$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/N5W1oJfpnXTFscrTf4r6iMb-JxU.roa File: N5W1oJfpnXTFscrTf4r6iMb-JxU.roa (raw, json) Hash identifier: ccmssfDvYca0flb5xDuogisj6cdPBWE61lL97wTAF/U= Subject key identifier: 37:95:B5:A0:97:E9:9D:74:C5:B1:CA:D3:7F:8A:FA:88:C6:FE:27:15 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: AE Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/N5W1oJfpnXTFscrTf4r6iMb-JxU.roa Signing time: Wed 01 Oct 2025 01:33:59 +0000 ROA not before: Wed 01 Oct 2025 01:33:59 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 2527 IP address blocks: 164.70.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Oct 1 01:33:59 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=3795B5A097E99D74C5B1CAD37F8AFA88C6FE2715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:54:c5:43:a3:d8:13:0c:b2:29:69:7c:b0: f8:a0:51:67:c2:23:ad:8f:31:13:81:b9:85:26:cd: 81:b1:b6:0f:4b:43:c0:71:28:d5:bd:11:94:3e:ab: e3:a1:a0:38:3a:39:2f:42:75:2c:a0:56:5b:74:77: 10:8d:cc:0b:38:01:05:12:2c:c4:03:5c:36:ec:13: 27:59:9b:83:ac:66:b4:10:7a:bb:42:a3:fe:f0:7e: c0:8c:be:c1:2d:e2:e7:13:3f:f3:c0:2f:c2:c6:9e: e6:30:17:ef:11:b2:0a:1a:3e:42:7a:65:ad:23:29: 9f:8e:ec:4a:07:9c:2e:48:d5:ee:1c:52:4c:4c:3f: 3d:1a:1f:bb:ad:d8:70:a3:36:3f:bf:1b:12:9a:bf: 2a:7a:c7:71:62:da:8a:c0:dd:38:e2:46:e1:e4:28: 96:d0:54:49:e9:2c:bd:b7:c3:2d:45:96:af:8a:07: 6b:2e:90:8d:1e:69:2b:32:0d:1d:ae:33:41:53:f9: 12:b0:48:14:ee:fb:e3:7e:3f:32:e7:42:4e:42:26: c5:52:57:c2:b0:97:1d:32:86:d7:97:e9:a8:40:99: 9b:d3:5d:97:00:ab:36:e7:b6:cf:a3:4a:5c:01:28: 7c:0f:ab:06:ca:55:0c:1d:31:8a:10:65:06:26:4b: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:95:B5:A0:97:E9:9D:74:C5:B1:CA:D3:7F:8A:FA:88:C6:FE:27:15 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/N5W1oJfpnXTFscrTf4r6iMb-JxU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.70.128.0/17 Signature Algorithm: sha256WithRSAEncryption 58:1e:99:1f:5a:9c:13:be:84:41:76:0b:38:57:31:fe:bf:71: 7c:31:c1:7e:70:92:65:92:da:7c:b2:fc:8a:f7:c9:f3:6c:38: 73:a6:d4:25:ef:5c:94:b6:ca:a5:23:12:d2:66:0f:c7:ce:da: 2e:a8:39:db:bc:3f:a1:aa:07:19:77:f9:79:59:ec:35:60:e3: f9:00:77:63:59:3a:8c:21:f6:db:18:2c:b5:28:e5:36:10:53: af:a0:c0:24:c1:07:bb:64:3c:ee:af:e0:c9:80:69:1b:3a:14: af:79:87:bd:76:dd:57:e0:1d:91:d4:4c:63:d2:4f:58:20:15: c0:26:93:9a:da:e0:20:26:65:cd:75:b9:6e:65:13:0b:1b:00: 54:ee:15:e1:6a:a8:20:c5:51:e0:05:f4:51:70:98:0f:b8:07: 3f:39:f2:9b:6d:42:1f:fb:e9:a5:9e:af:0d:02:db:10:aa:c8: a6:6a:6c:67:7f:ed:c6:58:41:fa:7c:07:e0:5d:a0:22:07:7a: a2:55:4d:cb:7e:c6:6a:21:46:b6:29:23:80:1c:2a:59:47:97: 2f:f3:8c:52:a7:b2:68:ef:91:f5:03:07:7e:10:f2:03:cd:41: 81:77:e0:f9:23:55:7c:7d:c1:cf:5f:48:f9:66:79:4b:ef:99: 44:67:b3:e9 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTEwMDEw MTMzNTlaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3OTVCNUEwOTdFOTlE NzRDNUIxQ0FEMzdGOEFGQTg4QzZGRTI3MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5kFTFQ6PYEwyyKWl8sPigUWfCI62PMROBuYUmzYGxtg9LQ8Bx KNW9EZQ+q+OhoDg6OS9CdSygVlt0dxCNzAs4AQUSLMQDXDbsEydZm4OsZrQQertC o/7wfsCMvsEt4ucTP/PAL8LGnuYwF+8RsgoaPkJ6Za0jKZ+O7EoHnC5I1e4cUkxM Pz0aH7ut2HCjNj+/GxKavyp6x3Fi2orA3TjiRuHkKJbQVEnpLL23wy1Flq+KB2su kI0eaSsyDR2uM0FT+RKwSBTu++N+PzLnQk5CJsVSV8Kwlx0yhteX6ahAmZvTXZcA qzbnts+jSlwBKHwPqwbKVQwdMYoQZQYmS+LLAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUN5W1oJfpnXTFscrTf4r6iMb+JxUwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9ONVcxb0pmcG5YVEZzY3JUZjRyNmlNYi1KeFUucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQHpEaAMA0GCSqGSIb3DQEBCwUAA4IBAQBYHpkfWpwTvoRBdgs4VzH+v3F8McF+ cJJlktp8svyK98nzbDhzptQl71yUtsqlIxLSZg/HztouqDnbvD+hqgcZd/l5Wew1 YOP5AHdjWTqMIfbbGCy1KOU2EFOvoMAkwQe7ZDzur+DJgGkbOhSveYe9dt1X4B2R 1Exj0k9YIBXAJpOa2uAgJmXNdbluZRMLGwBU7hXhaqggxVHgBfRRcJgPuAc/OfKb bUIf++mlnq8NAtsQqsimamxnf+3GWEH6fAfgXaAiB3qiVU3LfsZqIUa2KSOAHCpZ R5cv84xSp7Jo75H1Awd+EPIDzUGBd+D5I1V8fcHPX0j5ZnlL75lEZ7Pp -----END CERTIFICATE-----Generated at Mon Oct 20 23:28:21 2025 by rpki-client