$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/xq4rA1BbZQEW4oqDuavEApJmDdk.roa File: xq4rA1BbZQEW4oqDuavEApJmDdk.roa (raw, json) Hash identifier: BtKoEHrhagk8XQgc89KU7VoejLse2aLcLvKtXVm6wtI= Subject key identifier: C6:AE:2B:03:50:5B:65:01:16:E2:8A:83:B9:AB:C4:02:92:66:0D:D9 Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 22 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/xq4rA1BbZQEW4oqDuavEApJmDdk.roa Signing time: Fri 12 Sep 2025 07:31:35 +0000 ROA not before: Fri 12 Sep 2025 07:31:35 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2907 IP address blocks: 192.58.9.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Sep 12 07:31:35 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=C6AE2B03505B650116E28A83B9ABC40292660DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:7b:0b:02:8b:b7:8b:68:75:8f:3e:01:7f: 25:a0:c8:b8:83:5e:77:30:1f:9c:0f:88:35:1e:d2: 3c:2e:8c:ff:5a:d3:53:d0:fb:a0:58:bd:6a:a7:d5: 5f:48:e3:44:c8:bb:69:82:6d:bd:5c:88:46:5c:a1: 0c:b4:db:85:b4:60:74:ea:1e:51:86:54:e0:56:dd: e3:c7:b4:cf:c8:89:1f:d7:a2:cb:2e:51:2e:17:80: b2:99:1b:b8:01:5c:55:a4:62:a6:af:a2:ca:bb:1e: 03:7d:4f:78:55:78:af:dc:a7:04:5c:d3:83:81:f5: 83:df:42:1e:01:89:75:9f:9b:8d:de:16:2a:94:26: f3:a0:38:06:44:e8:30:ee:d6:17:91:77:05:cc:76: b4:1f:cd:d2:42:bc:a6:d8:19:01:df:e2:d3:c8:5d: 3b:58:0f:a2:7a:96:ed:fe:ec:04:83:d8:9f:cd:7b: 90:42:4e:11:24:a2:e1:45:3c:48:20:9f:0b:b5:e7: 0f:16:c8:bb:a7:be:c5:79:0d:e0:a5:55:d2:0e:20: 81:7e:50:98:94:8e:ed:68:ac:e3:67:e2:0f:3a:7b: da:53:40:ce:30:11:c9:2c:73:1e:ef:ec:16:c7:df: 3b:c7:b7:d1:30:e7:2f:fb:27:4c:f8:27:f9:be:90: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AE:2B:03:50:5B:65:01:16:E2:8A:83:B9:AB:C4:02:92:66:0D:D9 X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/xq4rA1BbZQEW4oqDuavEApJmDdk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.58.9.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:f3:5d:36:c8:e9:8c:f4:54:fc:42:8f:8e:1b:3b:f9:1b:38: f3:6c:04:2d:2f:e0:4d:77:ae:79:0b:0e:ce:b4:e4:24:41:7a: 0d:ef:0c:75:65:60:82:ca:9c:63:57:4b:cd:e6:85:b1:62:e3: 29:dd:d1:e5:f3:df:bb:3f:4b:2c:b1:18:02:0e:f8:7a:30:60: cb:81:53:14:dd:fb:81:79:df:f3:19:7c:ad:3a:21:46:33:55: 0b:99:82:be:ec:4d:2b:24:ad:54:33:bc:72:55:d2:0f:57:20: 30:97:ed:37:a4:a1:de:29:9f:a2:d3:2c:be:48:d3:9a:1d:5d: 15:95:fd:a4:f6:b4:08:f2:b1:f3:1a:b1:57:cc:2d:f0:53:dc: f2:c0:f1:d6:e4:62:9f:f8:07:d2:14:d5:29:19:ad:82:dc:f3: a7:63:40:ac:6d:b1:29:c3:fc:92:ed:2e:32:fb:a8:f2:38:77: 44:f5:10:64:9b:d1:29:f8:96:51:d4:02:b6:39:77:de:c8:ac: ae:34:c9:fd:34:76:4f:42:8d:ae:6f:95:e0:71:eb:df:be:b3: 5c:ff:04:f6:da:97:08:b2:25:a8:ce:a3:93:06:c2:69:fa:91: 8a:8f:21:18:b2:88:f0:18:04:0c:82:28:1f:0f:50:0a:f6:10: 5b:44:66:c5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI1MDkxMjA3 MzEzNVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzZBRTJCMDM1MDVCNjUw MTE2RTI4QTgzQjlBQkM0MDI5MjY2MEREOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKlSewsCi7eLaHWPPgF/JaDIuINedzAfnA+INR7SPC6M/1rTU9D7 oFi9aqfVX0jjRMi7aYJtvVyIRlyhDLTbhbRgdOoeUYZU4Fbd48e0z8iJH9eiyy5R LheAspkbuAFcVaRipq+iyrseA31PeFV4r9ynBFzTg4H1g99CHgGJdZ+bjd4WKpQm 86A4BkToMO7WF5F3Bcx2tB/N0kK8ptgZAd/i08hdO1gPonqW7f7sBIPYn817kEJO ESSi4UU8SCCfC7XnDxbIu6e+xXkN4KVV0g4ggX5QmJSO7Wis42fiDzp72lNAzjAR ySxzHu/sFsffO8e30TDnL/snTPgn+b6QaCkCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTGrisDUFtlARbiioO5q8QCkmYN2TAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni94cTRyQTFCYlpRRVc0b3FEdWF2RUFwSm1EZGsucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwDoJMA0GCSqGSIb3DQEBCwUAA4IBAQAr8102yOmM9FT8Qo+OGzv5Gzjz bAQtL+BNd655Cw7OtOQkQXoN7wx1ZWCCypxjV0vN5oWxYuMp3dHl89+7P0sssRgC Dvh6MGDLgVMU3fuBed/zGXytOiFGM1ULmYK+7E0rJK1UM7xyVdIPVyAwl+03pKHe KZ+i0yy+SNOaHV0Vlf2k9rQI8rHzGrFXzC3wU9zywPHW5GKf+AfSFNUpGa2C3POn Y0CsbbEpw/yS7S4y+6jyOHdE9RBkm9Ep+JZR1AK2OXfeyKyuNMn9NHZPQo2ub5Xg cevfvrNc/wT22pcIsiWozqOTBsJp+pGKjyEYsojwGAQMgigfD1AK9hBbRGbF -----END CERTIFICATE-----Generated at Tue Oct 21 06:43:55 2025 by rpki-client