$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/KWjE0_4ubmhTfkj--JEuZOHDZ6s.roa File: KWjE0_4ubmhTfkj--JEuZOHDZ6s.roa (raw, json) Hash identifier: 2oF8X5OhYlVt9qI8x0RHPHF2A9UT67krISbtjPto4g8= Subject key identifier: 29:68:C4:D3:FE:2E:6E:68:53:7E:48:FE:F8:91:2E:64:E1:C3:67:AB Certificate issuer: /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Certificate serial: 3D Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KWjE0_4ubmhTfkj--JEuZOHDZ6s.roa Signing time: Tue 01 Apr 2025 01:28:21 +0000 ROA not before: Tue 01 Apr 2025 01:28:21 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 17958 IP address blocks: 218.40.96.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Validity Not Before: Apr 1 01:28:21 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=2968C4D3FE2E6E68537E48FEF8912E64E1C367AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:4f:dc:b6:fa:a7:0f:08:fb:7a:4f:31:df: 92:d6:e2:60:35:a1:6a:91:71:a2:e9:b7:6e:09:d8: 03:31:45:50:a6:89:54:f0:8a:45:56:a7:52:f7:e7: 6a:fc:00:2f:5b:d6:d3:74:b7:60:12:46:66:68:42: 78:c5:ad:0e:4a:e4:45:a6:3a:a2:8a:86:90:5b:d4: dd:71:30:3d:79:e0:c9:00:fd:a3:cc:f5:9a:06:27: 30:bb:45:cd:dd:12:01:a2:6c:c5:2a:07:b3:fa:6b: 57:7e:90:39:9e:bf:c9:bc:c7:0b:0c:a0:ad:c6:f1: e4:90:34:d3:da:e8:49:55:e8:94:7a:fe:ec:d4:d6: 1a:9f:b1:36:f8:48:6f:4a:9c:f0:29:a9:68:79:b7: d5:5b:c2:30:ae:14:ec:96:f2:d5:3f:ae:d5:51:e6: b0:67:e3:5b:50:3e:a8:2d:ff:51:17:9f:20:ab:c3: b7:33:12:ff:1a:44:73:02:a8:ab:c6:fb:8b:55:c0: 60:7e:5b:38:74:0b:4e:bf:d9:6b:7a:61:e6:6b:66: 7e:54:2a:dc:fe:ca:2e:b7:1a:fb:34:24:56:f8:6f: 6c:40:29:cf:8d:5c:7d:cf:d3:95:4b:a7:0a:86:8e: a3:b6:04:05:c3:ab:1d:01:49:e5:1a:f5:04:45:ba: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:68:C4:D3:FE:2E:6E:68:53:7E:48:FE:F8:91:2E:64:E1:C3:67:AB X509v3 Authority Key Identifier: keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KWjE0_4ubmhTfkj--JEuZOHDZ6s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.40.96.0/20 Signature Algorithm: sha256WithRSAEncryption b8:d3:38:bf:34:a2:43:de:d4:4d:90:77:9e:74:8e:22:f9:9d: eb:a3:49:37:1c:61:2d:75:f0:8b:3e:46:a9:a4:73:5c:51:c1: cb:22:26:16:41:26:a8:04:ad:be:7f:50:b7:af:4c:98:46:75: 96:e4:ca:e4:0b:e7:67:ba:d3:27:d7:17:22:4b:6f:e9:56:49: ca:24:33:f2:48:6f:dc:f4:bd:00:9d:12:1c:a6:e7:fe:c5:c5: 37:21:f8:b4:b8:e2:5b:39:38:9f:aa:14:dc:83:47:ef:8b:71: 67:a9:45:b2:8c:44:73:b9:8b:90:81:2e:86:b1:31:c0:f4:a8: 32:e9:ff:a4:90:7a:16:db:90:80:0f:74:68:fa:1b:1b:d6:cd: dc:de:cc:0c:d3:27:08:2f:ce:f0:37:6e:ad:b3:cd:7a:af:91: 44:fa:0c:87:c0:b1:8f:6b:c5:06:54:39:e7:68:54:83:00:d0: cb:97:e3:c9:ea:12:54:f2:a1:c3:04:2b:36:e7:09:df:c6:90: 31:92:48:be:ef:19:53:59:fe:f2:53:72:83:17:b0:38:2b:3b: e2:52:3d:c4:3d:9a:9e:b9:c9:1c:f0:49:21:e7:4b:30:63:35: c8:02:90:3b:c2:d2:66:db:7c:5a:17:75:ef:99:00:f0:0f:58: 55:5d:63:8c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTI1MDQwMTAx MjgyMVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMjk2OEM0RDNGRTJFNkU2 ODUzN0U0OEZFRjg5MTJFNjRFMUMzNjdBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJSKT9y2+qcPCPt6TzHfktbiYDWhapFxoum3bgnYAzFFUKaJVPCK RVanUvfnavwAL1vW03S3YBJGZmhCeMWtDkrkRaY6ooqGkFvU3XEwPXngyQD9o8z1 mgYnMLtFzd0SAaJsxSoHs/prV36QOZ6/ybzHCwygrcbx5JA009roSVXolHr+7NTW Gp+xNvhIb0qc8CmpaHm31VvCMK4U7Jby1T+u1VHmsGfjW1A+qC3/URefIKvDtzMS /xpEcwKoq8b7i1XAYH5bOHQLTr/Za3ph5mtmflQq3P7KLrca+zQkVvhvbEApz41c fc/TlUunCoaOo7YEBcOrHQFJ5Rr1BEW6+yUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQpaMTT/i5uaFN+SP74kS5k4cNnqzAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NzkvS1dqRTBfNHVibWhUZmtqLS1KRXVaT0hEWjZzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNooYDANBgkqhkiG9w0BAQsFAAOCAQEAuNM4vzSiQ97UTZB3nnSOIvmd66NJ NxxhLXXwiz5GqaRzXFHByyImFkEmqAStvn9Qt69MmEZ1luTK5AvnZ7rTJ9cXIktv 6VZJyiQz8khv3PS9AJ0SHKbn/sXFNyH4tLjiWzk4n6oU3INH74txZ6lFsoxEc7mL kIEuhrExwPSoMun/pJB6FtuQgA90aPobG9bN3N7MDNMnCC/O8DdurbPNeq+RRPoM h8Cxj2vFBlQ552hUgwDQy5fjyeoSVPKhwwQrNucJ38aQMZJIvu8ZU1n+8lNygxew OCs74lI9xD2anrnJHPBJIedLMGM1yAKQO8LSZtt8Whd175kA8A9YVV1jjA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:00:09 2025 by rpki-client