$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/CrlCO-uw4FoeaP5cLPXLWSSpHSc.roa File: CrlCO-uw4FoeaP5cLPXLWSSpHSc.roa (raw, json) Hash identifier: wu8n/ajqs9VKV4h7Mmo8q9SbzfR52EBXAMrQmZyh3XU= Subject key identifier: 0A:B9:42:3B:EB:B0:E0:5A:1E:68:FE:5C:2C:F5:CB:59:24:A9:1D:27 Certificate issuer: /CN=B7187C4D4BDDD435728B412888E0655334208E0B Certificate serial: 5C Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/CrlCO-uw4FoeaP5cLPXLWSSpHSc.roa Signing time: Tue 01 Jul 2025 01:35:59 +0000 ROA not before: Tue 01 Jul 2025 01:35:59 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 17707 IP address blocks: 202.5.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B Validity Not Before: Jul 1 01:35:59 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=0AB9423BEBB0E05A1E68FE5C2CF5CB5924A91D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3e:b9:86:0f:de:fe:fa:1a:16:03:98:c6:5d: 84:88:1a:8d:30:5e:c9:a3:2c:a2:bb:42:32:c6:1e: 05:07:f6:7a:be:d8:11:98:03:e4:dc:97:3f:ea:99: 79:51:17:4e:6f:9c:73:0a:1f:ef:63:d8:01:23:91: 70:37:43:96:f1:5f:36:2e:93:b6:ec:a5:39:3b:8d: c9:64:17:64:c3:34:d1:b4:c9:a9:1e:45:0f:88:55: b6:ae:c1:5a:87:26:3a:89:92:38:56:93:9e:7d:31: 2d:a5:30:ca:18:dd:dc:80:74:1b:98:2b:e7:af:42: 95:fb:2a:1c:49:a2:a4:c5:e0:bb:7b:20:bd:1b:58: ec:a8:88:59:31:12:12:87:92:d2:88:b0:a6:9d:4b: b4:8e:da:c8:60:1c:78:8e:fd:de:9d:4e:fb:13:57: 4e:cf:07:15:41:0e:27:fb:3e:45:81:ce:e7:2d:b3: 1e:43:21:55:72:48:d8:70:0d:cf:ee:f9:f6:e8:da: 70:a1:2d:a2:34:ae:1a:79:38:24:dc:8d:39:04:bc: 19:d7:bf:bf:3e:07:7d:93:c6:5c:96:5f:3e:38:79: c2:59:f9:d3:4e:b9:1b:ea:c2:fb:e9:79:78:2a:1e: 83:8f:f7:72:87:21:d3:5c:98:f6:39:75:fa:71:5e: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:42:3B:EB:B0:E0:5A:1E:68:FE:5C:2C:F5:CB:59:24:A9:1D:27 X509v3 Authority Key Identifier: keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/CrlCO-uw4FoeaP5cLPXLWSSpHSc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.5.64.0/20 Signature Algorithm: sha256WithRSAEncryption 13:78:82:0a:fa:75:61:87:b2:ee:2a:25:2c:c8:42:66:b1:3b: 79:87:4e:6e:22:11:29:cd:c9:0e:2f:bd:6f:80:95:31:d7:ec: 90:f0:47:35:fe:69:aa:85:45:a4:c1:1d:d1:ae:82:08:41:24: 0a:5b:c9:b4:46:4a:89:be:23:60:44:3d:ba:1b:52:e1:97:a4: 62:a5:9c:dc:53:6f:8a:3f:ba:1a:56:c0:0d:c4:cc:f6:a4:41: 02:b0:a6:96:d3:76:37:bb:48:89:4b:f1:7e:83:e3:57:72:c2: a4:35:f8:13:41:6e:8d:2e:47:da:b9:5c:76:21:0a:a5:82:b4: 5f:9a:32:2e:64:4b:a9:18:87:b3:92:d6:39:20:43:7d:49:b5: 62:af:f2:81:02:e9:5c:13:21:9a:dc:1a:b8:03:10:ee:b0:e8: bf:3c:39:42:60:1f:cb:d5:1a:f3:d1:fa:d2:38:e7:42:71:60: cb:51:78:9c:23:0e:28:91:fc:1d:84:f0:63:28:9c:6d:c7:96: 08:6e:7c:49:1f:36:7a:f4:58:0c:9a:c0:1c:49:6e:72:78:5c: d9:54:84:6d:ab:5d:3d:86:0c:ff:32:d4:90:63:db:d8:9a:99: b7:1a:5c:66:07:8c:0a:4a:01:2a:a9:45:03:9c:fe:cc:1a:80: 33:84:dd:b4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNzE4 N0M0RDRCRERENDM1NzI4QjQxMjg4OEUwNjU1MzM0MjA4RTBCMB4XDTI1MDcwMTAx MzU1OVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMEFCOTQyM0JFQkIwRTA1 QTFFNjhGRTVDMkNGNUNCNTkyNEE5MUQyNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOY+uYYP3v76GhYDmMZdhIgajTBeyaMsortCMsYeBQf2er7YEZgD 5NyXP+qZeVEXTm+ccwof72PYASORcDdDlvFfNi6TtuylOTuNyWQXZMM00bTJqR5F D4hVtq7BWocmOomSOFaTnn0xLaUwyhjd3IB0G5gr569ClfsqHEmipMXgu3sgvRtY 7KiIWTESEoeS0oiwpp1LtI7ayGAceI793p1O+xNXTs8HFUEOJ/s+RYHO5y2zHkMh VXJI2HANz+759ujacKEtojSuGnk4JNyNOQS8Gde/vz4HfZPGXJZfPjh5wln50065 G+rC++l5eCoeg4/3coch01yY9jl1+nFeP8ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQKuUI767DgWh5o/lws9ctZJKkdJzAfBgNVHSMEGDAWgBS3GHxNS93UNXKLQSiI 4GVTNCCOCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk3L3R4aDhUVXZkMURWeWkwRW9pT0JsVXpRZ2pncy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3R4aDhUVXZkMURWeWkwRW9pT0JsVXpR Z2pncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTcvQ3JsQ08tdXc0Rm9lYVA1Y0xQWExXU1NwSFNjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMoFQDANBgkqhkiG9w0BAQsFAAOCAQEAE3iCCvp1YYey7iolLMhCZrE7eYdO biIRKc3JDi+9b4CVMdfskPBHNf5pqoVFpMEd0a6CCEEkClvJtEZKib4jYEQ9uhtS 4ZekYqWc3FNvij+6GlbADcTM9qRBArCmltN2N7tIiUvxfoPjV3LCpDX4E0FujS5H 2rlcdiEKpYK0X5oyLmRLqRiHs5LWOSBDfUm1Yq/ygQLpXBMhmtwauAMQ7rDovzw5 QmAfy9Ua89H60jjnQnFgy1F4nCMOKJH8HYTwYyicbceWCG58SR82evRYDJrAHElu cnhc2VSEbatdPYYM/zLUkGPb2JqZtxpcZgeMCkoBKqlFA5z+zBqAM4TdtA== -----END CERTIFICATE-----Generated at Wed Nov 5 21:36:34 2025 by rpki-client