$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/Qb7RJkNW5dqlKgVJmoV46Myf2jo.roa File: Qb7RJkNW5dqlKgVJmoV46Myf2jo.roa (raw, json) Hash identifier: CwgLnHeyvlDE7V+y2ZAnptwKKUo0MrrZ2lbMQy9sgok= Subject key identifier: 41:BE:D1:26:43:56:E5:DA:A5:2A:05:49:9A:85:78:E8:CC:9F:DA:3A Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 65 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Qb7RJkNW5dqlKgVJmoV46Myf2jo.roa Signing time: Wed 01 Oct 2025 01:29:41 +0000 ROA not before: Wed 01 Oct 2025 01:29:41 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 131925 IP address blocks: 160.237.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Oct 1 01:29:41 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=41BED1264356E5DAA52A05499A8578E8CC9FDA3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:c1:1d:5c:67:a6:ec:4f:9b:c7:a6:af:4f: 52:ec:9d:5a:f9:0d:8b:fd:cf:92:85:ad:ad:92:79: df:e0:69:3b:bc:e4:58:1c:d8:a2:a9:94:58:e5:e3: 9a:1e:e3:43:51:5b:ed:90:10:90:f1:ca:0d:28:d4: 45:73:99:a0:35:ac:2b:2e:34:14:9b:a9:1a:d5:2e: fe:3d:aa:18:e4:9f:3f:d3:c9:ea:dd:a2:7d:d8:22: 57:7f:d1:d8:15:1d:08:ef:d1:2e:57:0f:ee:a3:07: eb:59:29:fb:d5:43:d5:49:71:04:03:27:b3:fb:9f: 9d:22:f3:3f:70:f4:4d:bf:98:35:8d:1e:ab:2c:0d: b4:fc:4f:fe:8b:6a:b0:c3:36:18:68:34:20:38:f2: bc:69:20:70:04:fc:40:62:05:46:d8:e4:52:4e:45: b8:16:40:d4:0c:54:28:f7:62:7b:32:89:7d:b8:fa: b7:9b:6a:7a:c1:eb:39:68:07:a5:ca:53:fb:88:60: 7d:6e:ea:02:f9:8b:23:72:9d:41:4d:81:a8:79:18: 62:3e:4f:72:88:2a:b5:b8:3e:0e:94:98:5d:ca:36: 9b:42:a3:80:89:03:93:2e:52:f2:c3:50:26:db:70: d7:8e:f3:f5:2a:49:e5:b9:9d:23:6e:81:c5:7e:27: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BE:D1:26:43:56:E5:DA:A5:2A:05:49:9A:85:78:E8:CC:9F:DA:3A X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Qb7RJkNW5dqlKgVJmoV46Myf2jo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.237.160.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:f8:13:93:5a:72:8b:98:07:b1:68:64:1b:1b:6d:9c:e0:3f: 42:52:c6:65:e9:1c:b1:30:5d:dd:49:2c:8b:b0:56:9c:7e:6d: 40:f3:d5:31:fe:b7:10:1b:a1:ff:24:67:8d:52:d7:bd:af:6f: 46:55:d0:47:1f:80:80:14:ea:cb:98:76:4e:c2:37:85:62:e7: ce:6c:1f:2a:22:14:c6:6e:b2:5d:4f:ec:70:fe:13:92:8e:80: 94:8b:b7:6a:67:22:72:4a:17:c0:56:f6:b5:bf:12:ff:d8:bf: c1:85:76:f4:47:0c:65:91:cd:82:19:0c:36:40:d0:9c:59:f8: ab:01:4b:8e:0d:35:46:cb:28:0f:bf:9e:e0:ce:17:86:db:6f: 8a:71:d8:51:73:5f:31:e2:7d:1e:63:cb:97:ca:72:91:02:16: 30:04:0d:ef:9a:7d:db:8f:a8:d1:31:e6:d1:b1:db:1e:92:be: dd:8d:c2:fc:db:61:f6:45:13:cb:cf:03:1e:5e:26:20:d4:0e: ce:20:22:4b:61:63:fe:9e:72:cb:20:a3:bc:1a:e4:d9:da:e6: 5f:a5:bc:10:a0:67:80:05:f2:19:cb:68:85:7e:b5:98:f6:e7: 5b:0b:3c:a0:dc:6c:46:33:58:bd:b3:0a:e5:67:9c:d4:91:85: 58:6d:0e:e3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTI1MTAwMTAx Mjk0MVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNDFCRUQxMjY0MzU2RTVE QUE1MkEwNTQ5OUE4NTc4RThDQzlGREEzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALxMwR1cZ6bsT5vHpq9PUuydWvkNi/3PkoWtrZJ53+BpO7zkWBzY oqmUWOXjmh7jQ1Fb7ZAQkPHKDSjURXOZoDWsKy40FJupGtUu/j2qGOSfP9PJ6t2i fdgiV3/R2BUdCO/RLlcP7qMH61kp+9VD1UlxBAMns/ufnSLzP3D0Tb+YNY0eqywN tPxP/otqsMM2GGg0IDjyvGkgcAT8QGIFRtjkUk5FuBZA1AxUKPdiezKJfbj6t5tq esHrOWgHpcpT+4hgfW7qAvmLI3KdQU2BqHkYYj5Pcogqtbg+DpSYXco2m0KjgIkD ky5S8sNQJttw147z9SpJ5bmdI26BxX4n36UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRBvtEmQ1bl2qUqBUmahXjozJ/aOjAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvUWI3UkprTlc1ZHFsS2dWSm1vVjQ2TXlmMmpvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBKDtoDANBgkqhkiG9w0BAQsFAAOCAQEAa/gTk1pyi5gHsWhkGxttnOA/QlLG ZekcsTBd3Uksi7BWnH5tQPPVMf63EBuh/yRnjVLXva9vRlXQRx+AgBTqy5h2TsI3 hWLnzmwfKiIUxm6yXU/scP4Tko6AlIu3amcickoXwFb2tb8S/9i/wYV29EcMZZHN ghkMNkDQnFn4qwFLjg01RssoD7+e4M4XhttvinHYUXNfMeJ9HmPLl8pykQIWMAQN 75p924+o0THm0bHbHpK+3Y3C/Nth9kUTy88DHl4mINQOziAiS2Fj/p5yyyCjvBrk 2drmX6W8EKBngAXyGctohX61mPbnWws8oNxsRjNYvbMK5Wec1JGFWG0O4w== -----END CERTIFICATE-----Generated at Tue Oct 21 08:04:36 2025 by rpki-client