$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/TN9bYAPqbo23Wcnw4TON1MEmsQo.roa File: TN9bYAPqbo23Wcnw4TON1MEmsQo.roa (raw, json) Hash identifier: BpMsX053nrtaecMgDDU7zFJLnxn6VQmw2LyxOyOSc8w= Subject key identifier: 4C:DF:5B:60:03:EA:6E:8D:B7:59:C9:F0:E1:33:8D:D4:C1:26:B1:0A Certificate issuer: /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Certificate serial: 2B Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/TN9bYAPqbo23Wcnw4TON1MEmsQo.roa Signing time: Fri 01 Aug 2025 01:35:57 +0000 ROA not before: Fri 01 Aug 2025 01:35:57 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 4695 IP address blocks: 210.141.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 19:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Validity Not Before: Aug 1 01:35:57 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=4CDF5B6003EA6E8DB759C9F0E1338DD4C126B10A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:03:43:fd:da:47:c9:9e:ec:bc:88:dd:dd: 0b:23:ae:5b:15:b0:3f:f0:44:3d:58:92:7f:6a:c0: 81:1e:f7:69:cb:57:75:61:48:25:a9:38:9c:ba:ac: df:73:35:39:f8:a8:c2:7d:3f:b4:d2:e4:69:90:68: b7:05:6b:62:ea:96:30:31:81:3c:39:b4:45:0d:7a: 9a:23:98:f9:70:7a:e3:1a:41:62:9f:27:ab:30:4c: f7:6c:22:72:bd:48:da:55:52:b8:d9:90:01:58:b8: 4e:9d:48:9c:34:46:e5:c2:fd:90:54:9b:68:ec:bc: 50:f8:a9:e7:3b:29:35:f2:09:d1:96:02:71:ba:47: 83:17:1a:54:35:fe:8a:e2:1d:a5:07:23:2d:9d:40: fa:84:90:df:a0:b4:28:e8:c3:45:4e:5f:9c:cb:5a: 08:83:5d:d7:7d:a6:6c:1a:b9:e2:fe:91:83:d8:c6: d0:70:f4:89:f3:4a:8a:a4:bd:1d:fd:8f:8c:7d:90: 3b:0d:fc:9e:6e:37:74:9d:05:f4:c1:ca:f7:72:6c: 98:1d:6d:b5:ab:1f:9b:42:bf:3f:46:24:55:61:2d: 03:75:e0:14:fd:31:01:7b:37:49:56:50:ff:b7:94: 8d:14:b9:a2:f1:62:d1:49:85:b9:95:36:69:95:47: 71:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DF:5B:60:03:EA:6E:8D:B7:59:C9:F0:E1:33:8D:D4:C1:26:B1:0A X509v3 Authority Key Identifier: keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/TN9bYAPqbo23Wcnw4TON1MEmsQo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.141.160.0/20 Signature Algorithm: sha256WithRSAEncryption a0:bb:53:68:0b:66:c0:46:39:47:fa:cf:76:5a:b5:2d:dd:07: d2:07:8c:92:9e:2f:36:2f:53:7e:6c:0c:2e:94:1c:88:22:8b: e1:10:1a:2b:01:b0:af:48:42:85:59:dd:e5:61:c1:b7:f8:5c: 53:bf:a6:1e:cb:02:c2:3d:f8:3f:58:e5:5c:57:23:57:dc:70: 46:fd:55:9c:0c:e0:c3:bc:be:1d:3b:4f:e2:59:b6:95:d4:5d: a0:ac:95:4c:87:cf:d3:17:9b:87:ee:82:4d:aa:4f:d0:10:53: 99:c3:4e:46:b4:0e:f3:ac:61:d0:59:c7:e5:f3:bf:0a:76:ee: 1b:3a:58:ac:c9:f3:64:17:b9:f6:fd:b1:ce:a6:4e:76:f5:04: 69:3e:d5:ff:e7:c9:66:c8:ef:db:02:5e:95:e7:9c:c1:4e:b1: 92:2f:2d:72:a6:3f:d4:52:29:2a:30:fa:65:4b:87:62:94:dd: de:d9:2f:03:b0:64:8b:03:5d:0a:f2:53:d8:42:01:ed:e5:db: 9b:f3:4d:a8:32:69:cd:f9:72:26:f1:90:23:4c:14:5b:9c:a1: 90:86:ed:37:13:a2:b0:51:17:a3:37:21:0d:52:f3:d7:50:27: d5:b2:f7:7a:38:51:71:5b:92:71:ed:0b:c6:37:1f:8e:c2:0f: 43:43:09:d4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDhG NDhGOTlDNUIwNzQ1Qjc3RjhCQ0E3NTRFNjM4ODVDQURDNDE4MB4XDTI1MDgwMTAx MzU1N1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNENERjVCNjAwM0VBNkU4 REI3NTlDOUYwRTEzMzhERDRDMTI2QjEwQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALr4A0P92kfJnuy8iN3dCyOuWxWwP/BEPViSf2rAgR73actXdWFI Jak4nLqs33M1Ofiown0/tNLkaZBotwVrYuqWMDGBPDm0RQ16miOY+XB64xpBYp8n qzBM92wicr1I2lVSuNmQAVi4Tp1InDRG5cL9kFSbaOy8UPip5zspNfIJ0ZYCcbpH gxcaVDX+iuIdpQcjLZ1A+oSQ36C0KOjDRU5fnMtaCINd132mbBq54v6Rg9jG0HD0 ifNKiqS9Hf2PjH2QOw38nm43dJ0F9MHK93JsmB1ttasfm0K/P0YkVWEtA3XgFP0x AXs3SVZQ/7eUjRS5ovFi0UmFuZU2aZVHcY0CAwEAAaOCAiIwggIeMB0GA1UdDgQW BBRM31tgA+pujbdZyfDhM43UwSaxCjAfBgNVHSMEGDAWgBRdj0j5nFsHRbd/i8p1 TmOIXK3EGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTQvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0eEJnLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0 eEJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzU0L1ROOWJZQVBxYm8yM1djbnc0VE9OMU1FbXNRby5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATSjaAwDQYJKoZIhvcNAQELBQADggEBAKC7U2gLZsBGOUf6z3ZatS3dB9IHjJKe LzYvU35sDC6UHIgii+EQGisBsK9IQoVZ3eVhwbf4XFO/ph7LAsI9+D9Y5VxXI1fc cEb9VZwM4MO8vh07T+JZtpXUXaCslUyHz9MXm4fugk2qT9AQU5nDTka0DvOsYdBZ x+Xzvwp27hs6WKzJ82QXufb9sc6mTnb1BGk+1f/nyWbI79sCXpXnnMFOsZIvLXKm P9RSKSow+mVLh2KU3d7ZLwOwZIsDXQryU9hCAe3l25vzTagyac35cibxkCNMFFuc oZCG7TcTorBRF6M3IQ1S89dQJ9Wy93o4UXFbknHtC8Y3H47CD0NDCdQ= -----END CERTIFICATE-----Generated at Sat Aug 23 22:28:01 2025 by rpki-client