$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/rr2l_BrlPICs6GaXOLyguTCsRdA.roa File: rr2l_BrlPICs6GaXOLyguTCsRdA.roa (raw, json) Hash identifier: SPVoInmOh3chMjxVqsWUoEpQZMOkSDuudZk/GJi7f3Q= Subject key identifier: AE:BD:A5:FC:1A:E5:3C:80:AC:E8:66:97:38:BC:A0:B9:30:AC:45:D0 Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Certificate serial: 49 Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/rr2l_BrlPICs6GaXOLyguTCsRdA.roa Signing time: Tue 01 Apr 2025 01:30:00 +0000 ROA not before: Tue 01 Apr 2025 01:30:00 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 24289 IP address blocks: 203.81.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 18:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Validity Not Before: Apr 1 01:30:00 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=AEBDA5FC1AE53C80ACE8669738BCA0B930AC45D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:77:f9:f4:5a:d5:b9:f6:aa:db:f5:fc:d7: 94:ad:7a:5e:45:4f:9d:1e:b7:f7:3f:e4:1c:58:d2: 28:19:60:db:f5:47:6b:91:92:cb:e8:07:60:ac:8d: 30:5b:9b:89:0c:21:c9:6a:00:02:75:b2:49:18:6a: b7:e8:eb:33:e6:e4:d8:39:6a:61:55:f4:a5:5a:f3: e7:2e:0a:8a:10:75:70:ad:83:54:a0:30:ce:24:b0: ea:80:76:a9:c9:a5:cc:1b:b4:36:d6:b4:43:24:1b: 79:a1:a7:aa:65:16:ab:2b:a4:5f:96:4a:98:7a:81: a5:c6:c0:dd:c7:d5:a9:96:d8:0d:58:be:45:e5:25: 8b:d8:bc:16:20:e8:00:33:46:24:2e:12:77:06:84: ea:af:fa:cc:a6:47:c9:b5:65:28:24:79:96:0a:1c: a0:65:48:12:9c:1f:d2:4a:07:9a:c6:b6:91:d8:af: 47:41:e5:3c:98:db:c1:3e:40:cf:b7:10:07:43:f8: f2:7e:8b:0a:25:78:5c:2e:17:3b:af:c1:ea:d2:46: 97:fe:4f:a7:12:06:47:88:10:c2:53:91:ff:2e:52: 74:2c:39:fc:a3:5b:41:72:54:1e:6a:f5:72:f1:3f: 7c:ca:e0:90:54:f4:62:62:aa:e7:3c:6d:03:66:1d: cd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BD:A5:FC:1A:E5:3C:80:AC:E8:66:97:38:BC:A0:B9:30:AC:45:D0 X509v3 Authority Key Identifier: keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/rr2l_BrlPICs6GaXOLyguTCsRdA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.81.112.0/20 Signature Algorithm: sha256WithRSAEncryption 31:9b:e1:77:90:13:f9:e6:5a:ca:bf:bc:60:87:63:58:64:b2: 8b:23:1b:da:e3:22:07:b7:a1:df:30:85:73:3d:6b:dd:cc:9b: 53:df:cc:40:44:2b:36:82:de:ef:41:ff:b5:ab:fb:96:31:c4: 03:3b:22:1a:94:e6:95:41:1d:e6:d7:11:6b:6a:56:01:97:fc: 67:4c:d7:62:f2:cf:7b:d4:11:f1:e6:65:9b:bc:9e:d3:a7:2a: 0a:2e:69:75:87:e0:5d:58:63:1a:26:15:7d:93:16:9f:e6:67: ff:e5:45:ba:0a:e1:5c:4d:11:81:21:4f:5d:25:85:84:7b:d2: 49:8f:4e:8a:34:bd:11:e5:59:7c:38:a2:76:bc:40:7f:d4:09: fc:61:e5:b9:12:53:b5:17:90:2e:2d:b1:f8:3e:cf:b3:76:96: 59:32:e8:fe:0d:b6:38:df:b7:77:98:ca:fa:90:f6:5d:07:2b: 3e:20:2a:38:14:81:96:5a:00:7d:aa:8a:f8:43:5f:98:d6:90: 50:36:58:87:15:b7:4a:89:e3:3d:1e:b0:b6:a0:5f:23:8e:af: e7:a2:bc:47:7d:d5:8b:ed:94:48:b3:0c:a5:6c:bd:05:8b:3d: af:01:eb:ae:f4:f6:2d:7a:88:bd:05:b1:43:82:16:33:ec:a6: a6:eb:c2:95 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2 QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI1MDQwMTAx MzAwMFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQUVCREE1RkMxQUU1M0M4 MEFDRTg2Njk3MzhCQ0EwQjkzMEFDNDVEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKbVd/n0WtW59qrb9fzXlK16XkVPnR639z/kHFjSKBlg2/VHa5GS y+gHYKyNMFubiQwhyWoAAnWySRhqt+jrM+bk2DlqYVX0pVrz5y4KihB1cK2DVKAw ziSw6oB2qcmlzBu0Nta0QyQbeaGnqmUWqyukX5ZKmHqBpcbA3cfVqZbYDVi+ReUl i9i8FiDoADNGJC4SdwaE6q/6zKZHybVlKCR5lgocoGVIEpwf0koHmsa2kdivR0Hl PJjbwT5Az7cQB0P48n6LCiV4XC4XO6/B6tJGl/5PpxIGR4gQwlOR/y5SdCw5/KNb QXJUHmr1cvE/fMrgkFT0YmKq5zxtA2YdzeECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSuvaX8GuU8gKzoZpc4vKC5MKxF0DAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjUvcnIybF9CcmxQSUNzNkdhWE9MeWd1VENzUmRBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMtRcDANBgkqhkiG9w0BAQsFAAOCAQEAMZvhd5AT+eZayr+8YIdjWGSyiyMb 2uMiB7eh3zCFcz1r3cybU9/MQEQrNoLe70H/tav7ljHEAzsiGpTmlUEd5tcRa2pW AZf8Z0zXYvLPe9QR8eZlm7ye06cqCi5pdYfgXVhjGiYVfZMWn+Zn/+VFugrhXE0R gSFPXSWFhHvSSY9OijS9EeVZfDiidrxAf9QJ/GHluRJTtReQLi2x+D7Ps3aWWTLo /g22ON+3d5jK+pD2XQcrPiAqOBSBlloAfaqK+ENfmNaQUDZYhxW3SonjPR6wtqBf I46v56K8R33Vi+2USLMMpWy9BYs9rwHrrvT2LXqIvQWxQ4IWM+ympuvClQ== -----END CERTIFICATE-----Generated at Mon Nov 3 20:05:17 2025 by rpki-client