$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ci2K33b27P3kv8sHvXrj1S1Zt7k.roa File: Ci2K33b27P3kv8sHvXrj1S1Zt7k.roa (raw, json) Hash identifier: tQmzCTzOcm2+/80vJiuUyinRKf57UbbaXfQ/laeb3uQ= Subject key identifier: 0A:2D:8A:DF:76:F6:EC:FD:E4:BF:CB:07:BD:7A:E3:D5:2D:59:B7:B9 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: A9 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ci2K33b27P3kv8sHvXrj1S1Zt7k.roa Signing time: Wed 01 Oct 2025 01:33:49 +0000 ROA not before: Wed 01 Oct 2025 01:33:49 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 2527 IP address blocks: 160.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Oct 1 01:33:49 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=0A2D8ADF76F6ECFDE4BFCB07BD7AE3D52D59B7B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:c3:4b:c0:76:a3:bf:db:a5:22:5f:f4:9f: 72:c8:b2:4e:f4:61:58:21:3c:4a:72:17:09:e9:82: 0e:fa:ba:e2:b8:c5:90:fb:e1:1c:f1:81:21:6e:45: cf:87:9b:70:65:06:58:5d:7c:f1:10:79:9a:87:3a: 43:2b:31:1e:1b:ab:7e:84:02:0d:34:a5:2d:2e:68: 2d:1d:d2:f4:6e:69:b3:3b:da:a5:ec:ce:d5:b1:00: c1:51:d9:24:86:44:3b:d2:49:a8:cb:0d:de:a3:a8: 7b:3c:92:f2:ab:ca:bc:af:a0:90:e8:31:9d:58:5e: 0b:66:2a:93:5a:5a:7e:17:aa:16:c8:f0:96:14:54: 50:38:0e:38:78:1c:80:28:ee:3b:cf:a7:e3:52:db: d1:d1:9b:ad:30:58:cf:b5:5d:49:b8:4a:64:46:4a: 48:ed:cc:fb:e4:6c:51:57:77:fd:f3:b5:fb:ec:d5: 6c:af:e1:4e:63:a1:0e:57:d1:aa:23:1b:57:d2:9f: c4:08:57:b0:f3:fe:e8:7b:de:ab:1c:24:77:4e:37: 79:1c:5c:a5:99:4a:cf:3d:62:1c:2d:f1:0f:19:a0: 36:8e:14:ac:ad:41:29:2e:a1:b6:62:5a:1e:79:54: 28:3a:17:24:11:3f:40:89:7f:33:ad:06:a6:42:99: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2D:8A:DF:76:F6:EC:FD:E4:BF:CB:07:BD:7A:E3:D5:2D:59:B7:B9 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Ci2K33b27P3kv8sHvXrj1S1Zt7k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 08:d5:07:ac:d7:53:99:8b:ba:f0:db:1e:9e:a6:05:7a:99:da: 1e:aa:5e:32:ec:6d:db:a7:d0:88:e0:84:e8:4f:ad:36:bc:69: fe:e9:9f:61:ea:90:36:98:36:8b:e5:ab:3a:2e:8d:17:23:25: ad:96:b5:b5:dc:a9:e1:db:7f:16:fa:80:04:b9:75:6b:d0:4f: 46:2f:b2:58:27:cb:15:5f:8e:55:a2:4e:63:fb:8b:8a:be:3a: bb:e2:97:97:b0:3d:8b:35:22:dc:a1:ec:3c:0f:81:ce:69:c4: ea:eb:82:f4:8e:65:8f:73:58:32:a7:11:3e:f1:d6:f6:8a:99: 47:db:be:ac:e4:52:76:48:80:7f:cc:66:58:ae:d5:e7:d5:63: 62:ff:d3:c8:c0:ba:95:6a:c6:2a:75:6a:78:80:9b:e9:11:46: 22:be:3f:f8:b8:a1:5d:61:2a:d3:d2:5c:b9:07:5b:b5:58:87: cb:17:9a:d9:7f:15:0d:c4:9f:c5:a1:b4:78:ac:f8:38:0a:a1: ec:df:fb:aa:2f:0b:56:32:8f:6f:25:d8:f3:38:9d:ae:98:42: 8e:8a:e6:29:7b:e0:33:62:30:4f:2a:6b:47:7b:74:8c:2d:4e: 2c:3a:5c:14:ea:14:cf:ba:25:47:5b:76:b9:0a:c4:b7:68:52: 7c:ae:da:61 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTEwMDEw MTMzNDlaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBBMkQ4QURGNzZGNkVD RkRFNEJGQ0IwN0JEN0FFM0Q1MkQ1OUI3QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0HcNLwHajv9ulIl/0n3LIsk70YVghPEpyFwnpgg76uuK4xZD7 4RzxgSFuRc+Hm3BlBlhdfPEQeZqHOkMrMR4bq36EAg00pS0uaC0d0vRuabM72qXs ztWxAMFR2SSGRDvSSajLDd6jqHs8kvKryryvoJDoMZ1YXgtmKpNaWn4XqhbI8JYU VFA4Djh4HIAo7jvPp+NS29HRm60wWM+1XUm4SmRGSkjtzPvkbFFXd/3ztfvs1Wyv 4U5joQ5X0aojG1fSn8QIV7Dz/uh73qscJHdON3kcXKWZSs89Yhwt8Q8ZoDaOFKyt QSkuobZiWh55VCg6FyQRP0CJfzOtBqZCmfAnAgMBAAGjggIhMIICHTAdBgNVHQ4E FgQUCi2K33b27P3kv8sHvXrj1S1Zt7kwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9DaTJLMzNiMjdQM2t2OHNIdlhyajFTMVp0N2sucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAoFYwDQYJKoZIhvcNAQELBQADggEBAAjVB6zXU5mLuvDbHp6mBXqZ2h6qXjLs bdun0IjghOhPrTa8af7pn2HqkDaYNovlqzoujRcjJa2WtbXcqeHbfxb6gAS5dWvQ T0YvslgnyxVfjlWiTmP7i4q+Orvil5ewPYs1Ityh7DwPgc5pxOrrgvSOZY9zWDKn ET7x1vaKmUfbvqzkUnZIgH/MZliu1efVY2L/08jAupVqxip1aniAm+kRRiK+P/i4 oV1hKtPSXLkHW7VYh8sXmtl/FQ3En8WhtHis+DgKoezf+6ovC1Yyj28l2PM4na6Y Qo6K5il74DNiME8qa0d7dIwtTiw6XBTqFM+6JUdbdrkKxLdoUnyu2mE= -----END CERTIFICATE-----Generated at Tue Oct 21 01:56:59 2025 by rpki-client