$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/cQCGYUEVV19pvaL_DQbmsXiiJMQ.roa File: cQCGYUEVV19pvaL_DQbmsXiiJMQ.roa (raw, json) Hash identifier: 829a+M3gyNhrgRgICc1E1J+7vIYHkhNP2wHHpB+dCXI= Subject key identifier: 71:00:86:61:41:15:57:5F:69:BD:A2:FF:0D:06:E6:B1:78:A2:24:C4 Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 68 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/cQCGYUEVV19pvaL_DQbmsXiiJMQ.roa Signing time: Wed 01 Oct 2025 01:29:43 +0000 ROA not before: Wed 01 Oct 2025 01:29:43 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 131925 IP address blocks: 160.237.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Oct 1 01:29:43 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=710086614115575F69BDA2FF0D06E6B178A224C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:1c:a0:2f:22:9b:3b:18:83:f5:ee:51:04: 89:ac:72:53:a5:b7:95:ae:b2:6a:de:d9:71:64:a9: 35:3e:d9:fb:23:db:6c:85:bb:6b:ad:43:ae:e1:2a: e5:be:3b:fb:4b:05:05:71:4a:25:d0:cc:91:2c:c7: 4b:e3:cb:55:90:80:8f:81:e0:fa:71:9d:5a:3f:0e: 70:7a:ca:dd:06:5d:21:78:d6:1f:e3:ed:9b:a6:c7: ed:f8:21:55:b3:fa:32:bb:9b:a9:58:50:df:74:4c: 42:ff:8f:60:e0:8d:46:06:59:7f:15:52:db:e2:67: 63:12:f6:2f:a5:86:53:35:91:db:2c:fb:8e:48:99: 38:d8:40:d1:24:69:1c:a0:c5:e1:9d:77:3a:aa:7f: bf:5d:3a:2e:7f:ac:9d:4a:a9:4b:e9:cc:a2:f4:ba: 44:4b:88:cb:0a:43:9b:a5:f3:5b:4e:81:9b:4a:00: 2f:6a:8b:c4:90:35:67:78:fe:d5:a0:5a:15:b7:59: e2:6a:35:b3:eb:1f:d1:10:63:8d:cb:34:35:7d:af: d6:64:0d:6a:04:6f:64:7a:47:2f:c2:8c:47:65:23: 07:75:f0:0f:5e:29:2c:79:3a:95:65:6e:d1:90:d4: 2a:a5:c2:50:60:cb:f8:7f:6c:2e:a6:f7:86:bf:05: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:00:86:61:41:15:57:5F:69:BD:A2:FF:0D:06:E6:B1:78:A2:24:C4 X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/cQCGYUEVV19pvaL_DQbmsXiiJMQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.237.188.0/23 Signature Algorithm: sha256WithRSAEncryption c5:d6:55:34:eb:a1:10:db:93:81:00:df:90:14:2b:f7:f2:ea: a3:38:49:0c:37:cd:0f:6b:38:f1:23:51:32:1a:40:68:a8:56: e0:7f:04:57:32:74:8c:04:dc:37:08:be:4e:8a:77:55:43:c9: be:e5:9d:af:c2:53:6a:ec:d0:87:08:c3:c8:48:15:ce:8e:dc: 48:4c:eb:28:3c:85:24:46:21:ee:ad:c8:4c:1a:52:5a:1e:a4: 4f:47:78:ed:63:f9:5a:1c:be:c6:25:59:d5:30:56:97:8b:dd: 5e:ef:13:f8:fc:9b:58:6d:61:47:5e:cc:c8:7d:66:0f:dc:5e: e6:c9:9d:32:c2:d6:b7:24:93:b9:47:73:57:cc:b6:71:d2:bc: 22:56:f3:4a:7d:a6:46:a4:fb:f0:60:b9:b8:5a:1e:16:3f:b3: a4:91:3a:13:4e:f5:0a:c6:c2:57:21:7a:78:61:92:92:49:2e: ba:44:84:da:76:20:f2:ff:c8:de:c9:a8:6d:fc:c2:1c:5b:ee: 4c:51:8d:5e:bd:86:c2:d7:09:1a:f1:27:3f:69:f0:d0:71:19: 30:12:6c:86:e8:62:48:2c:77:fb:d1:1d:b4:57:1c:35:61:43: 6e:19:fd:57:1b:c1:13:14:86:c6:5f:db:80:87:8a:21:d9:3c: 29:7d:3b:1d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTI1MTAwMTAx Mjk0M1oXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNzEwMDg2NjE0MTE1NTc1 RjY5QkRBMkZGMEQwNkU2QjE3OEEyMjRDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOrFHKAvIps7GIP17lEEiaxyU6W3la6yat7ZcWSpNT7Z+yPbbIW7 a61DruEq5b47+0sFBXFKJdDMkSzHS+PLVZCAj4Hg+nGdWj8OcHrK3QZdIXjWH+Pt m6bH7fghVbP6MrubqVhQ33RMQv+PYOCNRgZZfxVS2+JnYxL2L6WGUzWR2yz7jkiZ ONhA0SRpHKDF4Z13Oqp/v106Ln+snUqpS+nMovS6REuIywpDm6XzW06Bm0oAL2qL xJA1Z3j+1aBaFbdZ4mo1s+sf0RBjjcs0NX2v1mQNagRvZHpHL8KMR2UjB3XwD14p LHk6lWVu0ZDUKqXCUGDL+H9sLqb3hr8FtRMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRxAIZhQRVXX2m9ov8NBuaxeKIkxDAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvY1FDR1lVRVZWMTlwdmFMX0RRYm1zWGlpSk1RLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAaDtvDANBgkqhkiG9w0BAQsFAAOCAQEAxdZVNOuhENuTgQDfkBQr9/LqozhJ DDfND2s48SNRMhpAaKhW4H8EVzJ0jATcNwi+Top3VUPJvuWdr8JTauzQhwjDyEgV zo7cSEzrKDyFJEYh7q3ITBpSWh6kT0d47WP5Why+xiVZ1TBWl4vdXu8T+PybWG1h R17MyH1mD9xe5smdMsLWtySTuUdzV8y2cdK8IlbzSn2mRqT78GC5uFoeFj+zpJE6 E071CsbCVyF6eGGSkkkuukSE2nYg8v/I3smobfzCHFvuTFGNXr2GwtcJGvEnP2nw 0HEZMBJshuhiSCx3+9EdtFccNWFDbhn9VxvBExSGxl/bgIeKIdk8KX07HQ== -----END CERTIFICATE-----Generated at Tue Oct 21 08:04:34 2025 by rpki-client