$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ym3GZmNUqShJjkjcNLV_zQpNxbI.roa File: ym3GZmNUqShJjkjcNLV_zQpNxbI.roa (raw, json) Hash identifier: EdNWfLM+7zhbzuxlGMk5XPTCWvMYGSRZXVPS+zR18vY= Subject key identifier: CA:6D:C6:66:63:54:A9:28:49:8E:48:DC:34:B5:7F:CD:0A:4D:C5:B2 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 045E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ym3GZmNUqShJjkjcNLV_zQpNxbI.roa Signing time: Mon 01 Sep 2025 01:34:08 +0000 ROA not before: Mon 01 Sep 2025 01:34:08 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 10013 IP address blocks: 59.156.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 05:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:34:08 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=CA6DC6666354A928498E48DC34B57FCD0A4DC5B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:6c:53:87:9d:39:b1:04:61:64:39:cc:79: fd:c8:ec:74:13:a8:f4:c0:74:cd:d3:98:b9:c4:c9: 54:c5:19:7b:9a:02:8f:85:f9:f7:1a:5f:ba:a7:31: 46:f8:11:32:0d:18:22:56:38:22:ff:e1:2e:2f:2d: 98:b9:f6:63:4e:3f:57:41:67:69:03:bb:52:51:e8: 8b:f4:78:e8:5f:65:54:c7:fe:f4:e5:75:bf:f7:9c: 72:3b:4f:c3:da:a3:f8:08:a6:68:6e:df:43:0c:d4: 06:c7:5c:b8:31:2f:69:dd:ca:fd:65:dc:e4:e2:ed: be:a2:b4:e5:4f:b8:80:cb:7c:71:b0:ca:f2:43:8f: 65:87:24:36:83:99:6b:b6:c4:24:53:53:61:ca:f5: 68:8a:ee:0f:94:63:9f:e2:48:26:c0:4b:1a:6d:69: c0:78:d7:28:36:25:fb:eb:15:96:dd:d3:6c:4c:00: c4:e3:28:44:8d:c2:cd:27:65:71:aa:fa:b4:e6:98: c8:2e:4c:e6:65:45:94:a3:7c:6e:70:f0:00:30:a1: 13:d5:a7:e9:25:5b:b1:98:98:9e:46:b1:7c:a1:17: 1d:6f:ab:74:85:61:0b:ab:3c:71:2e:50:82:0a:6a: a4:e1:60:9b:4a:7a:a0:9d:69:8f:a0:50:67:d0:5d: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6D:C6:66:63:54:A9:28:49:8E:48:DC:34:B5:7F:CD:0A:4D:C5:B2 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ym3GZmNUqShJjkjcNLV_zQpNxbI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.156.203.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:e9:18:d2:d5:b3:1a:87:a7:e2:a8:7b:b5:7a:50:4b:13:bf: 18:4c:71:da:9c:ec:48:5b:c9:25:dd:30:35:47:d4:20:1b:a2: e3:81:8c:e5:ce:d8:07:8e:86:b8:56:06:ff:a8:d0:3a:e8:98: d9:7f:28:c3:b4:74:66:89:50:27:c1:46:b1:c8:2d:d8:2e:35: c1:51:de:8a:88:79:50:a6:78:46:81:49:03:c8:27:ed:98:84: 1b:db:3e:0c:95:74:75:76:c0:a0:25:c8:13:0c:ed:a1:2a:a3: 41:eb:71:72:6c:1d:4d:cd:68:d9:84:62:9e:53:73:90:b5:4f: 0f:85:ce:62:2f:72:85:8c:e7:52:8a:7c:1d:03:d1:23:ca:f7: 27:fd:f5:51:29:a1:29:bb:93:40:28:8c:d3:56:af:cb:d7:c3: 4b:d8:22:18:f8:51:48:e4:85:2a:e1:2f:81:38:87:e2:4d:88: 40:ed:1d:7c:a5:86:4c:bc:3c:74:a9:68:26:41:83:51:56:2d: 2a:9b:6f:38:2e:54:cc:ea:5c:1d:81:1b:48:c6:06:71:0e:14: 7b:ad:82:67:99:e7:b4:96:e2:61:2a:35:95:c2:3f:ab:b6:84: 80:8a:88:96:f4:c8:b6:eb:1d:ab:f4:13:08:87:4a:74:9c:bc: d9:0a:ee:fe -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTM0MDhaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKENBNkRDNjY2NjM1NEE5 Mjg0OThFNDhEQzM0QjU3RkNEMEE0REM1QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvVmxTh505sQRhZDnMef3I7HQTqPTAdM3TmLnEyVTFGXuaAo+F +fcaX7qnMUb4ETINGCJWOCL/4S4vLZi59mNOP1dBZ2kDu1JR6Iv0eOhfZVTH/vTl db/3nHI7T8Pao/gIpmhu30MM1AbHXLgxL2ndyv1l3OTi7b6itOVPuIDLfHGwyvJD j2WHJDaDmWu2xCRTU2HK9WiK7g+UY5/iSCbASxptacB41yg2JfvrFZbd02xMAMTj KESNws0nZXGq+rTmmMguTOZlRZSjfG5w8AAwoRPVp+klW7GYmJ5GsXyhFx1vq3SF YQurPHEuUIIKaqThYJtKeqCdaY+gUGfQXTlxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUym3GZmNUqShJjkjcNLV/zQpNxbIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3ltM0dabU5VcVNoSmpramNOTFZfelFwTnhiSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA7nMswDQYJKoZIhvcNAQELBQADggEBAD7pGNLVsxqHp+Koe7V6UEsTvxhM cdqc7EhbySXdMDVH1CAbouOBjOXO2AeOhrhWBv+o0DromNl/KMO0dGaJUCfBRrHI LdguNcFR3oqIeVCmeEaBSQPIJ+2YhBvbPgyVdHV2wKAlyBMM7aEqo0HrcXJsHU3N aNmEYp5Tc5C1Tw+FzmIvcoWM51KKfB0D0SPK9yf99VEpoSm7k0AojNNWr8vXw0vY Ihj4UUjkhSrhL4E4h+JNiEDtHXylhky8PHSpaCZBg1FWLSqbbzguVMzqXB2BG0jG BnEOFHutgmeZ57SW4mEqNZXCP6u2hICKiJb0yLbrHav0EwiHSnScvNkK7v4= -----END CERTIFICATE-----Generated at Wed Sep 10 09:14:48 2025 by rpki-client