$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/3DMBnMrkzHTEZydJ8Z_YbgcDNis.roa File: 3DMBnMrkzHTEZydJ8Z_YbgcDNis.roa (raw, json) Hash identifier: pABnEty8E04ycw6oPAlLGvw4El3xbN6PSUwGEWh2rlU= Subject key identifier: DC:33:01:9C:CA:E4:CC:74:C4:67:27:49:F1:9F:D8:6E:07:03:36:2B Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Certificate serial: 48 Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/3DMBnMrkzHTEZydJ8Z_YbgcDNis.roa Signing time: Tue 01 Apr 2025 01:30:00 +0000 ROA not before: Tue 01 Apr 2025 01:30:00 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 24289 IP address blocks: 202.223.32.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 18:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Validity Not Before: Apr 1 01:30:00 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=DC33019CCAE4CC74C4672749F19FD86E0703362B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:81:27:94:ab:df:36:d5:c0:f8:3f:68:1b: 95:be:16:ad:ec:71:64:fa:e8:a4:41:4a:fb:e4:72: f4:3e:69:75:da:f1:28:92:99:4b:81:77:e2:37:1b: 24:3d:b5:2b:1f:27:36:59:89:c1:71:5a:39:0b:1a: 08:d0:da:ae:48:49:7a:6b:e1:ee:65:55:81:8d:46: 63:8a:e1:29:ad:1b:40:da:15:f4:f3:f9:62:99:ff: 0e:7d:d4:40:89:57:10:80:25:2c:88:d7:1a:2c:d4: 18:16:b5:85:65:b6:61:87:ca:0d:9a:84:cc:11:c9: e2:0c:5a:5d:10:9d:e8:c1:15:30:74:8d:ed:98:4a: 1b:11:a9:e4:12:2e:7e:4f:9c:ea:bf:95:13:43:36: 01:f0:3f:06:d6:8b:01:46:25:6d:56:54:d7:df:f3: 27:c5:fd:10:15:3d:95:11:2a:1e:cf:b3:4d:58:a4: a2:b4:eb:62:10:c4:3b:48:c0:a6:d8:a4:95:65:37: 86:e4:5a:b3:55:53:46:fa:12:62:a0:02:1f:e9:85: 04:e7:21:e0:cd:d9:dc:94:32:5a:ba:cb:2d:d1:4a: 95:67:22:c6:20:45:53:ed:48:1b:dc:dd:61:b5:56: ee:5c:49:0a:c4:59:78:6c:3b:55:d2:19:6a:5b:e2: ff:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:33:01:9C:CA:E4:CC:74:C4:67:27:49:F1:9F:D8:6E:07:03:36:2B X509v3 Authority Key Identifier: keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/3DMBnMrkzHTEZydJ8Z_YbgcDNis.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.223.32.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:ae:4f:ee:de:4c:29:d6:52:73:b7:4f:3b:f9:bc:40:a7:47: c5:aa:e4:59:e0:3d:d2:cc:6b:4a:78:3e:b4:87:54:d8:55:e5: f3:71:c8:8b:73:26:48:93:c2:dc:6f:14:a5:27:86:d7:2c:a0: 5c:5e:ff:72:e7:95:16:a5:47:c6:39:9d:dd:3b:2b:17:3f:af: b8:d5:20:3a:a9:d3:23:25:36:ab:b9:66:48:31:9e:0f:cf:f4: 75:81:34:f6:32:9b:31:db:d8:f2:0c:78:e8:19:41:de:67:03: 40:b3:aa:fd:ab:2a:9d:7a:52:a7:0a:df:e1:dd:fb:cc:ba:09: f6:48:dc:93:b4:d2:8d:2f:a3:e1:6f:4e:98:1a:3b:c8:a7:4a: 02:f8:13:09:41:62:bc:bc:6d:bd:e7:b6:d4:40:31:ad:0e:d8: c6:ac:1b:c3:44:3f:73:3b:2b:d6:33:42:fe:d4:1b:2d:68:dd: 51:ee:79:40:a1:17:fc:fd:c9:d5:31:01:eb:f5:72:b5:d2:5a: 05:0c:73:2b:87:ec:a1:52:3b:35:49:b5:e6:e4:2c:f1:35:1c: 0b:0a:cb:c4:b1:63:a5:70:ec:01:5b:b8:df:c8:db:2c:e8:06: 60:22:24:0f:2c:27:ee:86:be:f9:2c:c8:ca:5d:2e:33:47:56: 6c:a1:05:7c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2 QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI1MDQwMTAx MzAwMFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoREMzMzAxOUNDQUU0Q0M3 NEM0NjcyNzQ5RjE5RkQ4NkUwNzAzMzYyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMsFgSeUq9821cD4P2gblb4WrexxZPropEFK++Ry9D5pddrxKJKZ S4F34jcbJD21Kx8nNlmJwXFaOQsaCNDarkhJemvh7mVVgY1GY4rhKa0bQNoV9PP5 Ypn/Dn3UQIlXEIAlLIjXGizUGBa1hWW2YYfKDZqEzBHJ4gxaXRCd6MEVMHSN7ZhK GxGp5BIufk+c6r+VE0M2AfA/BtaLAUYlbVZU19/zJ8X9EBU9lREqHs+zTVikorTr YhDEO0jAptiklWU3huRas1VTRvoSYqACH+mFBOch4M3Z3JQyWrrLLdFKlWcixiBF U+1IG9zdYbVW7lxJCsRZeGw7VdIZalvi/xkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTcMwGcyuTMdMRnJ0nxn9huBwM2KzAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjUvM0RNQm5Ncmt6SFRFWnlkSjhaX1liZ2NETmlzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsrfIDANBgkqhkiG9w0BAQsFAAOCAQEAjK5P7t5MKdZSc7dPO/m8QKdHxark WeA90sxrSng+tIdU2FXl83HIi3MmSJPC3G8UpSeG1yygXF7/cueVFqVHxjmd3Tsr Fz+vuNUgOqnTIyU2q7lmSDGeD8/0dYE09jKbMdvY8gx46BlB3mcDQLOq/asqnXpS pwrf4d37zLoJ9kjck7TSjS+j4W9OmBo7yKdKAvgTCUFivLxtvee21EAxrQ7Yxqwb w0Q/czsr1jNC/tQbLWjdUe55QKEX/P3J1TEB6/VytdJaBQxzK4fsoVI7NUm15uQs 8TUcCwrLxLFjpXDsAVu438jbLOgGYCIkDywn7oa++SzIyl0uM0dWbKEFfA== -----END CERTIFICATE-----Generated at Mon Nov 3 20:07:26 2025 by rpki-client