$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/aHwdbLw_FBawMVPAboF0tsbESFA.roa File: aHwdbLw_FBawMVPAboF0tsbESFA.roa (raw, json) Hash identifier: uxuFdjb6DEZ2OnzsNJly5FpGAGABxx3Gt3weT0qnJoU= Subject key identifier: 68:7C:1D:6C:BC:3F:14:16:B0:31:53:C0:6E:81:74:B6:C6:C4:48:50 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0192 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/aHwdbLw_FBawMVPAboF0tsbESFA.roa Signing time: Mon 01 Sep 2025 01:29:47 +0000 ROA not before: Mon 01 Sep 2025 01:29:47 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2527 IP address blocks: 202.226.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Sep 1 01:29:47 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=687C1D6CBC3F1416B03153C06E8174B6C6C44850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5a:eb:ae:1f:7e:4b:ff:d1:a8:ca:fa:2a:41: fd:7f:75:c6:76:a6:f9:ef:4c:80:7d:db:6c:54:f5: 7b:e7:0c:72:a8:ce:ab:eb:13:dc:5d:71:30:8b:0f: be:a3:0e:87:81:2d:42:8e:8a:39:aa:e3:a5:73:4c: ff:27:84:16:dc:f9:7b:d9:80:44:81:00:1d:dd:f3: 61:5d:75:1d:19:86:9c:70:a4:74:65:e9:c2:b3:ba: 06:57:d8:ab:3c:81:65:10:f9:b0:34:e3:90:a3:17: e3:ce:35:3d:cd:84:42:e9:97:29:c4:08:04:b5:c3: 0c:00:ab:0b:20:f7:6c:ce:39:f9:6a:d2:4b:64:5d: 30:cf:cb:de:70:ab:d6:11:23:8f:0c:f9:8b:9d:11: 2c:fe:da:3b:1d:5e:68:7c:9e:2a:24:a4:14:5e:1b: 65:ee:a3:05:fd:27:dc:60:79:74:5a:eb:7d:1e:9f: 55:d6:24:0f:1e:93:30:99:f4:50:cc:2f:4d:dc:98: e9:93:00:cd:01:c5:4f:c8:fd:fa:fb:50:b9:83:2d: df:c1:3b:95:0c:79:2b:d1:32:cc:21:c0:34:64:78: 71:d1:85:15:d6:6c:71:67:fb:e6:06:a8:59:0c:e4: 82:4a:c1:20:81:de:81:33:54:cb:70:2a:ef:53:c1: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7C:1D:6C:BC:3F:14:16:B0:31:53:C0:6E:81:74:B6:C6:C4:48:50 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/aHwdbLw_FBawMVPAboF0tsbESFA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.226.20.0/22 Signature Algorithm: sha256WithRSAEncryption a0:88:3d:f8:7e:82:a7:63:15:3c:bb:cd:f9:8a:6a:0c:fb:63: 91:56:63:06:5a:a7:d6:df:04:b6:9f:fa:14:ca:96:e1:0f:1e: 34:c7:2e:b4:b5:5e:26:1f:94:f3:54:d2:5d:5c:46:36:2d:38: 93:6f:d3:f1:6e:d3:1f:6b:99:8d:9e:2c:c6:58:fa:73:9b:00: e8:41:d4:0b:ce:6c:f9:2d:f5:1d:cc:f2:ce:21:07:72:75:64: 00:9f:eb:ed:18:81:4f:00:f9:58:74:da:3e:91:ff:dd:a8:b5: db:a3:56:2d:89:65:2f:f6:35:88:5e:d0:0a:dc:db:9f:a3:03: 01:ea:41:f3:64:05:91:70:27:30:b0:74:77:95:00:31:8e:f2: 7c:2c:70:8a:99:18:0f:43:a2:ad:8f:7e:ed:93:e7:53:d3:77: a6:1b:19:bf:c3:d7:07:18:bd:64:27:c3:e9:ed:a7:4a:2c:9d: 41:53:c3:08:b5:25:7a:32:75:21:91:d5:71:fb:e0:77:83:38: 4d:c3:4d:aa:68:2e:7b:b6:7c:c2:8f:b0:6e:a5:3b:e7:de:14: e4:53:ce:0e:a0:9e:11:1a:9b:10:aa:c7:3d:2d:f8:8d:9a:fe: 76:b0:53:94:64:5a:1b:6f:67:f6:31:15:85:d5:97:4e:15:3d: b2:0b:8d:7f -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTA5MDEw MTI5NDdaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY4N0MxRDZDQkMzRjE0 MTZCMDMxNTNDMDZFODE3NEI2QzZDNDQ4NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtWuuuH35L/9GoyvoqQf1/dcZ2pvnvTIB922xU9XvnDHKozqvr E9xdcTCLD76jDoeBLUKOijmq46VzTP8nhBbc+XvZgESBAB3d82FddR0ZhpxwpHRl 6cKzugZX2Ks8gWUQ+bA045CjF+PONT3NhELplynECAS1wwwAqwsg92zOOflq0ktk XTDPy95wq9YRI48M+YudESz+2jsdXmh8niokpBReG2XuowX9J9xgeXRa630en1XW JA8ekzCZ9FDML03cmOmTAM0BxU/I/fr7ULmDLd/BO5UMeSvRMswhwDRkeHHRhRXW bHFn++YGqFkM5IJKwSCB3oEzVMtwKu9TwRiFAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUaHwdbLw/FBawMVPAboF0tsbESFAwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9hSHdkYkx3X0ZCYXdNVlBBYm9GMHRzYkVTRkEucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCyuIUMA0GCSqGSIb3DQEBCwUAA4IBAQCgiD34foKnYxU8u835imoM+2ORVmMG WqfW3wS2n/oUypbhDx40xy60tV4mH5TzVNJdXEY2LTiTb9PxbtMfa5mNnizGWPpz mwDoQdQLzmz5LfUdzPLOIQdydWQAn+vtGIFPAPlYdNo+kf/dqLXbo1YtiWUv9jWI XtAK3NufowMB6kHzZAWRcCcwsHR3lQAxjvJ8LHCKmRgPQ6Ktj37tk+dT03emGxm/ w9cHGL1kJ8Pp7adKLJ1BU8MItSV6MnUhkdVx++B3gzhNw02qaC57tnzCj7BupTvn 3hTkU84OoJ4RGpsQqsc9LfiNmv52sFOUZFobb2f2MRWF1ZdOFT2yC41/ -----END CERTIFICATE-----Generated at Tue Sep 9 12:43:44 2025 by rpki-client