$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/otjXG_ruBpbHlpf_FhT1yrb8uLQ.roa File: otjXG_ruBpbHlpf_FhT1yrb8uLQ.roa (raw, json) Hash identifier: IiyVOgzR03qm2OdjD1SoZAF+OMBZa4JTr5qcpEjtO6E= Subject key identifier: A2:D8:D7:1B:FA:EE:06:96:C7:96:97:FF:16:14:F5:CA:B6:FC:B8:B4 Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Certificate serial: 69 Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/otjXG_ruBpbHlpf_FhT1yrb8uLQ.roa Signing time: Wed 01 Oct 2025 01:28:13 +0000 ROA not before: Wed 01 Oct 2025 01:28:13 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 4774 IP address blocks: 2001:300:fff5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Validity Not Before: Oct 1 01:28:13 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=A2D8D71BFAEE0696C79697FF1614F5CAB6FCB8B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:c4:aa:ac:fa:54:eb:c5:12:a5:b1:26:74: b4:52:78:f4:92:43:82:ba:ff:7d:27:07:38:ae:86: 0c:38:7f:66:43:3f:f0:f5:06:aa:dd:7e:a2:a8:c9: d3:22:07:c9:f2:dd:d3:6a:90:66:fc:e9:9f:78:83: 6d:c3:ad:40:bb:eb:d0:92:da:c3:2c:5e:69:65:3d: d2:90:d8:8b:7a:c4:83:b4:7d:96:07:3c:85:c5:9b: 8e:46:01:64:3e:61:98:42:64:d9:70:4a:93:68:19: 62:af:e8:32:27:ec:60:1a:ac:67:68:76:0e:10:f5: b5:20:ef:46:b0:5d:25:ee:1a:69:f9:08:a4:9c:8d: f9:5b:91:0d:4e:37:fb:ce:d9:22:9a:f9:69:bf:a3: 0b:41:24:b7:c0:e7:13:f9:e7:8d:72:37:f4:8a:97: c3:c6:35:b9:80:a8:cc:cf:5a:8c:2d:34:38:94:ae: a0:35:28:a7:bc:3a:d8:da:87:ab:4a:f0:b6:d2:e7: d6:01:8d:e6:31:9c:c9:fd:97:09:bd:03:d9:e1:0a: f5:66:36:18:a0:5b:72:6c:53:72:ce:66:38:43:5a: 26:90:49:5d:a6:30:49:5f:64:a2:40:d0:be:86:5c: f9:e1:74:55:28:a6:fb:62:69:d8:3e:1a:78:0f:d6: a8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D8:D7:1B:FA:EE:06:96:C7:96:97:FF:16:14:F5:CA:B6:FC:B8:B4 X509v3 Authority Key Identifier: keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/otjXG_ruBpbHlpf_FhT1yrb8uLQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:300:fff5::/48 Signature Algorithm: sha256WithRSAEncryption 6c:91:6b:dd:cf:c8:bc:b9:a7:2b:77:b1:4e:28:d1:6a:6d:e7: e2:d6:6d:39:1f:bb:47:04:3a:ad:35:38:1a:4c:a4:f4:8a:5d: 60:58:42:71:5e:60:cb:07:f3:3c:07:d0:d3:f2:04:7a:6a:c1: ed:27:67:71:37:9b:9c:32:38:bf:5a:98:ac:86:9f:93:e8:dd: 23:11:04:0e:bc:05:31:91:4f:8f:89:59:98:37:ea:20:4e:a6: 8f:22:92:60:16:95:ae:28:0d:cf:66:d6:d0:00:a8:aa:15:82: 1f:db:d9:fd:ed:a0:43:d5:07:8f:f8:3a:2c:e0:51:1a:4d:3f: 6f:14:53:31:e8:98:5a:43:1b:ea:67:fa:f5:9e:ca:05:cc:00: a9:e1:3b:70:e4:e1:2c:9c:d4:10:18:48:36:9f:10:7d:db:9c: 7f:ce:3c:ac:ae:05:1c:46:23:66:7e:f1:26:cf:a3:41:10:4d: be:f0:85:81:1a:67:39:19:2d:65:04:42:7f:eb:2e:f6:df:4f: a3:0a:69:b8:09:a1:02:06:c8:e8:66:96:7c:98:37:1d:64:58: 40:ac:f1:3e:e3:04:b3:15:2f:24:de:54:db:6d:26:51:26:d9: 3d:34:88:f8:7f:41:9a:97:8e:46:c6:a1:74:93:fe:04:33:7b: d7:97:82:8f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1 QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI1MTAwMTAx MjgxM1oXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQTJEOEQ3MUJGQUVFMDY5 NkM3OTY5N0ZGMTYxNEY1Q0FCNkZDQjhCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALr9xKqs+lTrxRKlsSZ0tFJ49JJDgrr/fScHOK6GDDh/ZkM/8PUG qt1+oqjJ0yIHyfLd02qQZvzpn3iDbcOtQLvr0JLawyxeaWU90pDYi3rEg7R9lgc8 hcWbjkYBZD5hmEJk2XBKk2gZYq/oMifsYBqsZ2h2DhD1tSDvRrBdJe4aafkIpJyN +VuRDU43+87ZIpr5ab+jC0Ekt8DnE/nnjXI39IqXw8Y1uYCozM9ajC00OJSuoDUo p7w62NqHq0rwttLn1gGN5jGcyf2XCb0D2eEK9WY2GKBbcmxTcs5mOENaJpBJXaYw SV9kokDQvoZc+eF0VSim+2Jp2D4aeA/WqPECAwEAAaOCAiswggInMB0GA1UdDgQW BBSi2Ncb+u4GlseWl/8WFPXKtvy4tDAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDE2L290alhHX3J1QnBiSGxwZl9GaFQxeXJiOHVMUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQMA//UwDQYJKoZIhvcNAQELBQADggEBAGyRa93PyLy5pyt3sU4o 0Wpt5+LWbTkfu0cEOq01OBpMpPSKXWBYQnFeYMsH8zwH0NPyBHpqwe0nZ3E3m5wy OL9amKyGn5Po3SMRBA68BTGRT4+JWZg36iBOpo8ikmAWla4oDc9m1tAAqKoVgh/b 2f3toEPVB4/4OizgURpNP28UUzHomFpDG+pn+vWeygXMAKnhO3Dk4Syc1BAYSDaf EH3bnH/OPKyuBRxGI2Z+8SbPo0EQTb7whYEaZzkZLWUEQn/rLvbfT6MKabgJoQIG yOhmlnyYNx1kWECs8T7jBLMVLyTeVNttJlEm2T00iPh/QZqXjkbGoXST/gQze9eX go8= -----END CERTIFICATE-----Generated at Mon Oct 20 17:43:07 2025 by rpki-client