$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/zw36i43HIW5mdvRWObBTLthV12A.roa File: zw36i43HIW5mdvRWObBTLthV12A.roa (raw, json) Hash identifier: kTBage4GrwQvlwwoJTbGL26+YAagm6Hi3MwEkwNr12c= Subject key identifier: CF:0D:FA:8B:8D:C7:21:6E:66:76:F4:56:39:B0:53:2E:D8:55:D7:60 Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 30 Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/zw36i43HIW5mdvRWObBTLthV12A.roa Signing time: Tue 07 Oct 2025 01:24:31 +0000 ROA not before: Tue 07 Oct 2025 01:24:31 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 9354 IP address blocks: 202.157.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 06:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Oct 7 01:24:31 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=CF0DFA8B8DC7216E6676F45639B0532ED855D760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:5f:84:eb:a8:ac:91:ae:96:8e:72:39:ed: 5d:44:84:ac:b8:19:9e:38:b7:3f:d7:7d:aa:0e:b9: 32:61:2f:c0:33:ba:7e:fb:e0:bc:a8:fe:61:9b:6b: 4e:f7:56:66:0a:0f:31:86:c9:66:7c:5b:51:a1:57: 8f:2e:83:cd:63:7e:d5:42:c7:aa:64:21:63:63:e8: c5:be:1a:52:04:bf:07:b9:57:79:58:71:90:4f:0d: 70:3c:b7:b6:ba:c7:eb:be:93:6c:fb:0e:f0:1d:f3: ad:68:e8:01:54:f3:fe:27:60:5f:f4:55:84:78:3d: 0c:b5:16:c2:82:ee:c2:12:16:56:05:07:fa:d6:7d: 86:8c:da:33:47:88:f4:f6:b8:fc:91:c5:42:04:75: 83:77:b5:30:35:4e:8d:b8:a6:43:e5:ba:04:56:e1: 7f:fd:4f:13:32:47:79:81:c5:1f:3e:90:ba:b0:a2: c9:c9:7d:34:3f:01:b5:0c:6f:43:d7:0b:4d:4c:a5: e2:5a:a0:10:5c:16:70:0c:3d:6a:b6:72:b2:fa:0e: 38:fd:5b:c4:3f:30:a2:3c:ea:44:2e:94:2e:09:b1: 16:4c:5c:ae:4e:51:98:6b:87:31:18:44:d0:ca:37: 62:67:03:b4:ab:09:65:5a:22:93:b0:0c:97:15:d0: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0D:FA:8B:8D:C7:21:6E:66:76:F4:56:39:B0:53:2E:D8:55:D7:60 X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/zw36i43HIW5mdvRWObBTLthV12A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.157.240.0/22 Signature Algorithm: sha256WithRSAEncryption 53:ef:8d:ea:ce:7b:d5:0c:ef:3b:f0:86:07:02:58:36:8e:c3: 79:9e:0e:6f:d9:52:9a:75:49:f6:a2:46:85:b5:58:a6:0d:d7: 51:c5:6c:87:3b:ba:f6:c7:96:7c:ff:9c:77:0f:af:c0:e3:55: e3:fe:fb:38:6f:eb:69:b2:9c:c5:29:90:f3:c8:b8:81:14:15: e6:7a:fd:d9:51:d9:85:18:61:b0:93:b1:d2:5e:8b:0d:3e:af: 0d:6d:2f:05:4f:0a:ed:15:3e:e1:56:c6:f7:34:b0:05:87:96: 07:0f:f3:6e:50:8a:a6:25:b7:0b:94:0c:fe:12:99:e1:50:4b: df:a1:d9:56:a4:e5:55:32:7c:95:9a:43:03:78:d6:49:0e:6b: 22:e2:c3:2f:fc:39:61:3a:82:96:c1:72:8b:68:a5:8e:45:ac: f4:d1:79:20:c8:37:8c:65:98:f2:e1:6d:e3:48:8e:17:f1:c3: 7f:00:15:b8:d9:86:f2:2c:38:27:53:9b:f1:a6:68:f7:7a:45: c4:a0:b8:f0:b9:7c:63:75:7b:7e:c5:58:92:cb:d5:c6:1e:77: 35:8f:b8:dd:80:33:18:35:d1:87:8e:40:80:9f:e8:5e:61:f7: 3d:f3:76:ea:88:db:02:ad:11:73:c5:31:ff:af:59:b0:e9:2e: 2b:4b:a9:27 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI1MTAwNzAx MjQzMVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0YwREZBOEI4REM3MjE2 RTY2NzZGNDU2MzlCMDUzMkVEODU1RDc2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALYpX4TrqKyRrpaOcjntXUSErLgZnji3P9d9qg65MmEvwDO6fvvg vKj+YZtrTvdWZgoPMYbJZnxbUaFXjy6DzWN+1ULHqmQhY2Poxb4aUgS/B7lXeVhx kE8NcDy3trrH676TbPsO8B3zrWjoAVTz/idgX/RVhHg9DLUWwoLuwhIWVgUH+tZ9 hozaM0eI9Pa4/JHFQgR1g3e1MDVOjbimQ+W6BFbhf/1PEzJHeYHFHz6QurCiycl9 ND8BtQxvQ9cLTUyl4lqgEFwWcAw9arZysvoOOP1bxD8wojzqRC6ULgmxFkxcrk5R mGuHMRhE0Mo3YmcDtKsJZVoik7AMlxXQbY0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTPDfqLjcchbmZ29FY5sFMu2FXXYDAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80ODQvenczNmk0M0hJVzVtZHZSV09iQlRMdGhWMTJBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsqd8DANBgkqhkiG9w0BAQsFAAOCAQEAU++N6s571QzvO/CGBwJYNo7DeZ4O b9lSmnVJ9qJGhbVYpg3XUcVshzu69seWfP+cdw+vwONV4/77OG/rabKcxSmQ88i4 gRQV5nr92VHZhRhhsJOx0l6LDT6vDW0vBU8K7RU+4VbG9zSwBYeWBw/zblCKpiW3 C5QM/hKZ4VBL36HZVqTlVTJ8lZpDA3jWSQ5rIuLDL/w5YTqClsFyi2iljkWs9NF5 IMg3jGWY8uFt40iOF/HDfwAVuNmG8iw4J1Ob8aZo93pFxKC48Ll8Y3V7fsVYksvV xh53NY+43YAzGDXRh45AgJ/oXmH3PfN26ojbAq0Rc8Ux/69ZsOkuK0upJw== -----END CERTIFICATE-----Generated at Tue Oct 21 07:33:37 2025 by rpki-client