$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/d0X00Uj050OJh7qtS97gjpttywY.roa File: d0X00Uj050OJh7qtS97gjpttywY.roa (raw, json) Hash identifier: feoB7de/3DEi/RkcZ0s41ooaWlo8aCQiDRqVshMAzJk= Subject key identifier: 77:45:F4:D1:48:F4:E7:43:89:87:BA:AD:4B:DE:E0:8E:9B:6D:CB:06 Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 1E Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/d0X00Uj050OJh7qtS97gjpttywY.roa Signing time: Fri 12 Sep 2025 07:31:33 +0000 ROA not before: Fri 12 Sep 2025 07:31:33 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2907 IP address blocks: 157.1.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Sep 12 07:31:33 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=7745F4D148F4E7438987BAAD4BDEE08E9B6DCB06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:be:12:b5:4f:a7:6c:93:10:df:f9:73:d6: 75:3b:69:67:ca:71:f3:0b:9e:5a:43:cc:f3:ea:b5: 12:ef:69:7c:b3:3f:24:8f:a2:06:50:ae:8b:91:20: aa:4d:ea:0b:3a:e8:5e:37:d1:97:1f:a7:7f:be:93: 3e:f1:00:76:62:99:5c:09:e0:5a:58:c7:6d:46:41: e5:3e:f0:65:43:9e:2a:fd:ec:e1:29:f3:aa:45:e0: fa:0f:a7:c6:1e:1c:df:7f:b3:33:82:66:67:89:ab: 24:f9:c6:24:55:0d:20:9b:99:b6:70:97:cb:ae:3f: 65:c9:78:bf:e3:c3:c9:37:19:6e:11:46:ad:b4:5d: 1e:3f:03:46:3d:f7:98:33:4b:45:b2:20:d1:5a:3b: 34:2d:ef:54:95:23:3a:ef:94:41:e3:00:b4:a3:70: d0:89:44:58:bd:54:64:90:38:8e:10:d7:18:0f:03: 9d:a8:f1:95:49:35:f5:3a:65:86:95:55:1d:6d:28: da:ad:94:33:99:70:34:34:51:98:b7:a0:a4:8b:12: 1b:75:ac:f9:68:7f:ff:51:c2:b4:01:bb:3c:d9:8f: 53:f7:b0:56:f4:02:17:c4:f3:8d:37:fd:04:5f:5d: 40:50:8f:b5:9d:86:53:e5:8c:11:46:95:85:05:58: e6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:45:F4:D1:48:F4:E7:43:89:87:BA:AD:4B:DE:E0:8E:9B:6D:CB:06 X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/d0X00Uj050OJh7qtS97gjpttywY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.1.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:72:f6:b1:f2:e2:08:6c:57:10:ea:8f:35:c5:30:71:69:e3: e4:81:be:ba:eb:42:7c:91:22:92:9f:0d:06:41:a9:99:03:c0: ec:15:ea:fb:ee:47:39:ef:11:dd:4c:44:31:40:49:11:75:68: b8:71:41:65:5e:ce:69:62:9a:17:3d:06:9f:90:e9:bc:81:e3: a0:5e:98:fe:15:12:49:13:b4:e0:c2:ff:1e:4a:81:4d:f0:7f: 51:b8:45:05:64:b4:8a:47:44:f1:d2:38:31:56:2c:fb:06:59: 17:3b:c6:25:b1:16:4f:f5:18:dc:2b:0f:7f:32:31:04:c0:5c: 35:5d:53:59:52:a0:a0:1b:cd:30:97:14:c0:87:40:36:16:64: ac:49:8d:e2:5c:4a:1c:ce:15:2d:ee:8b:87:b4:da:30:de:d7: 5d:57:63:83:34:55:fb:c8:6c:64:7a:da:78:e0:30:08:c4:02: 77:de:74:c7:42:9c:ed:c8:1a:d3:81:cc:20:b3:42:3e:03:56: 1f:32:21:95:af:49:bb:d3:78:3a:07:0b:68:d1:65:17:d5:43: 42:e6:37:94:8d:be:a5:62:08:54:bc:1f:87:ed:00:d1:4f:2f: d7:f7:76:aa:aa:7a:b7:f7:75:36:c1:80:ff:b4:11:49:4f:76: 15:16:aa:ec -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI1MDkxMjA3 MzEzM1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNzc0NUY0RDE0OEY0RTc0 Mzg5ODdCQUFENEJERUUwOEU5QjZEQ0IwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALXFvhK1T6dskxDf+XPWdTtpZ8px8wueWkPM8+q1Eu9pfLM/JI+i BlCui5Egqk3qCzroXjfRlx+nf76TPvEAdmKZXAngWljHbUZB5T7wZUOeKv3s4Snz qkXg+g+nxh4c33+zM4JmZ4mrJPnGJFUNIJuZtnCXy64/Zcl4v+PDyTcZbhFGrbRd Hj8DRj33mDNLRbIg0Vo7NC3vVJUjOu+UQeMAtKNw0IlEWL1UZJA4jhDXGA8Dnajx lUk19TplhpVVHW0o2q2UM5lwNDRRmLegpIsSG3Ws+Wh//1HCtAG7PNmPU/ewVvQC F8TzjTf9BF9dQFCPtZ2GU+WMEUaVhQVY5gECAwEAAaOCAiUwggIhMB0GA1UdDgQW BBR3RfTRSPTnQ4mHuq1L3uCOm23LBjAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni9kMFgwMFVqMDUwT0poN3F0Uzk3Z2pwdHR5d1kucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAnQEwDQYJKoZIhvcNAQELBQADggEBAA9y9rHy4ghsVxDqjzXFMHFp4+SB vrrrQnyRIpKfDQZBqZkDwOwV6vvuRznvEd1MRDFASRF1aLhxQWVezmlimhc9Bp+Q 6byB46BemP4VEkkTtODC/x5KgU3wf1G4RQVktIpHRPHSODFWLPsGWRc7xiWxFk/1 GNwrD38yMQTAXDVdU1lSoKAbzTCXFMCHQDYWZKxJjeJcShzOFS3ui4e02jDe111X Y4M0VfvIbGR62njgMAjEAnfedMdCnO3IGtOBzCCzQj4DVh8yIZWvSbvTeDoHC2jR ZRfVQ0LmN5SNvqViCFS8H4ftANFPL9f3dqqqerf3dTbBgP+0EUlPdhUWquw= -----END CERTIFICATE-----Generated at Tue Oct 21 06:51:30 2025 by rpki-client