$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/3KR_XT_rJFDMliy6EMfzPBUgrn8.roa File: 3KR_XT_rJFDMliy6EMfzPBUgrn8.roa (raw, json) Hash identifier: ESVGWeqXnY3p7HpefofmjDfcCsPGFVBBzgMCet6t8TY= Subject key identifier: DC:A4:7F:5D:3F:EB:24:50:CC:96:2C:BA:10:C7:F3:3C:15:20:AE:7F Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542 Certificate serial: 7C Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/3KR_XT_rJFDMliy6EMfzPBUgrn8.roa Signing time: Thu 01 May 2025 01:32:28 +0000 ROA not before: Thu 01 May 2025 01:32:28 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 17675 IP address blocks: 122.200.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542 Validity Not Before: May 1 01:32:28 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=DCA47F5D3FEB2450CC962CBA10C7F33C1520AE7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:98:1b:b1:11:cd:20:c6:fd:94:24:0d:23: e4:f5:a5:ac:64:e3:de:9e:a6:cd:d3:68:48:0f:90: 9d:52:18:68:bf:e8:92:af:e4:3e:8e:c3:a2:dd:dc: b3:2e:c9:3b:bc:8b:87:95:31:23:1f:db:5c:90:a9: 3b:ee:2e:c2:32:e9:34:4b:fd:6b:f5:d2:1f:e0:95: c4:61:7f:5e:c8:d8:0b:20:a0:4d:01:b0:77:69:8b: 44:a7:f6:48:4a:2b:c3:f4:01:72:bb:59:6d:2c:23: a8:c6:6f:40:73:a5:ae:8d:84:c2:ee:ec:7f:ae:92: ba:2f:99:c3:d5:f3:46:0f:4f:44:f6:38:2e:2b:b9: f6:07:7a:02:8e:33:e2:b4:19:27:44:af:1e:14:40: 59:76:b9:30:66:46:44:84:3a:2d:1d:aa:6f:82:0f: 9e:a9:3b:c1:34:66:ab:27:6d:9e:2e:c8:ae:18:ef: 79:6e:31:30:5e:b1:b4:0c:1d:db:a3:12:bc:3a:42: eb:1b:9e:69:f1:a7:59:97:6b:02:5d:d9:59:c8:de: 0d:7f:e4:47:aa:68:63:d8:b7:8b:00:a9:10:03:85: 52:2e:39:60:96:33:bb:9c:b8:a5:1f:f1:fb:3f:40: 9e:26:43:5e:f7:a8:00:7f:14:ad:70:44:07:95:ea: 6c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A4:7F:5D:3F:EB:24:50:CC:96:2C:BA:10:C7:F3:3C:15:20:AE:7F X509v3 Authority Key Identifier: keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/3KR_XT_rJFDMliy6EMfzPBUgrn8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.200.36.0/22 Signature Algorithm: sha256WithRSAEncryption a5:92:4c:d9:3e:91:3b:9b:37:e6:44:80:ca:7f:c1:c4:08:10: fa:e3:18:98:ea:1c:1c:5b:db:a1:03:c3:62:c9:5c:b5:89:f8: 05:7d:07:c2:22:04:55:a5:63:73:53:3b:0b:3b:bf:32:46:c1: 67:b7:47:a2:5b:b0:33:26:1f:a1:4a:3b:c4:44:6a:cd:bb:88: c8:5b:96:9e:77:1c:9e:b9:6c:c2:e1:13:22:6d:78:b6:e4:51: c5:92:18:df:94:23:fa:38:fb:02:c7:c2:d4:b7:f6:fb:22:01: 6f:57:6a:71:bd:bc:c1:18:38:7d:32:bb:a9:c9:bf:79:a2:58: 0d:ac:8b:08:a6:31:03:ea:44:75:f1:d6:99:da:34:f0:4f:5d: 98:42:ea:44:15:a8:ab:e0:da:86:e3:fe:a8:9d:f9:9c:17:d3: 0e:54:95:d2:cb:9f:d6:36:ff:98:2c:94:96:97:03:05:39:0b: c9:b3:4c:73:cc:7e:11:58:c7:ff:c5:b0:22:27:f9:29:94:5e: fd:16:9e:d7:fd:31:2d:17:8a:b7:8d:6c:a4:c8:06:e5:fc:5f: 09:06:23:79:70:61:65:3b:c5:38:58:87:c0:40:51:17:23:cc: 18:25:7d:58:e9:fb:44:7a:59:ba:4f:00:92:fb:9a:01:b0:81: 95:53:74:c7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTI1MDUwMTAx MzIyOFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRENBNDdGNUQzRkVCMjQ1 MENDOTYyQ0JBMTBDN0YzM0MxNTIwQUU3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANLUmBuxEc0gxv2UJA0j5PWlrGTj3p6mzdNoSA+QnVIYaL/okq/k Po7Dot3csy7JO7yLh5UxIx/bXJCpO+4uwjLpNEv9a/XSH+CVxGF/XsjYCyCgTQGw d2mLRKf2SEorw/QBcrtZbSwjqMZvQHOlro2Ewu7sf66Sui+Zw9XzRg9PRPY4Liu5 9gd6Ao4z4rQZJ0SvHhRAWXa5MGZGRIQ6LR2qb4IPnqk7wTRmqydtni7IrhjveW4x MF6xtAwd26MSvDpC6xueafGnWZdrAl3ZWcjeDX/kR6poY9i3iwCpEAOFUi45YJYz u5y4pR/x+z9AniZDXveoAH8UrXBEB5XqbJMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTcpH9dP+skUMyWLLoQx/M8FSCufzAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93 t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82MDIvM0tSX1hUX3JKRkRNbGl5NkVNZnpQQlVncm44LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnrIJDANBgkqhkiG9w0BAQsFAAOCAQEApZJM2T6RO5s35kSAyn/BxAgQ+uMY mOocHFvboQPDYslctYn4BX0HwiIEVaVjc1M7Czu/MkbBZ7dHoluwMyYfoUo7xERq zbuIyFuWnnccnrlswuETIm14tuRRxZIY35Qj+jj7AsfC1Lf2+yIBb1dqcb28wRg4 fTK7qcm/eaJYDayLCKYxA+pEdfHWmdo08E9dmELqRBWoq+DahuP+qJ35nBfTDlSV 0suf1jb/mCyUlpcDBTkLybNMc8x+EVjH/8WwIif5KZRe/Rae1/0xLReKt41spMgG 5fxfCQYjeXBhZTvFOFiHwEBRFyPMGCV9WOn7RHpZuk8AkvuaAbCBlVN0xw== -----END CERTIFICATE-----Generated at Fri Oct 24 13:17:41 2025 by rpki-client