$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/1BLdTQm0ZTBbfthCWstQx6BSMDI.roa File: 1BLdTQm0ZTBbfthCWstQx6BSMDI.roa (raw, json) Hash identifier: q0vvYR7+qN9PDLErgFHN0ZUOBfTBj9lgFknEv/tTzYo= Subject key identifier: D4:12:DD:4D:09:B4:65:30:5B:7E:D8:42:5A:CB:50:C7:A0:52:30:32 Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 28 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/1BLdTQm0ZTBbfthCWstQx6BSMDI.roa Signing time: Fri 12 Sep 2025 07:31:38 +0000 ROA not before: Fri 12 Sep 2025 07:31:38 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 24287 IP address blocks: 192.50.12.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Sep 12 07:31:38 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=D412DD4D09B465305B7ED8425ACB50C7A0523032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:43:dd:e1:da:83:e4:c9:f9:5d:7a:ed:46:34: 79:db:f4:35:9c:df:b6:ca:d7:8d:b8:92:67:df:64: 4b:35:00:74:37:36:4b:60:48:88:ba:2a:06:32:5d: 11:73:27:57:3e:af:35:a3:3c:eb:3c:5c:2f:65:18: ae:70:9a:90:16:b5:14:1b:5e:98:0f:9e:b8:44:dc: 60:c7:74:d4:19:44:cf:ef:2d:03:4c:63:a2:98:fb: df:bd:3f:53:70:4c:d5:53:22:ea:12:ba:fe:7c:de: e6:ef:d3:0a:36:6b:30:ff:f2:56:67:10:6b:56:b9: a0:db:c5:43:ba:13:82:e8:2a:33:65:50:bc:24:27: b1:dd:f9:41:a2:e1:1d:f5:b6:21:c8:8d:ef:74:8d: 6e:16:c6:ea:9d:72:59:bc:ce:52:e1:35:d4:29:03: fc:07:fd:af:60:09:47:32:a5:ad:d0:18:bf:bb:ee: 9e:ed:83:6b:6b:6a:07:41:de:6a:18:f4:2e:92:82: eb:0f:ab:8f:33:eb:d1:71:e1:8b:5d:29:ca:38:e0: 32:14:3b:b1:70:52:7c:5f:ce:1c:62:70:7b:3a:c4: ce:98:ab:7f:5b:6f:b1:16:af:0c:11:38:f6:2d:f1: 5b:d7:e0:5f:ea:10:7e:38:c3:1a:48:3a:74:d9:0b: 75:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:12:DD:4D:09:B4:65:30:5B:7E:D8:42:5A:CB:50:C7:A0:52:30:32 X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/1BLdTQm0ZTBbfthCWstQx6BSMDI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.50.12.0/24 Signature Algorithm: sha256WithRSAEncryption b3:82:c6:62:34:52:4e:51:02:19:33:00:8f:11:54:5e:e5:9e: d8:4e:d6:d6:ba:ca:89:6a:9d:c7:9a:d2:31:56:bd:81:3c:6f: b3:e8:e2:fa:da:e9:af:da:8e:51:8d:3c:9b:7c:06:4e:93:16: 7b:11:ee:f2:06:8a:6a:cd:81:ae:7b:c8:e8:8d:1d:b7:f8:04: b0:d8:26:96:47:26:77:97:cd:62:cd:42:98:d2:f6:d6:fe:74: 75:b7:06:5c:62:2a:7f:de:90:25:70:b4:fe:a9:06:1d:f7:8f: 3b:62:48:f3:b1:c8:33:42:6e:11:d3:98:6c:ec:6d:ef:aa:7d: b7:54:6f:f6:6a:ef:8c:ed:fb:a8:80:a4:d4:d6:9d:84:39:b6: 46:b5:76:df:7f:2f:a8:e6:cd:44:6b:4b:94:5c:01:6e:31:72: 62:8c:36:07:29:91:48:81:95:17:65:e4:42:89:7a:f7:80:93: be:5f:ce:5e:d8:ac:1a:1e:1d:9b:e3:11:1a:d7:76:63:bf:ea: 24:51:96:fb:4b:c3:f5:88:be:a2:50:b3:40:11:ab:65:81:26: ee:0b:e0:1e:6b:f4:fa:50:2e:78:5b:f9:d1:ed:18:4b:63:b2: f0:bb:8e:3a:ac:fa:41:f0:9f:e4:eb:0b:e9:53:d5:26:94:e4: e7:f8:a6:82 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI1MDkxMjA3 MzEzOFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRDQxMkRENEQwOUI0NjUz MDVCN0VEODQyNUFDQjUwQzdBMDUyMzAzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO5D3eHag+TJ+V167UY0edv0NZzftsrXjbiSZ99kSzUAdDc2S2BI iLoqBjJdEXMnVz6vNaM86zxcL2UYrnCakBa1FBtemA+euETcYMd01BlEz+8tA0xj opj7370/U3BM1VMi6hK6/nze5u/TCjZrMP/yVmcQa1a5oNvFQ7oTgugqM2VQvCQn sd35QaLhHfW2IciN73SNbhbG6p1yWbzOUuE11CkD/Af9r2AJRzKlrdAYv7vunu2D a2tqB0Heahj0LpKC6w+rjzPr0XHhi10pyjjgMhQ7sXBSfF/OHGJwezrEzpirf1tv sRavDBE49i3xW9fgX+oQfjjDGkg6dNkLdYkCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTUEt1NCbRlMFt+2EJay1DHoFIwMjAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni8xQkxkVFFtMFpUQmJmdGhDV3N0UXg2QlNNREkucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwDIMMA0GCSqGSIb3DQEBCwUAA4IBAQCzgsZiNFJOUQIZMwCPEVRe5Z7Y TtbWusqJap3HmtIxVr2BPG+z6OL62umv2o5RjTybfAZOkxZ7Ee7yBopqzYGue8jo jR23+ASw2CaWRyZ3l81izUKY0vbW/nR1twZcYip/3pAlcLT+qQYd9487Ykjzscgz Qm4R05hs7G3vqn23VG/2au+M7fuogKTU1p2EObZGtXbffy+o5s1Ea0uUXAFuMXJi jDYHKZFIgZUXZeRCiXr3gJO+X85e2KwaHh2b4xEa13Zjv+okUZb7S8P1iL6iULNA EatlgSbuC+Aea/T6UC54W/nR7RhLY7Lwu446rPpB8J/k6wvpU9UmlOTn+KaC -----END CERTIFICATE-----Generated at Tue Oct 21 08:04:32 2025 by rpki-client