$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/v0fPo1cmyRWa7p9HxStG0rM7fcs.roa File: v0fPo1cmyRWa7p9HxStG0rM7fcs.roa (raw, json) Hash identifier: y24GN4GuJd3l0kYb8zqzp6fruzGQZvyhR8ewZeHNVP4= Subject key identifier: BF:47:CF:A3:57:26:C9:15:9A:EE:9F:47:C5:2B:46:D2:B3:3B:7D:CB Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: AB Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/v0fPo1cmyRWa7p9HxStG0rM7fcs.roa Signing time: Wed 01 Oct 2025 01:33:52 +0000 ROA not before: Wed 01 Oct 2025 01:33:52 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 2527 IP address blocks: 152.165.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Oct 1 01:33:52 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=BF47CFA35726C9159AEE9F47C52B46D2B33B7DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:ee:46:86:9c:74:96:6c:bf:b9:fc:ca:f9: f8:57:27:e1:35:4e:a3:86:46:a2:63:27:81:10:50: a8:da:05:cc:c6:7a:bb:61:b8:a1:29:4c:4b:39:a3: c9:17:80:e0:f0:51:c5:5d:dc:14:3b:4e:f7:0a:62: 99:11:a4:19:ba:d4:bb:c2:9a:5e:29:60:9e:b0:eb: df:c2:ea:87:4f:ab:8f:4a:44:68:8c:8d:b7:f8:b1: ef:ff:0e:85:c7:20:c1:27:3a:a7:5a:a3:74:d1:69: 60:73:50:dd:c1:0f:51:fc:e7:7c:78:c2:33:5c:f8: 85:9e:79:04:30:0e:85:bd:d5:4e:ad:14:f8:5d:23: 91:c6:53:5f:df:1b:6e:4f:82:5f:e6:3f:b9:11:f8: 2a:95:4d:93:98:78:97:42:5e:61:97:93:99:95:8c: 60:e6:b9:fc:a2:72:1c:c3:4c:b4:63:79:9e:82:d1: 24:32:64:67:c7:0d:79:ca:3d:4f:da:e4:54:a8:d6: 84:8e:0a:65:50:56:85:33:e9:4a:26:df:9a:51:0b: 98:19:57:a2:32:1a:82:d2:0d:5f:ce:cc:0b:f3:b5: 88:f7:87:d7:76:0c:2a:3d:22:b5:a1:90:9a:0f:e6: 11:34:e7:6a:e0:24:49:87:0d:42:0e:3f:b8:4e:2b: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:47:CF:A3:57:26:C9:15:9A:EE:9F:47:C5:2B:46:D2:B3:3B:7D:CB X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/v0fPo1cmyRWa7p9HxStG0rM7fcs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.165.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:71:00:b1:2d:4c:18:25:37:ba:ca:a8:d2:70:a9:ba:0e:56: dc:15:fe:c3:94:a3:1a:1a:92:5f:fd:0d:97:57:86:46:0c:6d: c6:86:f6:2f:03:c7:50:d7:31:8b:f1:ad:4d:01:aa:00:d2:9b: fb:5c:2d:fa:a3:ac:bb:cc:19:d6:f8:7d:40:ee:9c:f1:75:1f: 22:8a:25:da:08:cb:1b:b0:17:73:58:ab:96:3d:50:2d:a1:e4: 38:11:93:b6:da:95:af:88:3f:5a:3f:a6:cd:bb:e3:46:ab:bd: dc:31:8f:5d:15:e2:b7:8f:33:02:72:54:7d:aa:4c:7f:5b:02: fd:35:53:f4:2f:ae:a0:01:33:29:fc:02:20:4e:1c:7b:8f:fe: db:05:b6:bd:aa:c0:a9:6f:81:ab:6a:dc:79:5f:d0:2f:86:28: e3:6c:77:d1:3b:68:f6:c1:92:29:32:bf:76:c1:d7:80:81:cb: 66:62:f5:8a:06:16:03:9e:6d:c2:d0:22:2e:33:45:8d:0d:65: 87:18:89:96:bc:dc:17:01:5d:51:f4:a4:47:49:08:86:3f:ce: 00:be:ec:7f:f0:d6:34:10:b5:0a:fe:a2:f8:c4:1e:29:63:4a: f4:83:59:7b:e7:03:4f:9b:fc:1a:13:73:b9:b1:08:1b:be:62: 1c:9d:22:c7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTEwMDEw MTMzNTJaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJGNDdDRkEzNTcyNkM5 MTU5QUVFOUY0N0M1MkI0NkQyQjMzQjdEQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYi+5Ghpx0lmy/ufzK+fhXJ+E1TqOGRqJjJ4EQUKjaBczGerth uKEpTEs5o8kXgODwUcVd3BQ7TvcKYpkRpBm61LvCml4pYJ6w69/C6odPq49KRGiM jbf4se//DoXHIMEnOqdao3TRaWBzUN3BD1H853x4wjNc+IWeeQQwDoW91U6tFPhd I5HGU1/fG25Pgl/mP7kR+CqVTZOYeJdCXmGXk5mVjGDmufyichzDTLRjeZ6C0SQy ZGfHDXnKPU/a5FSo1oSOCmVQVoUz6Uom35pRC5gZV6IyGoLSDV/OzAvztYj3h9d2 DCo9IrWhkJoP5hE052rgJEmHDUIOP7hOK56DAgMBAAGjggIhMIICHTAdBgNVHQ4E FgQUv0fPo1cmyRWa7p9HxStG0rM7fcswHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My92MGZQbzFjbXlSV2E3cDlIeFN0RzByTTdmY3Mucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAmKUwDQYJKoZIhvcNAQELBQADggEBAB9xALEtTBglN7rKqNJwqboOVtwV/sOU oxoakl/9DZdXhkYMbcaG9i8Dx1DXMYvxrU0BqgDSm/tcLfqjrLvMGdb4fUDunPF1 HyKKJdoIyxuwF3NYq5Y9UC2h5DgRk7bala+IP1o/ps2740arvdwxj10V4rePMwJy VH2qTH9bAv01U/QvrqABMyn8AiBOHHuP/tsFtr2qwKlvgatq3Hlf0C+GKONsd9E7 aPbBkikyv3bB14CBy2Zi9YoGFgOebcLQIi4zRY0NZYcYiZa83BcBXVH0pEdJCIY/ zgC+7H/w1jQQtQr+ovjEHiljSvSDWXvnA0+b/BoTc7mxCBu+YhydIsc= -----END CERTIFICATE-----Generated at Tue Oct 21 01:56:40 2025 by rpki-client