$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/nOr_eDWcT5_nwH4V5MlTHFsvH1s.roa File: nOr_eDWcT5_nwH4V5MlTHFsvH1s.roa (raw, json) Hash identifier: O48gmSpP8fTHPk77jtQolo49y0IKcrCKvC0WXmogSO0= Subject key identifier: 9C:EA:FF:78:35:9C:4F:9F:E7:C0:7E:15:E4:C9:53:1C:5B:2F:1F:5B Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376 Certificate serial: 84 Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/nOr_eDWcT5_nwH4V5MlTHFsvH1s.roa Signing time: Wed 01 Oct 2025 01:34:13 +0000 ROA not before: Wed 01 Oct 2025 01:34:13 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 7514 IP address blocks: 120.89.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28393FAE129B501824696BAE24B64734A203C376 Validity Not Before: Oct 1 01:34:13 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=9CEAFF78359C4F9FE7C07E15E4C9531C5B2F1F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:34:dc:57:1a:a4:fd:64:58:ec:bd:3b:82: 1b:ce:e0:c4:0f:a6:17:ca:27:71:f8:9a:b6:bd:8d: 1a:df:b6:18:8b:bd:61:c5:db:38:49:20:1e:ed:c3: 38:9a:04:af:90:72:79:03:8e:75:1c:98:83:d0:74: 70:de:da:86:7d:a8:f0:24:e7:27:a5:11:48:15:1e: f7:b2:7d:6c:fc:a6:3a:5e:9c:d7:c3:a5:d1:f1:41: 45:07:05:92:8e:ee:c3:87:b5:c1:f5:32:85:e5:26: f9:2a:f8:70:06:55:eb:21:48:7b:25:c8:37:e1:fd: 7c:4d:c0:5e:3c:d5:b3:ac:91:0b:fa:c0:a2:e4:70: ce:3b:c0:50:7a:6f:4f:82:0a:eb:c2:44:c3:49:00: e9:21:ab:ef:f3:af:da:73:cf:ef:25:58:b7:34:4f: 14:d6:4b:cb:5f:6a:93:a4:b2:3a:24:40:76:f4:68: 63:88:4f:d5:71:e7:16:58:3b:09:f7:a1:16:6c:59: e8:9e:ad:1c:39:05:3f:36:e6:8f:3e:b4:e6:b1:25: 31:ae:de:97:a5:f2:c4:9d:45:8a:e1:ee:5a:98:67: 55:9e:4a:52:5c:ea:0e:75:d0:e3:a2:3b:84:70:64: 00:4c:58:49:ae:06:7c:0f:cd:2a:15:7a:5a:f0:9b: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EA:FF:78:35:9C:4F:9F:E7:C0:7E:15:E4:C9:53:1C:5B:2F:1F:5B X509v3 Authority Key Identifier: keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/nOr_eDWcT5_nwH4V5MlTHFsvH1s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.89.128.0/17 Signature Algorithm: sha256WithRSAEncryption ba:20:a0:72:6b:68:f2:9d:72:1a:9d:ad:3d:12:33:fc:d4:b1: cf:35:0f:20:d0:a8:3a:16:46:a9:47:12:2f:0a:27:8f:53:e0: b7:f9:99:40:62:a9:d2:db:7c:0b:51:d5:c8:c6:6c:2c:8f:7e: f3:6f:6a:98:06:96:a1:ff:0b:b7:a3:bc:28:31:c2:19:ca:39: 62:dc:7b:99:4b:f2:1e:92:e1:6b:10:36:92:3a:4b:b1:d6:80: 36:59:35:74:ba:17:7c:2f:8b:dc:42:46:6c:cb:02:06:f5:76: f9:fa:fd:04:f1:6c:34:8d:77:95:c2:90:e8:2b:30:20:e2:8f: 1e:cc:29:54:18:54:a6:44:12:df:33:b3:27:55:34:13:a6:b1: da:3a:15:ba:06:26:1e:51:cc:1d:bd:fe:b5:6c:80:c0:8b:19: cd:c0:f2:11:0c:b9:7a:b7:35:22:34:f2:ac:a1:f3:5d:82:fe: 13:fd:0e:39:25:0d:3f:4a:af:57:1d:ac:5e:c6:cc:4e:e3:99: 86:ab:65:ac:eb:a0:e2:bf:7d:1d:0b:00:6d:49:8e:2f:12:66: 97:9f:6d:9a:b8:12:23:0f:d2:35:7c:f7:45:4b:c9:7c:15:e5: 4d:20:2b:2d:6a:eb:e0:c0:e8:a1:2e:d5:c1:89:3f:e1:b9:a4: cc:d5:c5:66 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgz OTNGQUUxMjlCNTAxODI0Njk2QkFFMjRCNjQ3MzRBMjAzQzM3NjAeFw0yNTEwMDEw MTM0MTNaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlDRUFGRjc4MzU5QzRG OUZFN0MwN0UxNUU0Qzk1MzFDNUIyRjFGNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMEzTcVxqk/WRY7L07ghvO4MQPphfKJ3H4mra9jRrfthiLvWHF 2zhJIB7twziaBK+QcnkDjnUcmIPQdHDe2oZ9qPAk5yelEUgVHveyfWz8pjpenNfD pdHxQUUHBZKO7sOHtcH1MoXlJvkq+HAGVeshSHslyDfh/XxNwF481bOskQv6wKLk cM47wFB6b0+CCuvCRMNJAOkhq+/zr9pzz+8lWLc0TxTWS8tfapOksjokQHb0aGOI T9Vx5xZYOwn3oRZsWeierRw5BT825o8+tOaxJTGu3pel8sSdRYrh7lqYZ1WeSlJc 6g510OOiO4RwZABMWEmuBnwPzSoVelrwmza1AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUnOr/eDWcT5/nwH4V5MlTHFsvH1swHwYDVR0jBBgwFoAUKDk/rhKbUBgkaWuu JLZHNKIDw3YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwNzYyL0tEa19yaEtiVUJna2FXdXVKTFpITktJRHczWS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0tEa19yaEtiVUJna2FXdXVKTFpI TktJRHczWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDc2Mi9uT3JfZURXY1Q1X253SDRWNU1sVEhGc3ZIMXMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQHeFmAMA0GCSqGSIb3DQEBCwUAA4IBAQC6IKBya2jynXIana09EjP8 1LHPNQ8g0Kg6FkapRxIvCiePU+C3+ZlAYqnS23wLUdXIxmwsj37zb2qYBpah/wu3 o7woMcIZyjli3HuZS/IekuFrEDaSOkux1oA2WTV0uhd8L4vcQkZsywIG9Xb5+v0E 8Ww0jXeVwpDoKzAg4o8ezClUGFSmRBLfM7MnVTQTprHaOhW6BiYeUcwdvf61bIDA ixnNwPIRDLl6tzUiNPKsofNdgv4T/Q45JQ0/Sq9XHaxexsxO45mGq2Ws66Div30d CwBtSY4vEmaXn22auBIjD9I1fPdFS8l8FeVNICstauvgwOihLtXBiT/huaTM1cVm -----END CERTIFICATE-----Generated at Wed Nov 5 23:34:20 2025 by rpki-client