$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/i8pTfRTi7swphJPRSkEbtb1q4as.roa File: i8pTfRTi7swphJPRSkEbtb1q4as.roa (raw, json) Hash identifier: 1TYnXBcOZS4snRAvVwyiuCluGnszHE3/6pWqeSz49GE= Subject key identifier: 8B:CA:53:7D:14:E2:EE:CC:29:84:93:D1:4A:41:1B:B5:BD:6A:E1:AB Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C Certificate serial: 22 Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/i8pTfRTi7swphJPRSkEbtb1q4as.roa Signing time: Mon 01 Sep 2025 01:31:53 +0000 ROA not before: Mon 01 Sep 2025 01:31:53 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 9354 IP address blocks: 221.118.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 05:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C Validity Not Before: Sep 1 01:31:53 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=8BCA537D14E2EECC298493D14A411BB5BD6AE1AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:eb:ed:bf:82:31:22:c7:84:ed:83:81:cf: 3c:29:87:57:55:80:b5:ca:dc:05:ae:a3:5a:27:44: be:77:06:e1:79:33:6f:a7:b3:41:d3:40:6b:e8:64: a3:8b:4f:aa:e8:29:fc:09:61:bd:ee:37:08:5d:2f: 11:5b:d9:ff:ae:76:8d:4a:af:92:bf:5d:fe:11:bf: a4:77:ad:d0:64:1d:3a:87:de:6d:ea:da:9a:5c:5c: c9:e0:c4:70:31:29:d3:3c:c8:f3:36:d0:ba:3d:1c: 32:84:ab:77:6c:7a:36:ad:72:cf:29:b4:86:70:75: 2b:63:5f:99:e1:ee:18:9b:e4:cc:9c:04:34:29:7d: d1:b9:b0:87:05:20:cb:29:00:83:52:0c:86:82:8d: 97:1e:c1:8c:41:d9:9c:b2:20:58:5a:2a:9c:43:2f: b0:ee:b3:24:97:c2:57:36:ed:bc:8c:dd:57:5b:86: d5:5f:61:59:3f:52:95:2b:3f:54:4f:9b:6e:5d:0f: 20:42:70:1f:48:07:a1:bf:a3:a5:12:31:81:e7:21: 7d:57:f1:19:ff:cb:62:d5:3b:a7:dd:fc:96:48:00: b1:6f:25:a9:f8:29:23:e4:c4:f5:bb:10:8f:8f:48: c1:d0:e0:e6:13:ac:42:3d:6a:bd:7d:83:e4:87:e2: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CA:53:7D:14:E2:EE:CC:29:84:93:D1:4A:41:1B:B5:BD:6A:E1:AB X509v3 Authority Key Identifier: keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/i8pTfRTi7swphJPRSkEbtb1q4as.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.118.128.0/18 Signature Algorithm: sha256WithRSAEncryption 09:44:f2:83:3d:3c:d6:e1:b6:2f:ed:0c:f1:8b:26:ce:39:d6: 9c:6a:db:b8:14:e8:a1:bd:b1:20:44:c0:62:af:37:00:05:84: 3b:af:ac:bc:2b:da:61:c1:d8:7b:cc:d9:4b:6b:bb:e6:9e:29: f1:4d:23:cb:be:4c:aa:27:fc:5e:c6:f4:1d:8a:fb:f6:3d:a6: 1a:04:79:a1:d3:10:54:c5:a6:9e:af:3e:c0:32:f7:12:3b:6e: e5:0f:d3:7d:b7:e0:d5:c3:e9:5d:de:4f:4b:73:61:2d:2d:71: 0c:29:95:79:37:b3:8a:3f:fc:ea:3f:45:03:a9:12:93:e8:78: 5f:fc:99:4e:6c:4e:db:56:98:7f:d3:67:5f:28:e1:f2:ef:6b: bb:a4:9f:df:f3:75:5d:a2:dd:fd:4d:41:1c:ee:05:75:9d:17: bd:33:65:c8:be:a6:f8:be:26:e6:d9:42:48:0b:38:41:3b:03: 14:16:7f:3d:bb:d8:45:9f:d8:65:b4:40:f0:63:68:85:bb:34: 62:40:7e:c7:2f:15:5e:8e:23:2d:f6:6c:ad:55:2e:c3:43:1a: ac:a5:0b:bb:4a:7d:55:89:73:b3:54:5d:33:86:9e:91:71:51: 13:a1:89:a2:be:05:e0:58:e4:3e:0c:24:3f:30:f3:be:d9:f1: e0:20:c6:c2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI1MDkwMTAx MzE1M1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoOEJDQTUzN0QxNEUyRUVD QzI5ODQ5M0QxNEE0MTFCQjVCRDZBRTFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMb/6+2/gjEix4Ttg4HPPCmHV1WAtcrcBa6jWidEvncG4Xkzb6ez QdNAa+hko4tPqugp/Alhve43CF0vEVvZ/652jUqvkr9d/hG/pHet0GQdOofebera mlxcyeDEcDEp0zzI8zbQuj0cMoSrd2x6Nq1yzym0hnB1K2NfmeHuGJvkzJwENCl9 0bmwhwUgyykAg1IMhoKNlx7BjEHZnLIgWFoqnEMvsO6zJJfCVzbtvIzdV1uG1V9h WT9SlSs/VE+bbl0PIEJwH0gHob+jpRIxgechfVfxGf/LYtU7p938lkgAsW8lqfgp I+TE9bsQj49IwdDg5hOsQj1qvX2D5Ifigc8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSLylN9FOLuzCmEk9FKQRu1vWrhqzAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD +TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMTEvaThwVGZSVGk3c3dwaEpQUlNrRWJ0YjFxNGFzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBt12gDANBgkqhkiG9w0BAQsFAAOCAQEACUTygz081uG2L+0M8YsmzjnWnGrb uBToob2xIETAYq83AAWEO6+svCvaYcHYe8zZS2u75p4p8U0jy75Mqif8Xsb0HYr7 9j2mGgR5odMQVMWmnq8+wDL3Ejtu5Q/Tfbfg1cPpXd5PS3NhLS1xDCmVeTezij/8 6j9FA6kSk+h4X/yZTmxO21aYf9NnXyjh8u9ru6Sf3/N1XaLd/U1BHO4FdZ0XvTNl yL6m+L4m5tlCSAs4QTsDFBZ/PbvYRZ/YZbRA8GNohbs0YkB+xy8VXo4jLfZsrVUu w0MarKULu0p9VYlzs1RdM4aekXFRE6GJor4F4FjkPgwkPzDzvtnx4CDGwg== -----END CERTIFICATE-----Generated at Wed Sep 10 10:28:16 2025 by rpki-client