$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2X3yDzXRUqT4x9cgcs2sq5hbp8g.roa File: 2X3yDzXRUqT4x9cgcs2sq5hbp8g.roa (raw, json) Hash identifier: 55F4a6aN7c5lzCEVLa9h6S8w860QXiS3fe8KxygvbpA= Subject key identifier: D9:7D:F2:0F:35:D1:52:A4:F8:C7:D7:20:72:CD:AC:AB:98:5B:A7:C8 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0468 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2X3yDzXRUqT4x9cgcs2sq5hbp8g.roa Signing time: Wed 01 Oct 2025 01:34:44 +0000 ROA not before: Wed 01 Oct 2025 01:34:44 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 103.2.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 06:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:44 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=D97DF20F35D152A4F8C7D72072CDACAB985BA7C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:57:9d:b8:5f:9b:fa:48:50:98:a9:b2:a0: 80:b1:39:5e:ce:38:38:5c:04:4d:08:d5:f1:a2:0a: b0:5a:33:6b:1e:dc:5d:d5:76:ed:24:c3:19:e9:4d: ba:e0:01:81:cc:d7:fd:b7:a9:2c:46:e9:d4:a6:4f: be:16:d4:4f:45:40:47:fe:cc:b3:96:73:34:41:e7: 98:05:9d:2d:1d:18:c5:e6:76:21:6e:e0:19:b3:42: d8:92:cf:be:c6:2c:a6:20:ef:32:2e:ee:d0:8f:26: 00:1b:06:ea:ab:ad:03:a1:73:27:76:28:65:d7:3e: 4b:ac:f0:8b:08:08:1c:29:60:0e:e2:ee:36:ef:5b: 73:c1:a5:83:01:d2:cc:51:00:cc:7e:d2:f3:19:96: f6:ed:c9:80:72:cb:30:a7:0b:4b:10:9f:92:9b:36: a7:ae:f6:2b:58:fa:3e:6f:8f:eb:e2:f9:ab:62:32: 97:f8:e9:39:82:0c:6f:db:ea:f8:d5:7b:9b:fc:91: 4d:8a:5a:21:9a:2f:9d:9d:71:89:b5:25:35:b4:c9: c4:f8:32:86:a9:fb:bc:7a:04:b6:7a:88:ae:de:6e: 40:12:2c:ac:57:fa:f7:f0:d3:0b:62:91:22:51:92: f9:61:a6:d1:8e:8d:a2:78:63:a7:f8:08:cf:29:20: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:F2:0F:35:D1:52:A4:F8:C7:D7:20:72:CD:AC:AB:98:5B:A7:C8 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2X3yDzXRUqT4x9cgcs2sq5hbp8g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.2.160.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:f0:70:d8:9b:51:4c:9a:8a:6d:fb:26:a4:db:ad:c8:c2:b2: 7e:9c:e2:b1:7f:af:1a:e3:53:f9:1c:4c:d3:41:e1:05:2e:7d: e1:b5:eb:2b:cf:5e:b3:7f:b7:ca:08:d5:2a:50:da:88:8d:27: 3c:27:dc:b3:eb:04:b7:67:6c:8e:5a:89:10:e3:ed:6c:4f:25: f8:2a:22:24:e9:05:de:b4:73:49:b0:f2:5c:c6:28:1b:e8:95: 96:f4:3c:21:27:63:1a:f5:0c:dc:0a:98:01:86:94:91:2d:e4: af:d5:b3:52:ed:5c:06:ff:b1:0b:a2:58:f4:dd:a7:57:12:1f: 59:e5:a9:21:9e:51:37:07:14:60:37:05:47:c3:db:4e:ee:72: 92:0a:3a:8d:07:1e:0e:85:e0:7f:20:62:5e:5d:8d:6c:63:8e: a6:96:d2:43:1c:30:4f:5c:74:fa:6d:6f:af:1c:bf:a4:50:2e: b9:45:1f:17:7e:77:40:fa:1b:92:b4:a5:19:3c:69:fe:db:ea: cf:c7:62:d6:c8:3f:58:ef:88:9b:74:9a:1b:84:5f:cd:92:d0: ab:61:e4:d5:6f:ff:4b:0d:57:56:7a:da:48:6b:6c:c9:65:fd: 5b:62:f7:7b:77:24:09:da:a1:37:67:35:0a:6e:c6:b2:a4:d8: 4e:36:be:9f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NDRaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5N0RGMjBGMzVEMTUy QTRGOEM3RDcyMDcyQ0RBQ0FCOTg1QkE3QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV0leduF+b+khQmKmyoICxOV7OODhcBE0I1fGiCrBaM2se3F3V du0kwxnpTbrgAYHM1/23qSxG6dSmT74W1E9FQEf+zLOWczRB55gFnS0dGMXmdiFu 4BmzQtiSz77GLKYg7zIu7tCPJgAbBuqrrQOhcyd2KGXXPkus8IsICBwpYA7i7jbv W3PBpYMB0sxRAMx+0vMZlvbtyYByyzCnC0sQn5KbNqeu9itY+j5vj+vi+atiMpf4 6TmCDG/b6vjVe5v8kU2KWiGaL52dcYm1JTW0ycT4Moap+7x6BLZ6iK7ebkASLKxX +vfw0wtikSJRkvlhptGOjaJ4Y6f4CM8pIOXrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2X3yDzXRUqT4x9cgcs2sq5hbp8gwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzJYM3lEelhSVXFUNHg5Y2djczJzcTVoYnA4Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJnAqAwDQYJKoZIhvcNAQELBQADggEBAC7wcNibUUyaim37JqTbrcjCsn6c 4rF/rxrjU/kcTNNB4QUufeG16yvPXrN/t8oI1SpQ2oiNJzwn3LPrBLdnbI5aiRDj 7WxPJfgqIiTpBd60c0mw8lzGKBvolZb0PCEnYxr1DNwKmAGGlJEt5K/Vs1LtXAb/ sQuiWPTdp1cSH1nlqSGeUTcHFGA3BUfD207ucpIKOo0HHg6F4H8gYl5djWxjjqaW 0kMcME9cdPptb68cv6RQLrlFHxd+d0D6G5K0pRk8af7b6s/HYtbIP1jviJt0mhuE X82S0Kth5NVv/0sNV1Z62khrbMll/Vti93t3JAnaoTdnNQpuxrKk2E42vp8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:17:21 2025 by rpki-client