$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/ia9mObqj8pJ5yS_1NhQF6jPNd8A.roa File: ia9mObqj8pJ5yS_1NhQF6jPNd8A.roa (raw, json) Hash identifier: GiKJP8azOwzu+roVKtnb6f7x+Ft8DdrwfW/G9J4r1DU= Subject key identifier: 89:AF:66:39:BA:A3:F2:92:79:C9:2F:F5:36:14:05:EA:33:CD:77:C0 Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 90 Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/ia9mObqj8pJ5yS_1NhQF6jPNd8A.roa Signing time: Wed 01 Oct 2025 01:33:36 +0000 ROA not before: Wed 01 Oct 2025 01:33:36 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 18260 IP address blocks: 219.100.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Oct 1 01:33:36 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=89AF6639BAA3F29279C92FF5361405EA33CD77C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:28:b2:26:d9:d3:9d:1e:a6:b4:e2:6d:83: 49:36:1e:3c:2d:2f:41:10:f3:f8:60:a5:74:07:66: b1:3d:9c:f8:6c:8a:f8:da:c6:ea:f8:fb:06:3e:08: 08:57:a4:69:38:f8:07:b1:88:08:a9:b0:99:81:7f: 48:f0:d4:a0:11:31:54:85:6d:d3:45:6e:6c:e5:29: 96:2b:52:40:62:36:2d:fe:48:f9:3c:13:8c:e6:a9: 80:d7:f5:9e:b8:84:51:a4:15:33:3f:93:ff:af:f8: 7b:53:89:49:45:1a:6e:cd:1c:0c:93:74:e0:23:f7: da:c6:c3:ba:e7:c9:de:5f:11:56:83:be:aa:9d:c7: b0:5a:94:6d:97:44:f6:0b:f7:7b:68:31:c7:d0:2f: c9:b8:0e:bb:9a:5f:be:c0:81:f7:38:4b:e9:5f:ef: 91:14:d1:eb:a3:d4:88:f7:02:d0:60:15:38:85:fc: 91:a8:13:9e:5b:7e:aa:b7:00:f9:24:91:50:a4:be: ea:cb:36:b9:6c:98:a5:e6:56:da:2e:38:e5:3d:cb: 0d:02:1f:e2:3d:b2:6f:bb:77:e3:d6:0c:52:bf:09: 73:2f:3b:25:8f:e7:38:17:0f:8d:b0:da:0b:12:c2: 5b:4d:90:49:7d:40:d0:5c:3d:f9:2c:b4:01:a6:cc: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AF:66:39:BA:A3:F2:92:79:C9:2F:F5:36:14:05:EA:33:CD:77:C0 X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/ia9mObqj8pJ5yS_1NhQF6jPNd8A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.172.0/22 Signature Algorithm: sha256WithRSAEncryption 12:1d:d7:f2:01:09:9c:41:9e:b4:3d:60:d5:8e:3f:f6:fb:5d: 94:7e:ae:34:e4:f6:d9:f4:e1:62:6c:46:8d:82:7e:58:6f:8c: 72:34:b2:f2:aa:24:0a:d4:f2:68:12:16:cb:0e:04:ef:d9:61: 92:ff:22:05:5e:2a:0c:6f:c1:77:4c:3b:a5:24:65:e4:25:86: 18:b7:2f:d5:c0:cb:41:a9:00:19:e2:db:dc:f7:33:a4:cc:f9: 94:9c:ce:53:88:10:cf:93:0d:a5:2d:d1:b7:fd:85:5c:67:12: 91:66:2b:86:0b:ba:4c:5e:59:6c:f4:47:8f:dc:dd:5c:25:75: c2:db:9b:83:f9:da:c2:81:55:91:c7:ad:7b:37:bf:68:1b:09: 5e:6a:dc:01:2f:ab:a8:81:f7:57:29:73:18:2d:8d:dc:14:05: 72:c2:28:59:a8:c9:a3:38:ca:db:cb:f9:82:16:d1:88:8b:15: b8:03:f2:04:e8:91:79:28:cf:69:09:5d:0b:c3:51:bc:ca:01: 13:1f:f3:4c:0f:be:91:ed:0d:96:5f:e2:da:1b:b1:fe:de:05: 63:2c:ad:9e:ec:40:6f:46:08:c8:b9:b4:20:65:ef:40:7a:f2: c1:f5:46:63:56:4b:8a:03:52:8c:c1:82:b8:87:89:3b:ec:85: 2e:7f:86:ca -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTFB Q0E0NDI3NUVDMDU3MkJDNjkyMTUwMkIyNDFDMTRENDRBOUFBMTAeFw0yNTEwMDEw MTMzMzZaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg5QUY2NjM5QkFBM0Yy OTI3OUM5MkZGNTM2MTQwNUVBMzNDRDc3QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCV1iiyJtnTnR6mtOJtg0k2HjwtL0EQ8/hgpXQHZrE9nPhsivja xur4+wY+CAhXpGk4+AexiAipsJmBf0jw1KARMVSFbdNFbmzlKZYrUkBiNi3+SPk8 E4zmqYDX9Z64hFGkFTM/k/+v+HtTiUlFGm7NHAyTdOAj99rGw7rnyd5fEVaDvqqd x7BalG2XRPYL93toMcfQL8m4DruaX77Agfc4S+lf75EU0euj1Ij3AtBgFTiF/JGo E55bfqq3APkkkVCkvurLNrlsmKXmVtouOOU9yw0CH+I9sm+7d+PWDFK/CXMvOyWP 5zgXD42w2gsSwltNkEl9QNBcPfkstAGmzF2xAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUia9mObqj8pJ5yS/1NhQF6jPNd8AwHwYDVR0jBBgwFoAUkaykQnXsBXK8aSFQ KyQcFNRKmqEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzczMS9rYXlrUW5Yc0JYSzhhU0ZRS3lRY0ZOUkttcUUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9rYXlrUW5Yc0JYSzhhU0ZRS3lRY0ZO UkttcUUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNzMxL2lhOW1PYnFqOHBKNXlTXzFOaFFGNmpQTmQ4QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbZKwwDQYJKoZIhvcNAQELBQADggEBABId1/IBCZxBnrQ9YNWOP/b7XZR+ rjTk9tn04WJsRo2CflhvjHI0svKqJArU8mgSFssOBO/ZYZL/IgVeKgxvwXdMO6Uk ZeQlhhi3L9XAy0GpABni29z3M6TM+ZSczlOIEM+TDaUt0bf9hVxnEpFmK4YLukxe WWz0R4/c3VwldcLbm4P52sKBVZHHrXs3v2gbCV5q3AEvq6iB91cpcxgtjdwUBXLC KFmoyaM4ytvL+YIW0YiLFbgD8gTokXkoz2kJXQvDUbzKARMf80wPvpHtDZZf4tob sf7eBWMsrZ7sQG9GCMi5tCBl70B68sH1RmNWS4oDUozBgriHiTvshS5/hso= -----END CERTIFICATE-----Generated at Mon Oct 20 20:53:06 2025 by rpki-client