$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/7cBqVwPWSL3j9YW56UTW3zTMqCU.roa File: 7cBqVwPWSL3j9YW56UTW3zTMqCU.roa (raw, json) Hash identifier: XFUJAau6m8Z7Be6wXMGBIV+W9ncNgLaH0OLi6w01N7I= Subject key identifier: ED:C0:6A:57:03:D6:48:BD:E3:F5:85:B9:E9:44:D6:DF:34:CC:A8:25 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: AF Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7cBqVwPWSL3j9YW56UTW3zTMqCU.roa Signing time: Wed 01 Oct 2025 01:34:02 +0000 ROA not before: Wed 01 Oct 2025 01:34:02 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 2527 IP address blocks: 143.189.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Oct 1 01:34:02 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=EDC06A5703D648BDE3F585B9E944D6DF34CCA825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:5f:f2:9c:b1:78:2e:22:7e:ec:bf:df:2a: e8:4b:f6:c4:66:5b:f0:da:48:47:d3:61:87:53:0e: 8a:b4:da:7f:da:ca:18:a0:f2:3e:1d:b7:8b:da:d3: e2:69:f5:8a:ae:00:df:a2:45:db:3f:f2:33:b1:4c: 32:1c:3d:bb:a4:c2:82:77:e3:f0:5d:d9:29:e7:94: 9b:8d:60:35:8c:1a:2d:f1:6d:f8:4a:21:af:e5:53: 3c:d7:40:d9:9c:6e:42:77:42:bc:dd:72:d0:9e:24: 53:7b:81:30:3c:c0:4c:ea:be:26:1d:83:ab:80:46: 38:70:90:a0:e4:40:34:3e:3b:c9:76:bc:00:b3:9d: f5:72:87:bd:f2:c1:38:40:4f:e6:54:7b:1b:c7:b5: 8d:85:e8:ee:fb:71:a5:19:de:4a:2f:05:08:e3:66: 6d:ce:b9:38:a0:fc:77:5a:96:bc:5e:aa:cf:fa:ce: 45:aa:53:ad:98:63:3b:da:ec:18:3e:2c:ce:ee:21: 31:1c:15:67:39:92:c0:d3:e0:87:31:7d:8b:9d:0b: 40:f9:d1:4b:27:ca:a9:b0:92:57:f7:61:d6:2d:39: f7:e0:fd:60:28:14:39:78:8d:c1:70:45:95:a7:6d: 67:64:19:79:c3:15:dc:8d:e1:48:45:73:5f:87:aa: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C0:6A:57:03:D6:48:BD:E3:F5:85:B9:E9:44:D6:DF:34:CC:A8:25 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7cBqVwPWSL3j9YW56UTW3zTMqCU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 42:c0:55:3d:5a:82:f5:61:22:60:7a:d5:05:d7:bd:51:2e:0d: a3:40:13:d1:c4:1f:14:10:6d:d6:eb:3e:a3:92:9d:b5:c9:44: 15:bb:06:66:fd:b9:ef:78:d9:f9:20:fb:2f:01:c2:6d:4b:96: 5d:df:c1:70:a2:9c:16:03:cf:98:fc:47:9e:01:c4:b2:4d:d3: 61:ec:e4:b4:5d:e5:54:f8:7d:44:a9:99:27:6c:81:61:9a:c6: d1:f6:dd:1d:41:fa:be:78:5b:a7:b0:98:3d:89:91:7f:e5:36: 0f:a5:44:c3:6f:d1:5d:6a:7d:14:f6:b9:c9:6a:c2:87:4e:12: 1e:f8:c3:c6:18:52:46:c5:2d:77:39:8a:d2:2a:d0:21:3e:99: 63:2a:c3:83:10:98:1b:11:2e:1d:fe:62:fc:36:14:32:8d:3a: e0:b8:d3:38:21:8f:eb:23:76:1a:d9:b0:46:7c:83:7d:90:cb: 46:4e:cb:3a:da:60:16:3d:8f:16:8a:5d:a2:17:19:c2:37:a9: ad:e0:75:a0:1d:ac:54:22:b5:82:28:35:21:da:c9:50:6e:a2: 28:fd:0c:c3:76:18:f0:0a:12:63:e3:5d:62:a8:7e:a8:c5:26: 25:59:e5:f5:69:41:de:1b:00:f4:9e:b9:8c:dd:cc:f1:f9:56: 13:e4:15:72 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTEwMDEw MTM0MDJaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVEQzA2QTU3MDNENjQ4 QkRFM0Y1ODVCOUU5NDRENkRGMzRDQ0E4MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGsV/ynLF4LiJ+7L/fKuhL9sRmW/DaSEfTYYdTDoq02n/ayhig 8j4dt4va0+Jp9YquAN+iRds/8jOxTDIcPbukwoJ34/Bd2SnnlJuNYDWMGi3xbfhK Ia/lUzzXQNmcbkJ3QrzdctCeJFN7gTA8wEzqviYdg6uARjhwkKDkQDQ+O8l2vACz nfVyh73ywThAT+ZUexvHtY2F6O77caUZ3kovBQjjZm3OuTig/Hdalrxeqs/6zkWq U62YYzva7Bg+LM7uITEcFWc5ksDT4IcxfYudC0D50Usnyqmwklf3YdYtOffg/WAo FDl4jcFwRZWnbWdkGXnDFdyN4UhFc1+HqiEZAgMBAAGjggIhMIICHTAdBgNVHQ4E FgQU7cBqVwPWSL3j9YW56UTW3zTMqCUwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My83Y0JxVndQV1NMM2o5WVc1NlVUVzN6VE1xQ1Uucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAj70wDQYJKoZIhvcNAQELBQADggEBAELAVT1agvVhImB61QXXvVEuDaNAE9HE HxQQbdbrPqOSnbXJRBW7Bmb9ue942fkg+y8Bwm1Lll3fwXCinBYDz5j8R54BxLJN 02Hs5LRd5VT4fUSpmSdsgWGaxtH23R1B+r54W6ewmD2JkX/lNg+lRMNv0V1qfRT2 uclqwodOEh74w8YYUkbFLXc5itIq0CE+mWMqw4MQmBsRLh3+Yvw2FDKNOuC40zgh j+sjdhrZsEZ8g32Qy0ZOyzraYBY9jxaKXaIXGcI3qa3gdaAdrFQitYIoNSHayVBu oij9DMN2GPAKEmPjXWKofqjFJiVZ5fVpQd4bAPSeuYzdzPH5VhPkFXI= -----END CERTIFICATE-----Generated at Mon Oct 20 23:28:33 2025 by rpki-client