$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/nARpQXfrhvXSBO4hMg0wluILVFE.roa File: nARpQXfrhvXSBO4hMg0wluILVFE.roa (raw, json) Hash identifier: 21s+8b+ktnzorTyjpnMU78eWuwBXeMJY+eBcuBA/UtM= Subject key identifier: 9C:04:69:41:77:EB:86:F5:D2:04:EE:21:32:0D:30:96:E2:0B:54:51 Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC Certificate serial: 6B Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/nARpQXfrhvXSBO4hMg0wluILVFE.roa Signing time: Thu 01 May 2025 01:34:05 +0000 ROA not before: Thu 01 May 2025 01:34:04 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 0 IP address blocks: 101.203.88.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 05:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC Validity Not Before: May 1 01:34:04 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9C04694177EB86F5D204EE21320D3096E20B5451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e0:e2:3e:06:40:3a:dd:a3:63:e6:1b:65:a9: 37:0e:a0:33:8b:b9:fc:ab:60:7d:d7:c4:e8:7c:d9: 00:f7:8b:b4:a5:23:99:a0:08:7d:81:91:09:11:3c: 65:58:e0:d4:1a:cf:86:93:25:f1:f0:58:b1:c0:19: 05:d0:0b:87:f7:90:f9:7f:59:fa:3e:51:bb:ab:fa: b6:e2:94:e5:92:f4:37:df:12:16:7f:e5:6a:74:1c: 27:da:ba:2b:5a:a4:7d:b1:e9:3b:b6:e8:44:9e:ca: 85:9e:2b:1c:a1:bc:d9:0f:7e:12:6b:76:d5:45:1d: 6f:98:7e:c4:c7:82:9f:5a:cc:e6:3a:f5:37:85:e4: a4:17:31:93:09:72:26:9d:49:39:04:cd:73:03:6a: d5:00:ec:df:a6:97:78:75:cd:96:df:95:b4:2a:55: 94:75:db:0f:f8:37:29:0c:de:42:93:e4:c9:ec:7f: 79:79:09:b0:9e:2b:e4:6d:90:6c:a8:e8:f2:a3:a5: d1:c6:90:7f:d6:8b:90:0e:32:26:db:7e:3d:9f:44: 4b:90:22:c2:85:0d:0d:01:c2:a1:84:8c:46:b7:8e: 1a:86:7b:d5:10:27:f0:2f:1d:21:17:b1:d2:71:12: 69:91:55:de:39:78:4d:c2:15:92:d2:7b:f9:61:a7: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:04:69:41:77:EB:86:F5:D2:04:EE:21:32:0D:30:96:E2:0B:54:51 X509v3 Authority Key Identifier: keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/nARpQXfrhvXSBO4hMg0wluILVFE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.203.88.0/22 Signature Algorithm: sha256WithRSAEncryption 50:3d:e6:c5:a1:ea:c7:16:a8:54:35:69:d9:28:fc:2b:3c:e7: 85:21:57:1b:c9:63:c5:d0:03:92:b7:9a:a2:f7:78:32:d3:c8: 21:48:f2:cf:bb:24:ed:f2:05:80:92:d6:bb:65:80:25:c9:83: 13:87:0a:8b:1c:20:7d:f4:6f:7c:11:42:db:25:31:5a:94:98: 5a:47:79:dc:51:04:2b:1b:c6:a2:32:82:14:9f:c0:bf:00:c4: e3:a4:a5:67:33:23:82:7c:d3:04:80:24:1b:61:2b:d0:52:8b: 0b:ff:c3:d3:41:d5:56:44:97:b0:55:39:4e:0d:39:b9:98:6f: 97:d4:35:74:a4:12:e2:03:19:9d:35:d2:18:ea:8a:66:18:39: 30:23:23:66:0a:00:f0:84:17:b6:9e:73:bf:ca:d9:e7:7d:6b: a4:e2:e1:d4:18:26:d0:34:cc:ea:56:22:02:7f:9f:d8:85:96: 0a:7d:81:5b:eb:f9:2f:3a:64:01:93:f3:f4:e6:ed:b9:8b:14: 73:ba:39:cd:61:fa:d3:b8:05:0a:33:41:93:8f:dd:6b:17:00: ca:b0:4a:18:e2:6c:0f:ec:ac:9b:d3:d0:51:c2:5a:0f:bc:c0: 3d:ef:25:fc:d8:e2:06:f9:cc:a3:26:c4:b0:15:d9:58:52:ae: 39:03:9d:7f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MUY3 NkZBMDc3MzVGNjg1OTkxRkM4ODJDODg1RTIxRUZCQjE2MUJDMB4XDTI1MDUwMTAx MzQwNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoOUMwNDY5NDE3N0VCODZG NUQyMDRFRTIxMzIwRDMwOTZFMjBCNTQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOTg4j4GQDrdo2PmG2WpNw6gM4u5/KtgfdfE6HzZAPeLtKUjmaAI fYGRCRE8ZVjg1BrPhpMl8fBYscAZBdALh/eQ+X9Z+j5Ru6v6tuKU5ZL0N98SFn/l anQcJ9q6K1qkfbHpO7boRJ7KhZ4rHKG82Q9+Emt21UUdb5h+xMeCn1rM5jr1N4Xk pBcxkwlyJp1JOQTNcwNq1QDs36aXeHXNlt+VtCpVlHXbD/g3KQzeQpPkyex/eXkJ sJ4r5G2QbKjo8qOl0caQf9aLkA4yJtt+PZ9ES5AiwoUNDQHCoYSMRreOGoZ71RAn 8C8dIRex0nESaZFV3jl4TcIVktJ7+WGnIsMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBScBGlBd+uG9dIE7iEyDTCW4gtUUTAfBgNVHSMEGDAWgBRx92+gdzX2hZkfyILI heIe+7FhvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTk3L2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1eFlidy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1 eFlidy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81OTcvbkFScFFYZnJodlhTQk80aE1nMHdsdUlMVkZFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmXLWDANBgkqhkiG9w0BAQsFAAOCAQEAUD3mxaHqxxaoVDVp2Sj8KzznhSFX G8ljxdADkreaovd4MtPIIUjyz7sk7fIFgJLWu2WAJcmDE4cKixwgffRvfBFC2yUx WpSYWkd53FEEKxvGojKCFJ/AvwDE46SlZzMjgnzTBIAkG2Er0FKLC//D00HVVkSX sFU5Tg05uZhvl9Q1dKQS4gMZnTXSGOqKZhg5MCMjZgoA8IQXtp5zv8rZ531rpOLh 1Bgm0DTM6lYiAn+f2IWWCn2BW+v5LzpkAZPz9ObtuYsUc7o5zWH607gFCjNBk4/d axcAyrBKGOJsD+ysm9PQUcJaD7zAPe8l/NjiBvnMoybEsBXZWFKuOQOdfw== -----END CERTIFICATE-----Generated at Fri Oct 24 06:45:45 2025 by rpki-client