$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/pTU18HXzIxfYrQGPvPZdp7VGX0k.roa File: pTU18HXzIxfYrQGPvPZdp7VGX0k.roa (raw, json) Hash identifier: ZyJzwM1QlnWr5AYHGvlKINjTpXUjHZi15lB7Pn0xHl4= Subject key identifier: A5:35:35:F0:75:F3:23:17:D8:AD:01:8F:BC:F6:5D:A7:B5:46:5F:49 Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Certificate serial: 3C Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/pTU18HXzIxfYrQGPvPZdp7VGX0k.roa Signing time: Tue 10 Jun 2025 10:48:45 +0000 ROA not before: Tue 10 Jun 2025 10:48:45 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 38628 IP address blocks: 219.100.100.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 09:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Validity Not Before: Jun 10 10:48:45 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=A53535F075F32317D8AD018FBCF65DA7B5465F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:da:08:fa:e0:06:31:73:2f:d1:5e:17:5c: 69:2f:66:3d:03:fa:cd:2b:ea:47:96:a8:59:1e:fd: 75:91:35:b0:4d:83:92:2d:3a:ad:ef:f5:47:c8:aa: 00:df:84:9d:48:e1:99:66:8e:55:c7:be:89:21:42: f7:35:a8:7b:e2:ab:de:3f:24:24:3e:f2:f2:11:42: d1:eb:a1:78:62:36:e1:70:3f:d6:94:28:e0:04:7c: e4:99:64:b3:99:df:60:64:44:f6:05:82:c3:97:aa: f7:39:99:9a:2b:2a:54:fd:d4:02:9a:70:fc:db:ee: d4:1b:1b:6a:06:db:92:a7:c0:02:34:be:93:a9:05: 68:f9:96:ab:75:b1:3c:8e:96:ed:1e:c5:94:7e:49: 22:04:b0:10:db:be:27:18:65:6e:83:9b:d2:48:ad: a9:0b:b4:e2:da:74:a2:6d:b0:c2:96:ed:b0:b8:73: 83:8c:8f:1b:38:8a:bc:a2:52:0a:e2:b7:27:b5:79: c4:ff:5f:e2:4b:7c:19:e4:0e:c0:1b:98:a5:77:ad: a0:52:60:df:6e:d5:a4:4e:57:81:2c:19:bc:b9:54: 64:2d:2d:09:24:e7:31:5a:c4:f0:a1:22:5f:ac:e6: f1:f8:e1:11:a6:51:b6:17:2e:42:be:66:ba:6e:16: 82:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:35:35:F0:75:F3:23:17:D8:AD:01:8F:BC:F6:5D:A7:B5:46:5F:49 X509v3 Authority Key Identifier: keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/pTU18HXzIxfYrQGPvPZdp7VGX0k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.100.0/22 Signature Algorithm: sha256WithRSAEncryption 12:ab:aa:50:d3:c1:c1:2c:04:a2:b8:51:d9:d1:0a:6d:41:8f: 7e:77:4c:d0:79:35:bb:bb:18:34:6f:f7:52:da:c7:84:1f:0c: 48:9b:03:a3:9c:59:03:a9:a4:06:c3:68:ce:3d:b7:72:59:db: 02:04:be:ae:f0:13:38:3b:f5:9f:af:7b:7b:02:15:44:a1:b3: 65:7a:eb:89:74:b3:d6:fb:ff:b7:2a:4d:30:0b:b9:9b:43:57: af:5f:8f:e7:43:cc:9d:d6:8f:0e:5f:cc:b2:20:ab:22:8d:a7: 83:3f:69:7b:26:59:7d:95:6c:29:81:db:9f:5f:28:3b:93:e1: 50:d8:1f:16:76:90:ca:74:cb:e4:81:17:11:98:ba:80:20:06: ea:9f:42:6f:be:32:05:e3:6f:61:43:f5:a9:f9:cb:0f:e0:8a: 3b:1a:34:08:33:5b:97:19:c9:c7:1b:0d:ea:44:df:ae:d9:09: 62:64:4c:fa:b4:2c:7d:4a:02:6f:31:f0:dd:26:67:3d:59:88: 63:5c:8c:64:5d:9e:1a:fe:a6:ba:41:85:6a:d8:31:44:08:e0: e7:0e:4e:e0:2a:77:ad:78:0f:8f:ae:a6:19:22:57:d9:18:e2: 6f:a2:3e:d4:4f:7e:b5:80:aa:b2:93:86:4f:a7:f5:ec:19:53: b9:1a:58:05 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5 NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI1MDYxMDEw NDg0NVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQTUzNTM1RjA3NUYzMjMx N0Q4QUQwMThGQkNGNjVEQTdCNTQ2NUY0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMYy2gj64AYxcy/RXhdcaS9mPQP6zSvqR5aoWR79dZE1sE2Dki06 re/1R8iqAN+EnUjhmWaOVce+iSFC9zWoe+Kr3j8kJD7y8hFC0euheGI24XA/1pQo 4AR85Jlks5nfYGRE9gWCw5eq9zmZmisqVP3UAppw/Nvu1BsbagbbkqfAAjS+k6kF aPmWq3WxPI6W7R7FlH5JIgSwENu+JxhlboOb0kitqQu04tp0om2wwpbtsLhzg4yP GziKvKJSCuK3J7V5xP9f4kt8GeQOwBuYpXetoFJg327VpE5XgSwZvLlUZC0tCSTn MVrE8KEiX6zm8fjhEaZRthcuQr5mum4WgrECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSlNTXwdfMjF9itAY+89l2ntUZfSTAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ 0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDgvcFRVMThIWHpJeGZZclFHUHZQWmRwN1ZHWDBrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAttkZDANBgkqhkiG9w0BAQsFAAOCAQEAEquqUNPBwSwEorhR2dEKbUGPfndM 0Hk1u7sYNG/3UtrHhB8MSJsDo5xZA6mkBsNozj23clnbAgS+rvATODv1n697ewIV RKGzZXrriXSz1vv/typNMAu5m0NXr1+P50PMndaPDl/MsiCrIo2ngz9peyZZfZVs KYHbn18oO5PhUNgfFnaQynTL5IEXEZi6gCAG6p9Cb74yBeNvYUP1qfnLD+CKOxo0 CDNblxnJxxsN6kTfrtkJYmRM+rQsfUoCbzHw3SZnPVmIY1yMZF2eGv6mukGFatgx RAjg5w5O4Cp3rXgPj66mGSJX2Rjib6I+1E9+tYCqspOGT6f17BlTuRpYBQ== -----END CERTIFICATE-----Generated at Sat Oct 25 12:41:42 2025 by rpki-client