$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/HlWx6Lh3FDBseU_SMTf1Z5lqTDc.roa File: HlWx6Lh3FDBseU_SMTf1Z5lqTDc.roa (raw, json) Hash identifier: TcOW//fqHO9+j073kZylPVqChUU3qwQotLNa1g/KHUw= Subject key identifier: 1E:55:B1:E8:B8:77:14:30:6C:79:4F:D2:31:37:F5:67:99:6A:4C:37 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0169 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/HlWx6Lh3FDBseU_SMTf1Z5lqTDc.roa Signing time: Wed 01 Oct 2025 01:30:04 +0000 ROA not before: Wed 01 Oct 2025 01:30:04 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10021 IP address blocks: 117.55.216.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 13:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Oct 1 01:30:04 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=1E55B1E8B87714306C794FD23137F567996A4C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:1f:b2:20:77:72:72:a9:ff:8a:ad:2d:20: 33:b1:f2:a6:d3:6e:46:32:e5:36:53:7b:7d:90:ca: ba:4e:9c:8d:74:c4:a2:66:ce:3f:68:d2:2d:c0:69: 51:81:36:4d:f2:26:78:d5:bc:06:34:42:98:dd:e7: bc:17:ac:1f:fb:2f:6c:3c:51:cc:a0:b5:d2:29:b6: 4d:65:45:52:90:f3:63:f5:39:7a:0e:79:98:e6:9e: 0b:06:0f:36:c8:20:15:ae:ba:d9:55:da:b5:f0:43: 9a:e7:a2:70:d8:6c:72:69:81:15:71:00:aa:72:70: a5:22:eb:1d:09:d0:07:8d:b8:1f:a7:9e:71:e5:79: dc:17:72:d0:5c:f5:33:d9:5a:97:f7:85:36:66:6a: c2:c0:73:b7:f9:1c:b1:1c:dd:00:d2:f0:5b:5c:d7: 85:89:b7:2f:7d:2b:f1:f0:a3:6e:55:e3:10:d6:58: 5d:4b:78:a0:5b:6b:5f:e0:56:f3:5f:fe:8e:24:19: 25:61:12:62:94:c1:80:c8:8b:1e:12:47:9b:ba:73: 6e:62:6a:77:c5:da:5e:b5:ea:86:71:0f:57:e9:10: e6:1f:76:a1:d9:88:30:06:0c:48:58:f3:ef:94:60: 2d:c7:49:f7:1e:fb:64:ac:9e:2b:69:9f:97:67:85: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:55:B1:E8:B8:77:14:30:6C:79:4F:D2:31:37:F5:67:99:6A:4C:37 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/HlWx6Lh3FDBseU_SMTf1Z5lqTDc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.55.216.0/21 Signature Algorithm: sha256WithRSAEncryption a1:f6:6b:f5:8c:e5:18:ec:a5:15:5f:47:28:04:65:e4:44:4f: e6:43:82:03:15:37:18:f6:a7:da:5c:65:14:1a:2c:80:15:da: 38:ca:45:5a:89:25:7f:a8:4e:64:bd:9f:57:a5:b7:92:f0:c4: 7c:61:a1:32:c0:df:5c:2d:75:4c:47:7a:07:25:d5:52:f9:a4: e1:2b:5e:10:a2:8f:30:30:9b:fa:08:1b:2c:6b:7c:29:76:d9: d3:33:a6:b7:9b:fc:0e:b3:9f:8b:65:77:02:af:4e:06:13:9e: dc:8d:66:2f:2a:ef:1f:89:cb:72:65:08:3a:8b:42:65:69:a5: 7f:02:29:14:32:90:82:a0:ec:4e:6a:43:b8:1d:19:85:9a:ea: 9b:b3:f8:42:3e:b5:ca:7e:5a:8e:d5:6f:f4:07:bc:f3:55:97: cf:28:09:41:b4:55:73:d4:22:84:a4:e0:3b:1a:2a:90:98:fd: 6a:0a:15:38:ee:26:95:9f:c8:75:82:fd:1e:3c:59:95:21:c2: 8b:ab:d0:85:51:f7:42:a2:8f:2f:d3:a6:68:77:f2:04:57:e0: 3d:9d:51:d5:8f:31:93:ca:79:b8:8e:e4:96:b3:43:55:ab:8d: b3:22:e6:8f:b5:b2:ca:70:f2:da:1a:5a:3e:37:b3:c0:2c:1e: 80:58:6d:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNTEwMDEw MTMwMDRaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFFNTVCMUU4Qjg3NzE0 MzA2Qzc5NEZEMjMxMzdGNTY3OTk2QTRDMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtmR+yIHdycqn/iq0tIDOx8qbTbkYy5TZTe32QyrpOnI10xKJm zj9o0i3AaVGBNk3yJnjVvAY0Qpjd57wXrB/7L2w8UcygtdIptk1lRVKQ82P1OXoO eZjmngsGDzbIIBWuutlV2rXwQ5rnonDYbHJpgRVxAKpycKUi6x0J0AeNuB+nnnHl edwXctBc9TPZWpf3hTZmasLAc7f5HLEc3QDS8Ftc14WJty99K/Hwo25V4xDWWF1L eKBba1/gVvNf/o4kGSVhEmKUwYDIix4SR5u6c25ianfF2l616oZxD1fpEOYfdqHZ iDAGDEhY8++UYC3HSfce+2Ssnitpn5dnhSdJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHlWx6Lh3FDBseU/SMTf1Z5lqTDcwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L0hsV3g2TGgzRkRCc2VVX1NNVGYxWjVscVREYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN1N9gwDQYJKoZIhvcNAQELBQADggEBAKH2a/WM5RjspRVfRygEZeRET+ZD ggMVNxj2p9pcZRQaLIAV2jjKRVqJJX+oTmS9n1elt5LwxHxhoTLA31wtdUxHegcl 1VL5pOErXhCijzAwm/oIGyxrfCl22dMzpreb/A6zn4tldwKvTgYTntyNZi8q7x+J y3JlCDqLQmVppX8CKRQykIKg7E5qQ7gdGYWa6puz+EI+tcp+Wo7Vb/QHvPNVl88o CUG0VXPUIoSk4DsaKpCY/WoKFTjuJpWfyHWC/R48WZUhwour0IVR90Kijy/Tpmh3 8gRX4D2dUdWPMZPKebiO5JazQ1WrjbMi5o+1sspw8toaWj43s8AsHoBYbdY= -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:25 2025 by rpki-client