$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/w1SYH1Ou6UWGsPijFAQXLmGJFdE.roa File: w1SYH1Ou6UWGsPijFAQXLmGJFdE.roa (raw, json) Hash identifier: NrXGWThrpVkK+Bc8xsOk+91Ng4fWbi8XHrgkLV2OOY0= Subject key identifier: C3:54:98:1F:53:AE:E9:45:86:B0:F8:A3:14:04:17:2E:61:89:15:D1 Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11 Certificate serial: 64 Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/w1SYH1Ou6UWGsPijFAQXLmGJFdE.roa Signing time: Mon 01 Sep 2025 01:33:33 +0000 ROA not before: Mon 01 Sep 2025 01:33:33 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2515 IP address blocks: 202.1.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11 Validity Not Before: Sep 1 01:33:33 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=C354981F53AEE94586B0F8A31404172E618915D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b4:4c:a0:82:48:76:14:52:ec:3e:01:66:bb: d1:2c:d5:45:5e:2e:0d:ef:51:91:95:1d:ca:fa:c5: 6e:c3:76:8f:f7:9b:07:f7:66:a1:40:8e:fd:9b:3d: 4e:1f:6b:f3:c8:67:b3:c3:fb:29:be:ba:93:48:02: 46:52:04:05:89:2b:80:f3:45:e6:57:3e:b8:a0:bb: 71:d4:d7:c6:2e:26:0b:e7:fe:a1:44:53:e8:b8:41: 4a:48:1c:36:33:87:5d:b6:64:a2:83:f4:70:2c:2d: f1:7b:03:fb:7a:73:d9:57:f4:87:ca:d0:e0:10:c4: 28:b0:b6:ea:92:5d:6f:b7:ae:26:ed:7b:36:e1:5d: ef:75:31:19:71:31:1b:b5:d0:b0:f2:c8:55:b1:77: 59:33:33:2e:05:e6:32:b8:02:d8:82:de:da:27:1b: 92:df:43:81:03:84:e3:81:e8:eb:2a:fc:ea:2e:fc: 58:86:98:6e:10:ad:c7:c2:06:ab:b6:2b:6b:25:62: 6c:51:2f:e1:c3:72:5e:6a:1a:b1:65:3c:52:4a:17: 4b:ca:94:e0:1b:c0:3c:20:20:a5:c6:f7:4c:26:54: 4b:d9:66:89:0c:18:65:8c:52:bb:ef:85:ab:f1:ce: 9c:91:d9:e9:dd:fc:b9:9c:0c:a9:d4:b1:eb:15:46: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:54:98:1F:53:AE:E9:45:86:B0:F8:A3:14:04:17:2E:61:89:15:D1 X509v3 Authority Key Identifier: keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/w1SYH1Ou6UWGsPijFAQXLmGJFdE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.1.213.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:49:7d:f5:31:76:58:9f:75:9b:6a:21:83:fb:f4:74:72:6b: 67:4c:90:1d:33:9a:c2:28:61:c3:d8:99:7a:27:15:27:fc:de: 72:fa:35:64:e8:01:ea:b4:44:83:c1:1c:c6:f9:62:c0:e4:79: 21:6c:4b:69:03:a2:c7:64:23:3d:ba:46:b7:b0:e5:59:fc:e9: 7d:a6:59:3c:26:ef:ad:8f:05:93:d0:55:f9:d1:94:67:c1:e4: 10:62:27:67:f4:24:a9:37:a7:3a:f2:6c:07:d3:68:4d:54:6d: ef:d8:aa:4a:b7:f0:1d:32:97:7f:cd:00:d4:4c:bd:55:17:1a: 69:6b:a8:a4:22:41:a6:87:41:2b:db:3f:76:09:29:54:ff:1c: 79:29:e6:b4:70:79:e7:8d:e8:83:28:c9:ee:da:46:f8:af:2d: 82:69:7a:c6:44:45:5c:ea:59:e1:bd:b3:af:20:72:e2:5e:8e: f9:cd:52:65:72:33:73:6a:f8:70:7d:29:e4:43:02:3d:4d:aa: 8a:7d:3a:ce:82:07:1e:42:43:1e:2c:f8:50:0f:e7:8f:f2:89: ed:0b:c3:dc:3c:f6:db:79:88:18:b7:1f:38:3c:cc:15:00:3b: 3c:2c:fc:6c:48:e2:41:da:38:e5:bd:3f:b0:4c:10:03:11:47: 17:6c:d5:d9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1 RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI1MDkwMTAx MzMzM1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzM1NDk4MUY1M0FFRTk0 NTg2QjBGOEEzMTQwNDE3MkU2MTg5MTVEMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJa0TKCCSHYUUuw+AWa70SzVRV4uDe9RkZUdyvrFbsN2j/ebB/dm oUCO/Zs9Th9r88hns8P7Kb66k0gCRlIEBYkrgPNF5lc+uKC7cdTXxi4mC+f+oURT 6LhBSkgcNjOHXbZkooP0cCwt8XsD+3pz2Vf0h8rQ4BDEKLC26pJdb7euJu17NuFd 73UxGXExG7XQsPLIVbF3WTMzLgXmMrgC2ILe2icbkt9DgQOE44Ho6yr86i78WIaY bhCtx8IGq7YrayVibFEv4cNyXmoasWU8UkoXS8qU4BvAPCAgpcb3TCZUS9lmiQwY ZYxSu++Fq/HOnJHZ6d38uZwMqdSx6xVGNXECAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTDVJgfU67pRYaw+KMUBBcuYYkV0TAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA 9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTk5Ny93MVNZSDFPdTZVV0dzUGlqRkFRWExtR0pGZEUucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAygHVMA0GCSqGSIb3DQEBCwUAA4IBAQCaSX31MXZYn3WbaiGD+/R0cmtn TJAdM5rCKGHD2Jl6JxUn/N5y+jVk6AHqtESDwRzG+WLA5HkhbEtpA6LHZCM9uka3 sOVZ/Ol9plk8Ju+tjwWT0FX50ZRnweQQYidn9CSpN6c68mwH02hNVG3v2KpKt/Ad Mpd/zQDUTL1VFxppa6ikIkGmh0Er2z92CSlU/xx5Kea0cHnnjeiDKMnu2kb4ry2C aXrGREVc6lnhvbOvIHLiXo75zVJlcjNzavhwfSnkQwI9TaqKfTrOggceQkMeLPhQ D+eP8ontC8PcPPbbeYgYtx84PMwVADs8LPxsSOJB2jjlvT+wTBADEUcXbNXZ -----END CERTIFICATE-----Generated at Mon Oct 20 20:12:11 2025 by rpki-client