$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/CVENU7cJMcvznR3yOA2Wqc2WjJw.roa File: CVENU7cJMcvznR3yOA2Wqc2WjJw.roa (raw, json) Hash identifier: 3JVu6F+GYDJXJ3L0N9274BnHZqqme/QTjIGM2EYnijc= Subject key identifier: 09:51:0D:53:B7:09:31:CB:F3:9D:1D:F2:38:0D:96:A9:CD:96:8C:9C Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 1F Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/CVENU7cJMcvznR3yOA2Wqc2WjJw.roa Signing time: Fri 12 Sep 2025 07:31:33 +0000 ROA not before: Fri 12 Sep 2025 07:31:33 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2907 IP address blocks: 192.153.95.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Sep 12 07:31:33 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=09510D53B70931CBF39D1DF2380D96A9CD968C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:72:b6:4e:d9:29:87:d8:12:62:f4:b4:6e: e6:88:5d:4a:04:80:1c:c4:86:b8:f2:76:bf:4b:2a: ff:ee:5c:0e:56:97:0c:a8:f8:37:ec:64:11:d5:a6: ea:cf:15:3e:73:f6:e4:14:1b:bf:25:b8:41:28:49: 7b:27:98:b1:e0:24:da:9c:04:e3:d1:23:6d:03:d8: 0c:7b:73:fa:78:5b:58:8d:c9:7f:a4:e7:dc:6b:00: 72:b8:c0:5d:13:6d:28:68:f4:02:54:07:9c:d9:8e: e4:a3:69:b7:f5:35:1e:3e:6a:cf:53:90:c0:08:47: b6:d7:11:d4:a7:4b:84:43:18:cc:7f:77:a5:e2:78: 8b:4c:60:9f:15:62:7b:d9:f5:51:2e:52:cc:10:b3: 2e:10:a5:ca:52:97:ac:bf:33:c8:fd:d1:43:b7:30: 04:11:e1:d0:64:63:2b:81:e5:25:36:7b:fd:69:5f: 79:c1:93:d1:5c:7b:aa:a1:62:ec:82:4b:3b:48:a4: 36:17:65:91:59:22:43:c0:09:10:cd:b5:e5:c0:fb: 79:f0:00:64:9f:4e:d0:44:de:cf:3b:36:18:e1:ce: 9a:fb:7c:d9:c5:ef:7e:4a:72:6d:87:94:ec:0b:e6: 50:9a:ef:c0:74:97:66:c4:d2:68:3b:46:bc:e8:ff: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:51:0D:53:B7:09:31:CB:F3:9D:1D:F2:38:0D:96:A9:CD:96:8C:9C X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/CVENU7cJMcvznR3yOA2Wqc2WjJw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.153.95.0/24 Signature Algorithm: sha256WithRSAEncryption 79:cc:f0:4b:43:94:e4:9f:df:e1:d9:49:25:47:78:f2:7b:2e: 0e:72:4d:bd:96:e1:6c:7b:14:a0:31:0c:0f:3e:92:23:43:47: 74:e4:06:26:02:18:54:f6:fa:7a:3f:fb:f7:73:0f:c3:c5:97: 1f:aa:6f:99:46:c8:8b:25:3d:1e:1e:86:d8:26:f1:ce:a8:0a: 7c:af:d3:21:01:58:d8:8b:4d:82:cf:57:e8:42:b5:e7:00:a2: 60:c2:72:a2:6f:9e:3c:6e:85:2b:43:81:e3:5d:e7:00:2a:fc: 64:7b:83:89:8f:33:77:d5:80:77:4f:a6:aa:d4:35:fd:b1:b8: df:5a:7f:10:45:bb:ac:2f:aa:eb:f4:d9:fa:dc:a4:fd:10:0d: 36:10:9e:93:a3:bd:3e:d9:0c:6f:48:ca:6f:b4:73:81:08:a5: a5:c1:63:02:87:e5:cc:35:08:aa:8c:2d:73:6e:b9:b7:47:70: 57:bc:77:2b:b3:bd:cf:d4:f8:29:a8:ae:31:fc:8d:f4:94:fc: 5d:05:72:09:63:a3:a4:03:c9:47:87:00:b1:8d:62:85:1f:9a: de:bb:cc:91:83:aa:e7:99:32:7c:25:86:82:b8:34:ac:f4:e4: 89:f9:56:4a:22:5c:b6:51:2a:07:8a:95:28:70:99:fb:40:01: 75:5a:5c:e2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI1MDkxMjA3 MzEzM1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMDk1MTBENTNCNzA5MzFD QkYzOUQxREYyMzgwRDk2QTlDRDk2OEM5QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMIYcrZO2SmH2BJi9LRu5ohdSgSAHMSGuPJ2v0sq/+5cDlaXDKj4 N+xkEdWm6s8VPnP25BQbvyW4QShJeyeYseAk2pwE49EjbQPYDHtz+nhbWI3Jf6Tn 3GsAcrjAXRNtKGj0AlQHnNmO5KNpt/U1Hj5qz1OQwAhHttcR1KdLhEMYzH93peJ4 i0xgnxVie9n1US5SzBCzLhClylKXrL8zyP3RQ7cwBBHh0GRjK4HlJTZ7/WlfecGT 0Vx7qqFi7IJLO0ikNhdlkVkiQ8AJEM215cD7efAAZJ9O0ETezzs2GOHOmvt82cXv fkpybYeU7AvmUJrvwHSXZsTSaDtGvOj/HicCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQJUQ1Ttwkxy/OdHfI4DZapzZaMnDAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni9DVkVOVTdjSk1jdnpuUjN5T0EyV3FjMldqSncucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwJlfMA0GCSqGSIb3DQEBCwUAA4IBAQB5zPBLQ5Tkn9/h2UklR3jyey4O ck29luFsexSgMQwPPpIjQ0d05AYmAhhU9vp6P/v3cw/DxZcfqm+ZRsiLJT0eHobY JvHOqAp8r9MhAVjYi02Cz1foQrXnAKJgwnKib548boUrQ4HjXecAKvxke4OJjzN3 1YB3T6aq1DX9sbjfWn8QRbusL6rr9Nn63KT9EA02EJ6To70+2QxvSMpvtHOBCKWl wWMCh+XMNQiqjC1zbrm3R3BXvHcrs73P1PgpqK4x/I30lPxdBXIJY6OkA8lHhwCx jWKFH5reu8yRg6rnmTJ8JYaCuDSs9OSJ+VZKIly2USoHipUocJn7QAF1Wlzi -----END CERTIFICATE-----Generated at Tue Oct 21 06:43:52 2025 by rpki-client