$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20280/cunjuM22mgUQ1jmQFpWBdR1HgdA.roa File: cunjuM22mgUQ1jmQFpWBdR1HgdA.roa (raw, json) Hash identifier: jmKBfovyYLttPjNLh3W9+a+QO+Vb8m0/Y2wsbS7jPKw= Subject key identifier: 72:E9:E3:B8:CD:B6:9A:05:10:D6:39:90:16:95:81:75:1D:47:81:D0 Certificate issuer: /CN=2480B90E3CDB301FFE16C1A7112B0279B54EF0D1 Certificate serial: 02 Authority key identifier: 24:80:B9:0E:3C:DB:30:1F:FE:16:C1:A7:11:2B:02:79:B5:4E:F0:D1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JIC5DjzbMB_-FsGnESsCebVO8NE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/cunjuM22mgUQ1jmQFpWBdR1HgdA.roa Signing time: Wed 15 Oct 2025 07:33:17 +0000 ROA not before: Wed 15 Oct 2025 07:33:17 +0000 ROA not after: Thu 15 Oct 2026 07:20:47 +0000 asID: 63806 IP address blocks: 43.228.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/JIC5DjzbMB_-FsGnESsCebVO8NE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/JIC5DjzbMB_-FsGnESsCebVO8NE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JIC5DjzbMB_-FsGnESsCebVO8NE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 21:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2480B90E3CDB301FFE16C1A7112B0279B54EF0D1 Validity Not Before: Oct 15 07:33:17 2025 GMT Not After : Oct 15 07:20:47 2026 GMT Subject: CN=72E9E3B8CDB69A0510D63990169581751D4781D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:33:9f:3c:d0:69:25:07:60:bf:bc:a3:63: 69:2b:25:55:c5:d9:ba:88:ca:ea:b5:21:ea:30:3d: 53:da:bc:1c:07:0c:47:a9:e6:ca:4d:eb:a7:50:41: 42:57:e6:2e:90:06:2e:98:b3:59:82:bc:5e:fb:dc: d3:d2:6d:e3:2b:e6:eb:20:bf:b7:1f:d3:f8:be:c9: 30:74:f4:64:d8:e4:69:74:a2:a3:4a:06:01:7f:6c: f3:17:47:a2:98:f9:55:2c:89:b6:2f:c8:a6:d8:86: cb:32:cd:30:63:eb:07:0e:55:d0:da:21:e2:27:f7: b0:34:82:c7:02:ce:85:b4:c6:b9:bd:23:5a:b4:bd: 89:11:aa:5c:2c:1b:74:35:5f:7c:f4:b2:9e:1b:59: 2a:a1:2e:75:99:fd:41:ec:b5:d1:1f:63:ae:80:f3: 9d:45:ee:05:51:fe:a5:2c:06:e9:4d:30:d0:87:83: 4f:c1:94:a4:81:12:fc:0f:4c:4d:a1:c3:7e:18:18: 4e:bf:9b:85:9b:c6:f5:68:bc:be:9b:dd:30:cd:28: af:c0:0e:45:9b:dd:ae:68:55:7e:18:a2:f8:d8:87: 6d:f2:3d:5a:a2:7f:00:42:89:af:14:c1:a9:33:32: 18:f1:27:43:2c:9a:06:b2:65:8b:e3:0a:e9:8d:b1: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E9:E3:B8:CD:B6:9A:05:10:D6:39:90:16:95:81:75:1D:47:81:D0 X509v3 Authority Key Identifier: keyid:24:80:B9:0E:3C:DB:30:1F:FE:16:C1:A7:11:2B:02:79:B5:4E:F0:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/JIC5DjzbMB_-FsGnESsCebVO8NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JIC5DjzbMB_-FsGnESsCebVO8NE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/cunjuM22mgUQ1jmQFpWBdR1HgdA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.174.0/24 