$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/zOwG7AHYnNmr8ApcJudLGvaTQsI.roa File: zOwG7AHYnNmr8ApcJudLGvaTQsI.roa (raw, json) Hash identifier: hnsc0P90k5hd+RO5G7xgO0F8WtMHr2oqsFwtVBe+A9U= Subject key identifier: CC:EC:06:EC:01:D8:9C:D9:AB:F0:0A:5C:26:E7:4B:1A:F6:93:42:C2 Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 20 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/zOwG7AHYnNmr8ApcJudLGvaTQsI.roa Signing time: Fri 12 Sep 2025 07:31:34 +0000 ROA not before: Fri 12 Sep 2025 07:31:34 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2907 IP address blocks: 192.153.96.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Sep 12 07:31:34 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=CCEC06EC01D89CD9ABF00A5C26E74B1AF69342C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c2:ce:61:58:9a:07:56:87:b3:28:3c:bc:46: 0a:5d:a3:8f:2a:49:51:4b:66:df:0d:7e:91:fc:20: 52:84:d6:df:4e:2d:17:cd:b8:bb:ed:c3:44:e8:06: 99:d6:e6:e3:fb:d4:07:d1:0d:3f:a6:d6:28:3f:78: b8:c8:69:81:ed:f5:d3:bc:2a:7e:4e:b2:c3:42:d3: ff:12:47:0e:cc:54:1f:83:b4:74:b5:fc:6a:61:32: a5:5c:35:d2:4b:bb:66:e5:8c:52:5d:61:41:ed:f0: 6c:da:32:e3:c8:10:8c:7c:90:3d:ae:79:11:85:24: a3:51:0a:f6:89:19:6a:ef:cb:d4:98:91:51:a7:66: f9:ac:4b:50:ec:11:82:f9:7c:a9:7c:0b:8b:cf:b8: e7:cb:6a:c6:86:de:46:ea:ad:6c:8f:8f:13:85:92: 39:3b:2b:1e:59:89:b5:c7:a6:1f:95:9e:82:d9:78: 86:79:d4:5e:0c:01:23:79:41:6f:1a:b2:cf:0f:05: d1:81:be:9c:d2:f6:ea:57:7f:ff:b4:d5:f6:12:34: 55:86:1e:52:ae:fa:61:ca:b5:88:1e:00:a1:d0:bb: 7f:26:ec:63:04:ed:bd:9d:3a:5e:77:ca:69:98:60: 18:2b:3d:16:07:9c:a8:22:3f:e1:86:0e:87:3c:5a: 33:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EC:06:EC:01:D8:9C:D9:AB:F0:0A:5C:26:E7:4B:1A:F6:93:42:C2 X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/zOwG7AHYnNmr8ApcJudLGvaTQsI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.153.96.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:f3:bb:08:79:f5:ec:e2:ac:ef:73:a4:cf:fc:ee:47:8c:03: 9e:69:e5:ab:6f:29:55:be:a7:4b:6f:96:c5:ee:7b:f8:16:f2: 9e:c1:27:e9:5e:60:10:0f:33:fc:d7:17:d7:21:59:e6:13:ed: b6:6e:da:ab:23:76:ab:97:f2:66:dd:6e:10:7d:ff:9f:3c:65: 78:5a:f3:e7:42:10:c4:66:ca:92:30:9a:cf:e2:4c:70:5d:be: 82:d0:e8:47:ba:5d:bf:1f:44:3e:5c:a5:73:6b:91:af:0d:5f: 39:1e:86:e1:ad:0e:0d:1a:a7:63:5d:d4:77:a9:1d:0c:a6:ec: b1:77:09:83:67:ab:6d:4c:72:da:98:13:97:ef:8b:28:ad:e7: d2:45:77:a9:83:4f:41:e4:50:1f:15:b5:63:d6:22:d1:a9:74: 2a:7f:f8:f7:2d:ef:3f:dc:bf:c9:59:96:21:52:ed:f1:c5:da: c6:47:2f:3b:a4:1c:70:1a:e5:25:db:34:31:92:96:2a:00:de: 89:dc:3f:3e:fd:da:c6:14:26:4c:df:8d:53:14:18:96:c6:cd: c2:c5:3c:b8:64:7f:5d:46:bb:ef:53:8d:63:1b:a1:c0:30:60: 45:3c:3a:8f:56:82:a4:09:43:2c:8c:ba:2f:93:f6:4b:06:a6: a7:96:5d:c0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI1MDkxMjA3 MzEzNFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0NFQzA2RUMwMUQ4OUNE OUFCRjAwQTVDMjZFNzRCMUFGNjkzNDJDMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANzCzmFYmgdWh7MoPLxGCl2jjypJUUtm3w1+kfwgUoTW304tF824 u+3DROgGmdbm4/vUB9ENP6bWKD94uMhpge3107wqfk6yw0LT/xJHDsxUH4O0dLX8 amEypVw10ku7ZuWMUl1hQe3wbNoy48gQjHyQPa55EYUko1EK9okZau/L1JiRUadm +axLUOwRgvl8qXwLi8+458tqxobeRuqtbI+PE4WSOTsrHlmJtcemH5Wegtl4hnnU XgwBI3lBbxqyzw8F0YG+nNL26ld//7TV9hI0VYYeUq76Ycq1iB4AodC7fybsYwTt vZ06XnfKaZhgGCs9FgecqCI/4YYOhzxaM8UCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTM7AbsAdic2avwClwm50sa9pNCwjAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni96T3dHN0FIWW5ObXI4QXBjSnVkTEd2YVRRc0kucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQDwJlgMA0GCSqGSIb3DQEBCwUAA4IBAQAd87sIefXs4qzvc6TP/O5HjAOe aeWrbylVvqdLb5bF7nv4FvKewSfpXmAQDzP81xfXIVnmE+22btqrI3arl/Jm3W4Q ff+fPGV4WvPnQhDEZsqSMJrP4kxwXb6C0OhHul2/H0Q+XKVza5GvDV85HobhrQ4N GqdjXdR3qR0MpuyxdwmDZ6ttTHLamBOX74sorefSRXepg09B5FAfFbVj1iLRqXQq f/j3Le8/3L/JWZYhUu3xxdrGRy87pBxwGuUl2zQxkpYqAN6J3D8+/drGFCZM341T FBiWxs3CxTy4ZH9dRrvvU41jG6HAMGBFPDqPVoKkCUMsjLovk/ZLBqanll3A -----END CERTIFICATE-----Generated at Tue Oct 21 06:43:56 2025 by rpki-client