:7d:a7: d2:1b:11:9b:61:2d:f0:43:3e:ec:2c:e9:9e:95:2a:c0:97:8d: 37:b1:42:6c:7d:a9:09:a1:8b:56:08:ad:37:5d:69:3a:a6:ed: 65:1d:66:fc:d1:a9:44:be:e4:1b:ac:88:95:27:9d:a7:62:6d: 1d:6a:c3:d1:d6:18:58:5a:4b:02:57:6d:b2:04:79:0b:a5:8c: cf:08:4d:dc:91:a6:37:00:fe:47:35:c8:27:63:2f:7a:97:e6: fc:ee:37:28:56:4b:91:d7:49:a6:61:e8:ef:14:bb:43:b9:eb: 8a:08:12:e2:81:48:7d:4c:45:8d:2b:f7:51:dd:22:79:fd:3d: 5b:e2:2e:08:b7:43:7e:50:c5:b2:54:dd:3f:f0:05:c7:0b:01: 38:9b:a1:90:db:82:b8:81:2d:36:aa:87:78:e9:27:3a:98:e4: e8:cc:2c:72:bc:be:62:29:71:67:ec:75:04:5c:12:57:b8:85: 10:a0:74:49 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI1MDkwMTAx MzE1MloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNDIyNEIxNjVDMjM3OTlG RjA2MTVENDY2MDgyRTk5Mzk5MTYyOTQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM1V8g6eTPz5MKeNqu6uBShD3wBQx/n0cqcsg2KqFcsWdR9jV4dU 9x8IYLpx3tKkqrtgcyvfPmdgqDUuM+GG+CIkYCcxEn/e+Qwnc9z6D7nhcGTlLK3v 6GK8tWxV1iepgtsjiKc+laKpsmnCO9PyE5DUZdqnFHTGlDDI8VFIHhBGTKyMH1Hh I6E+VJaMtbC1RikM4AvbM4LDqw2SwwyeGgx3E7+oeVwURMffSizYoFhalC35EawD s7Y39LjGXZPZ3pb1My/Mtms7Qpq2HYsTlgwA03iM2TlFxvMyUArXPNWhJ2nCkQFV xC1STZYWDrHkMBrJGNUPzO5bzCoOrk98zAsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRCJLFlwjeZ/wYV1GYILpk5kWKUcjAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD +TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMTEvUWlTeFpjSTNtZjhHRmRSbUNDNlpPWkZpbEhJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBtMCQDANBgkqhkiG9w0BAQsFAAOCAQEAQsMEVic4wyQjsR7iFkTOfei93J6I LnPrSmmj47KUUReGeO6mp2xqzhqohfHQ2BIb+rr5vdbjQjKlRNjNHgapRtKyXhZK Jn2n0hsRm2Et8EM+7CzpnpUqwJeNN7FCbH2pCaGLVgitN11pOqbtZR1m/NGpRL7k G6yIlSedp2JtHWrD0dYYWFpLAldtsgR5C6WMzwhN3JGmNwD+RzXIJ2Mvepfm/O43 KFZLkddJpmHo7xS7Q7nriggS4oFIfUxFjSv3Ud0ief09W+IuCLdDflDFslTdP/AF xwsBOJuhkNuCuIEtNqqHeOknOpjk6Mwscry+YilxZ+x1BFwSV7iFEKB0SQ== -----END CERTIFICATE-----Generated at Wed Sep 10 10:28:17 2025 by rpki-client