Signature Algorithm: sha256WithRSAEncryption 01:ed:60:f7:1d:e5:93:c7:5a:c1:28:65:c3:ab:a2:ba:1c:f9: 7e:c5:cf:bf:e2:7f:c2:74:3a:9e:ef:95:df:93:52:0c:9d:92: 5b:54:c2:84:98:e1:01:94:ac:fc:e4:f7:c7:0f:4b:23:fe:bf: d9:c2:f9:52:b3:64:90:f6:31:42:75:44:ce:95:95:1c:a6:a2: 86:73:dc:16:e1:49:64:0e:47:7c:ee:0c:8d:9c:b0:86:fc:b1: d5:94:11:d0:18:20:40:f1:46:b1:0b:00:f4:84:be:5b:dd:7f: dc:5a:4e:44:db:e0:4c:63:80:0c:e7:d3:a4:b6:6b:53:a6:1b: 24:10:4c:fc:bc:3f:12:18:de:8a:6b:49:a6:8e:d1:c7:3e:ae: 0e:e5:e4:3a:bc:bc:00:c5:e2:ac:31:63:9f:b7:f2:e2:fc:1f: 09:75:0b:4b:3f:b1:11:ba:fc:a2:99:5e:48:78:c9:be:e4:eb: a6:34:f8:06:c2:05:0a:95:db:ab:54:80:a0:28:a6:09:15:09: 2f:ab:77:3d:39:cd:3d:e3:ac:9a:83:d3:11:e6:87:57:00:05: 48:e9:92:01:10:d4:4e:e1:c2:7d:78:56:7c:82:33:0d:c3:49: 4d:a8:37:46:ac:78:33:03:85:d9:f5:6c:ba:30:1c:b0:c0:d1: 3e:de:8a:ce -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNDgw QjkwRTNDREIzMDFGRkUxNkMxQTcxMTJCMDI3OUI1NEVGMEQxMB4XDTI1MTAxNTA3 MzMxN1oXDTI2MTAxNTA3MjA0N1owMzExMC8GA1UEAxMoNzJFOUUzQjhDREI2OUEw NTEwRDYzOTkwMTY5NTgxNzUxRDQ3ODFEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL9FM5880GklB2C/vKNjaSslVcXZuojK6rUh6jA9U9q8HAcMR6nm yk3rp1BBQlfmLpAGLpizWYK8Xvvc09Jt4yvm6yC/tx/T+L7JMHT0ZNjkaXSio0oG AX9s8xdHopj5VSyJti/IptiGyzLNMGPrBw5V0Noh4if3sDSCxwLOhbTGub0jWrS9 iRGqXCwbdDVffPSynhtZKqEudZn9Qey10R9jroDznUXuBVH+pSwG6U0w0IeDT8GU pIES/A9MTaHDfhgYTr+bhZvG9Wi8vpvdMM0or8AORZvdrmhVfhii+NiHbfI9WqJ/ AEKJrxTBqTMyGPEnQyyaBrJli+MK6Y2xvUUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBRy6eO4zbaaBRDWOZAWlYF1HUeB0DAfBgNVHSMEGDAWgBQkgLkOPNswH/4WwacR KwJ5tU7w0TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyODAvSklDNURqemJNQl8tRnNHbkVTc0NlYlZPOE5FLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSklDNURqemJNQl8tRnNHbkVTc0Nl YlZPOE5FLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjgwL2N1bmp1TTIybWdVUTFqbVFGcFdCZFIxSGdkQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAAr5K4wDQYJKoZIhvcNAQELBQADggEBAAHtYPcd5ZPHWsEoZcOroroc +X7Fz7/if8J0Op7vld+TUgydkltUwoSY4QGUrPzk98cPSyP+v9nC+VKzZJD2MUJ1 RM6VlRymooZz3BbhSWQOR3zuDI2csIb8sdWUEdAYIEDxRrELAPSEvlvdf9xaTkTb 4ExjgAzn06S2a1OmGyQQTPy8PxIY3oprSaaO0cc+rg7l5Dq8vADF4qwxY5+38uL8 Hwl1C0s/sRG6/KKZXkh4yb7k66Y0+AbCBQqV26tUgKAopgkVCS+rdz05zT3jrJqD 0xHmh1cABUjpkgEQ1E7hwn14VnyCMw3DSU2oN0aseDMDhdn1bLowHLDA0T7eis4= -----END CERTIFICATE-----Generated at Tue Oct 21 23:20:02 2025 by rpki-client