$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Z3pcEZRTK88nn-WkAdD8351iOmc.roa File: Z3pcEZRTK88nn-WkAdD8351iOmc.roa (raw, json) Hash identifier: u/+tQ3S6yzZeoC0icIsX+T/cAEtsVff2Zzl4aWLSe2I= Subject key identifier: 67:7A:5C:11:94:53:2B:CF:27:9F:E5:A4:01:D0:FC:DF:9D:62:3A:67 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01FB Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Z3pcEZRTK88nn-WkAdD8351iOmc.roa Signing time: Wed 01 Oct 2025 01:33:42 +0000 ROA not before: Wed 01 Oct 2025 01:33:42 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 59125 IP address blocks: 202.247.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Oct 1 01:33:42 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=677A5C1194532BCF279FE5A401D0FCDF9D623A67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:1d:fa:24:a5:c4:9b:76:09:23:20:fd:bd: d8:3a:26:3f:3e:ab:c9:84:fc:03:57:d2:c2:6b:3f: ec:b0:f7:8a:56:31:2b:e2:d0:f9:04:b3:37:f5:b6: 70:42:03:e9:e5:52:5c:04:f6:fe:11:96:01:57:32: 58:3f:17:d0:5d:5d:26:09:1b:10:4a:b1:d2:9c:fc: 19:b0:d5:e4:30:49:da:c2:29:2a:f4:7e:f6:0c:71: a0:39:e4:b8:73:74:aa:67:d1:3c:b6:9c:f8:52:e2: 10:07:33:fe:1e:5f:e2:03:23:f7:82:bc:c6:61:55: ff:80:c7:95:0c:06:86:78:3f:b3:48:fc:0f:b7:7a: ff:3a:1f:9e:ae:a5:b3:fe:d0:56:93:5e:83:6c:be: fd:69:b0:dd:b4:a4:ec:99:44:95:fd:2f:c2:fc:45: cb:18:c0:1b:cb:e4:4b:a2:65:05:75:fc:b8:7d:cd: fb:6e:06:59:75:4f:49:46:0b:65:24:49:52:07:04: 42:25:6c:96:92:08:62:25:76:f9:c2:4c:19:dc:e4: e3:ed:3e:04:aa:45:db:03:f0:ae:6c:61:16:74:92: 8b:61:bb:4f:af:50:04:68:b9:a8:40:af:f2:11:59: 0f:6a:1b:29:e0:23:b0:6b:88:e2:6f:37:76:3e:71: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7A:5C:11:94:53:2B:CF:27:9F:E5:A4:01:D0:FC:DF:9D:62:3A:67 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Z3pcEZRTK88nn-WkAdD8351iOmc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.247.160.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:b2:22:5b:bb:e5:3f:29:6d:ca:e0:36:20:ab:4f:2b:73:61: 10:37:5e:76:35:58:d9:62:87:14:07:7c:11:7c:9c:7d:61:42: 9c:4b:d8:aa:75:44:58:09:ba:ac:17:86:ec:36:c9:a3:cb:7f: be:7b:b8:c1:3a:3d:0d:fd:81:f3:c3:b8:3e:60:ec:59:37:df: 3e:24:44:f5:b3:90:a6:46:18:1f:82:39:cf:e3:51:25:86:f6: 22:1c:4d:8a:f3:b1:e7:34:a8:99:4e:fc:43:94:a1:5f:34:2e: 9a:cf:dc:bc:1e:f4:a7:ea:37:2b:55:35:c0:70:2d:26:32:56: 6e:77:c5:c0:28:18:e9:25:38:26:50:bc:49:75:9e:6c:2a:bf: 10:8a:fa:06:6a:f6:06:cc:63:91:81:f3:e4:17:07:1d:a8:ea: 2d:60:8a:fd:55:b8:bb:a6:89:4b:fe:7e:bc:53:49:8e:d7:03: 29:ab:78:17:d6:66:40:39:b0:53:b9:73:97:90:1a:20:a9:43: 59:f9:6e:d4:9e:e0:4f:e2:5b:13:9b:f7:93:ab:c7:2c:7f:fd: 1b:ea:8b:0b:0c:82:ca:c1:8e:72:7a:3e:5a:1e:bc:8c:83:9f: 93:9f:e5:e9:61:33:e0:ad:73:55:9a:5f:dd:25:c3:29:85:f8: 33:2d:2d:08 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTEwMDEw MTMzNDJaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY3N0E1QzExOTQ1MzJC Q0YyNzlGRTVBNDAxRDBGQ0RGOUQ2MjNBNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz9h36JKXEm3YJIyD9vdg6Jj8+q8mE/ANX0sJrP+yw94pWMSvi 0PkEszf1tnBCA+nlUlwE9v4RlgFXMlg/F9BdXSYJGxBKsdKc/Bmw1eQwSdrCKSr0 fvYMcaA55LhzdKpn0Ty2nPhS4hAHM/4eX+IDI/eCvMZhVf+Ax5UMBoZ4P7NI/A+3 ev86H56upbP+0FaTXoNsvv1psN20pOyZRJX9L8L8RcsYwBvL5EuiZQV1/Lh9zftu Bll1T0lGC2UkSVIHBEIlbJaSCGIldvnCTBnc5OPtPgSqRdsD8K5sYRZ0kothu0+v UARouahAr/IRWQ9qGyngI7BriOJvN3Y+cXt/AgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUZ3pcEZRTK88nn+WkAdD8351iOmcwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvWjNwY0VaUlRLODhubi1Xa0FkRDgzNTFpT21jLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME A8r3oDANBgkqhkiG9w0BAQsFAAOCAQEAj7IiW7vlPyltyuA2IKtPK3NhEDdedjVY 2WKHFAd8EXycfWFCnEvYqnVEWAm6rBeG7DbJo8t/vnu4wTo9Df2B88O4PmDsWTff PiRE9bOQpkYYH4I5z+NRJYb2IhxNivOx5zSomU78Q5ShXzQums/cvB70p+o3K1U1 wHAtJjJWbnfFwCgY6SU4JlC8SXWebCq/EIr6Bmr2BsxjkYHz5BcHHajqLWCK/VW4 u6aJS/5+vFNJjtcDKat4F9ZmQDmwU7lzl5AaIKlDWflu1J7gT+JbE5v3k6vHLH/9 G+qLCwyCysGOcno+Wh68jIOfk5/l6WEz4K1zVZpf3SXDKYX4My0tCA== -----END CERTIFICATE-----Generated at Thu Oct 23 02:16:49 2025 by rpki-client