$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/bi9TYSTFhjMPwt4OvC6lZvv_oyE.roa File: bi9TYSTFhjMPwt4OvC6lZvv_oyE.roa (raw, json) Hash identifier: hgCkRidctqb+4F5hMXZzW8oupcCb0HOuGC82TgLueso= Subject key identifier: 6E:2F:53:61:24:C5:86:33:0F:C2:DE:0E:BC:2E:A5:66:FB:FF:A3:21 Certificate issuer: /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756 Certificate serial: 4B Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/bi9TYSTFhjMPwt4OvC6lZvv_oyE.roa Signing time: Thu 18 Sep 2025 01:56:43 +0000 ROA not before: Thu 18 Sep 2025 01:56:43 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 7671 IP address blocks: 124.241.192.0/18 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 15:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756 Validity Not Before: Sep 18 01:56:43 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=6E2F536124C586330FC2DE0EBC2EA566FBFFA321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c7:5e:b3:0c:be:c5:30:d0:86:9c:c1:9b:26: 18:71:3e:3e:3b:c5:93:29:84:f2:5e:ec:c8:5d:79: cb:ba:6f:a8:f1:0e:dd:25:33:38:36:57:59:8b:2c: 4b:97:bf:e4:de:85:17:c1:1e:43:0f:ad:62:72:18: 7c:a2:3f:e9:08:20:c2:76:b7:35:07:cf:cc:12:cf: e1:33:15:bd:27:49:86:78:44:2b:18:f8:f4:51:73: 4b:bf:d3:b0:ca:f4:19:bc:c5:31:d2:e6:82:55:21: d6:0f:9c:4d:89:73:9b:99:9e:fd:8b:1f:ed:8c:6f: 9c:06:14:cc:10:4f:b6:10:14:b7:c2:6d:e2:33:46: 08:23:04:db:d4:f4:6d:2c:7a:9b:9d:47:12:fc:3f: 25:9a:dc:8a:06:dc:12:5f:5b:88:ec:7a:6f:1e:96: a2:69:e6:44:bb:b1:52:db:b3:f3:33:a7:9b:82:a6: c7:83:a6:9e:7a:d7:01:2c:76:5e:ce:72:43:65:48: 4d:ca:b4:e2:96:fb:7d:ba:3c:3b:db:e0:13:a2:30: a5:71:bc:8f:41:af:e1:53:ec:85:29:fc:ea:b1:da: 55:7c:0b:06:9f:8c:3f:0c:cb:18:fd:8a:e7:74:b4: 61:44:ee:6f:f2:b1:21:94:ec:b4:8b:b4:aa:d7:73: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2F:53:61:24:C5:86:33:0F:C2:DE:0E:BC:2E:A5:66:FB:FF:A3:21 X509v3 Authority Key Identifier: keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/bi9TYSTFhjMPwt4OvC6lZvv_oyE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.241.192.0/18 Signature Algorithm: sha256WithRSAEncryption 3b:50:43:09:91:1b:22:7c:b8:a8:3e:8b:cd:7d:9a:27:f0:e4: 42:44:e5:5d:fb:7c:77:70:99:c1:dd:89:1d:0b:e6:f8:be:dc: d3:05:9b:1c:de:9d:4d:44:76:d7:05:dd:78:fa:13:16:4b:09: de:28:af:b2:93:51:72:69:59:95:fe:b4:26:f2:d9:97:47:d0: fb:c4:de:5b:50:81:5f:7c:5b:64:e6:43:7f:d5:bc:fd:97:32: e4:3b:12:71:85:5c:ca:b6:8e:00:d0:d9:d0:78:fe:3a:6a:f3: 67:be:f6:47:60:8b:68:36:86:d5:3f:ac:83:ca:0f:8c:7e:d3: 23:bd:05:06:f4:12:0f:5b:62:c5:ea:f8:76:c0:04:a2:db:6a: 58:9d:75:0f:e9:26:dc:9f:3c:ef:f1:02:d3:e4:f0:d5:45:ab: 25:ec:87:dd:8c:23:f0:52:a7:2f:d1:50:e7:7f:b8:7d:23:d4: f9:11:55:6d:73:5f:9d:c8:35:2b:7a:6f:9b:ed:4d:e8:da:a7: 5b:eb:06:14:4a:44:74:a9:3d:6f:83:9f:79:c7:2a:03:ad:6d: 53:1c:04:af:92:70:5d:82:43:e4:b3:30:9d:95:93:3c:2d:b5: 04:06:56:bb:1f:84:cd:8b:70:18:90:73:fe:e6:ea:ea:81:58: 0a:98:3d:b4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQkQz MDZFQ0U2MDQzOTAxRTUyQThFOEI2NjE0QUFBNDU2QUJBNzU2MB4XDTI1MDkxODAx NTY0M1oXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNkUyRjUzNjEyNEM1ODYz MzBGQzJERTBFQkMyRUE1NjZGQkZGQTMyMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM3HXrMMvsUw0IacwZsmGHE+PjvFkymE8l7syF15y7pvqPEO3SUz ODZXWYssS5e/5N6FF8EeQw+tYnIYfKI/6Qggwna3NQfPzBLP4TMVvSdJhnhEKxj4 9FFzS7/TsMr0GbzFMdLmglUh1g+cTYlzm5me/Ysf7YxvnAYUzBBPthAUt8Jt4jNG CCME29T0bSx6m51HEvw/JZrcigbcEl9biOx6bx6WomnmRLuxUtuz8zOnm4Kmx4Om nnrXASx2Xs5yQ2VITcq04pb7fbo8O9vgE6IwpXG8j0Gv4VPshSn86rHaVXwLBp+M PwzLGP2K53S0YUTub/KxIZTstIu0qtdz2acCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRuL1NhJMWGMw/C3g68LqVm+/+jITAfBgNVHSMEGDAWgBQ70wbs5gQ5AeUqjotm FKqkVqunVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzY4L085TUc3T1lFT1FIbEtvNkxaaFNxcEZhcnAxWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL085TUc3T1lFT1FIbEtvNkxaaFNxcEZh cnAxWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zNjgvYmk5VFlTVEZoak1Qd3Q0T3ZDNmxadnZfb3lFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBnzxwDANBgkqhkiG9w0BAQsFAAOCAQEAO1BDCZEbIny4qD6LzX2aJ/DkQkTl Xft8d3CZwd2JHQvm+L7c0wWbHN6dTUR21wXdePoTFksJ3iivspNRcmlZlf60JvLZ l0fQ+8TeW1CBX3xbZOZDf9W8/Zcy5DsScYVcyraOANDZ0Hj+OmrzZ772R2CLaDaG 1T+sg8oPjH7TI70FBvQSD1tixer4dsAEottqWJ11D+km3J887/EC0+Tw1UWrJeyH 3Ywj8FKnL9FQ53+4fSPU+RFVbXNfncg1K3pvm+1N6NqnW+sGFEpEdKk9b4Ofeccq A61tUxwEr5JwXYJD5LMwnZWTPC21BAZWux+EzYtwGJBz/ubq6oFYCpg9tA== -----END CERTIFICATE-----Generated at Wed Oct 8 17:33:53 2025 by rpki-client