$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/sVjOv41BL7ZnmeonZwnzVw5ENfI.roa File: sVjOv41BL7ZnmeonZwnzVw5ENfI.roa (raw, json) Hash identifier: zHInk4vbzKqDHOh0sSpO1S2Vp1UXU37S0SO9yvDJwXc= Subject key identifier: B1:58:CE:BF:8D:41:2F:B6:67:99:EA:27:67:09:F3:57:0E:44:35:F2 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0163 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/sVjOv41BL7ZnmeonZwnzVw5ENfI.roa Signing time: Wed 01 Oct 2025 01:29:59 +0000 ROA not before: Wed 01 Oct 2025 01:29:59 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10021 IP address blocks: 61.120.192.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 13:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Oct 1 01:29:59 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=B158CEBF8D412FB66799EA276709F3570E4435F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:e2:e8:21:3c:ec:30:00:eb:f0:f1:f2:85: 8e:a1:53:d1:6c:e1:9f:1f:34:bc:78:d3:67:b0:ee: 49:c8:8a:0f:26:dd:be:df:41:57:e7:07:fa:b4:f1: da:fe:96:c5:92:4c:ec:d1:bb:95:95:05:11:94:b4: 29:69:b0:47:f7:b4:3a:21:74:9a:8c:0c:fb:aa:da: 60:e3:2e:b9:6f:a3:09:20:e7:4b:d4:09:f5:9a:e2: f0:f2:24:ef:db:d5:1a:89:ea:2a:54:0a:11:0d:b0: 3e:4d:93:fc:4e:cc:4a:3c:44:37:71:fd:78:37:25: 02:d9:84:9c:fb:a5:55:bd:89:d7:5d:dc:fb:f3:c7: cf:b4:22:08:50:b3:bb:1f:65:c7:fc:18:47:03:b5: 4c:2b:16:90:4f:5c:97:52:19:8a:e5:80:05:aa:c8: 25:c5:16:75:4e:98:43:b6:5e:39:a9:be:87:05:ae: e2:c9:e5:8e:57:d2:19:6a:fe:cb:84:25:1a:17:22: af:3a:b9:c9:7a:9d:7a:ba:65:47:b8:1b:01:26:c1: 4b:66:6c:10:48:46:49:c8:eb:75:c5:17:60:bd:0d: 46:55:c5:2e:ef:57:3c:2c:6e:88:5c:68:ba:db:26: fe:5e:c6:ff:98:6d:df:b0:dd:31:b1:cf:44:d8:13: c1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:58:CE:BF:8D:41:2F:B6:67:99:EA:27:67:09:F3:57:0E:44:35:F2 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/sVjOv41BL7ZnmeonZwnzVw5ENfI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.120.192.0/21 Signature Algorithm: sha256WithRSAEncryption 07:75:2d:f3:9c:31:32:98:f4:61:ba:bd:af:57:8a:c6:e9:6c: 7d:6d:38:7a:b8:45:5b:e1:fc:aa:e7:b3:2c:d8:aa:29:8f:d7: 2a:a4:36:50:d3:1d:50:8c:ec:b0:f4:e3:23:ed:bb:f3:28:0c: c6:7a:14:27:65:39:dc:72:c5:04:c5:3c:ef:29:29:10:e4:6b: f1:69:da:87:71:00:69:e6:c7:db:2e:14:b5:60:1a:bf:74:77: fa:64:ac:28:83:6c:5e:a8:7c:fa:24:81:ef:a3:e0:8d:4f:4e: a9:a1:4d:f4:6a:b6:c5:dc:6e:f2:fe:2b:ea:a7:29:92:96:ef: dc:3e:f3:23:62:32:17:a2:aa:4b:cd:dd:dc:ff:07:60:80:7b: 31:20:27:cf:16:5a:ed:31:7e:5b:3d:91:ba:4b:f1:c6:09:ca: 18:e6:a6:19:77:c9:c6:ae:1e:b6:63:fc:47:13:47:49:ac:a8: 9e:67:3d:5e:1d:8f:e6:8a:82:60:84:75:35:cb:00:bd:37:43: c6:8c:3b:16:65:11:68:4e:3f:8f:7e:1a:fb:80:05:43:09:3a: 6d:55:be:f5:fc:00:ec:62:05:d8:a2:02:8a:99:91:67:af:f8: db:88:6e:c5:dc:08:79:cc:cd:f7:52:85:31:e2:dc:40:bb:6f: 4f:aa:69:60 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNTEwMDEw MTI5NTlaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxNThDRUJGOEQ0MTJG QjY2Nzk5RUEyNzY3MDlGMzU3MEU0NDM1RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2fOLoITzsMADr8PHyhY6hU9Fs4Z8fNLx402ew7knIig8m3b7f QVfnB/q08dr+lsWSTOzRu5WVBRGUtClpsEf3tDohdJqMDPuq2mDjLrlvowkg50vU CfWa4vDyJO/b1RqJ6ipUChENsD5Nk/xOzEo8RDdx/Xg3JQLZhJz7pVW9iddd3Pvz x8+0IghQs7sfZcf8GEcDtUwrFpBPXJdSGYrlgAWqyCXFFnVOmEO2XjmpvocFruLJ 5Y5X0hlq/suEJRoXIq86ucl6nXq6ZUe4GwEmwUtmbBBIRknI63XFF2C9DUZVxS7v VzwsbohcaLrbJv5exv+Ybd+w3TGxz0TYE8HJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsVjOv41BL7ZnmeonZwnzVw5ENfIwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L3NWak92NDFCTDdabm1lb25ad256Vnc1RU5mSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9eMAwDQYJKoZIhvcNAQELBQADggEBAAd1LfOcMTKY9GG6va9XisbpbH1t OHq4RVvh/KrnsyzYqimP1yqkNlDTHVCM7LD04yPtu/MoDMZ6FCdlOdxyxQTFPO8p KRDka/Fp2odxAGnmx9suFLVgGr90d/pkrCiDbF6ofPokge+j4I1PTqmhTfRqtsXc bvL+K+qnKZKW79w+8yNiMheiqkvN3dz/B2CAezEgJ88WWu0xfls9kbpL8cYJyhjm phl3ycauHrZj/EcTR0msqJ5nPV4dj+aKgmCEdTXLAL03Q8aMOxZlEWhOP49+GvuA BUMJOm1VvvX8AOxiBdiiAoqZkWev+NuIbsXcCHnMzfdShTHi3EC7b0+qaWA= -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:24 2025 by rpki-client