$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/1KfvnydsSvOlr7qfBj4j75L_1LQ.roa File: 1KfvnydsSvOlr7qfBj4j75L_1LQ.roa (raw, json) Hash identifier: l0KTqYxSfgyJGfD2A2Fd+AmFt9lWhpaBDtN98RC0UWw= Subject key identifier: D4:A7:EF:9F:27:6C:4A:F3:A5:AF:BA:9F:06:3E:23:EF:92:FF:D4:B4 Certificate issuer: /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Certificate serial: 49 Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/1KfvnydsSvOlr7qfBj4j75L_1LQ.roa Signing time: Sat 01 Nov 2025 01:35:00 +0000 ROA not before: Sat 01 Nov 2025 01:35:00 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 131923 IP address blocks: 103.95.104.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3 Validity Not Before: Nov 1 01:35:00 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=D4A7EF9F276C4AF3A5AFBA9F063E23EF92FFD4B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:3e:97:1d:56:a3:da:3f:04:e3:ae:36:bc: 85:38:2a:12:da:82:8b:64:bf:4d:e8:c6:6a:4a:69: 19:c3:bd:18:e2:c9:67:bb:87:ba:f3:5a:7e:55:19: 13:8d:71:75:a5:62:8c:bb:78:7f:49:df:b3:54:13: 67:34:d4:d3:dc:96:ce:02:f3:14:a6:45:59:e1:9f: 20:51:16:76:25:c6:a4:15:8b:41:0d:08:4a:53:7e: 22:9f:2f:a2:75:46:f0:f6:b3:5c:5e:5c:9c:52:b3: cb:ec:e3:e8:3c:f0:bb:42:08:b2:ff:af:5f:3d:77: 63:93:e7:bd:4b:2a:f5:a0:29:6c:c1:e4:7f:f9:e6: 1d:7d:13:77:b3:ca:10:ab:b3:ea:86:05:83:5a:7b: ad:41:fa:4d:2b:8b:5e:ba:d6:8f:84:fc:f4:1e:ce: 21:53:d6:db:00:2e:5f:aa:1e:5d:af:75:b1:3d:58: 47:01:a1:ed:a8:86:24:a9:02:71:74:35:21:9e:94: ba:9a:8f:49:0b:f6:39:3a:93:71:3f:3c:4a:32:9a: ae:fa:6e:4d:ab:32:0d:29:2e:bc:79:01:64:91:d3: 4b:47:e6:0d:38:41:a3:71:24:b9:eb:8c:f2:78:6f: d8:8d:88:6e:9d:b7:73:93:91:1c:b2:63:89:ce:eb: 22:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A7:EF:9F:27:6C:4A:F3:A5:AF:BA:9F:06:3E:23:EF:92:FF:D4:B4 X509v3 Authority Key Identifier: keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/1KfvnydsSvOlr7qfBj4j75L_1LQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.95.104.0/22 Signature Algorithm: sha256WithRSAEncryption 36:00:eb:72:8d:20:9d:6e:9b:f9:f2:83:19:4e:d4:7b:b5:5a: cf:6d:b2:fd:13:e4:80:ec:3b:26:83:db:f1:2c:ec:3f:4a:99: 75:04:49:f8:24:ac:50:e9:94:9b:f3:62:47:f4:b6:5a:ec:32: 12:7e:73:9b:0f:ae:ef:6a:21:93:88:7a:25:40:c0:bd:38:6d: bf:90:10:b3:03:ad:f0:19:1e:e5:a0:fe:68:ee:17:31:6f:56: 0e:2d:f7:84:21:d2:a7:5c:bb:0a:8a:4e:3b:29:bc:a5:e4:5d: 8c:90:9d:8f:47:2d:40:6f:b2:1f:8d:71:db:49:3e:2b:0f:1a: ca:a0:73:75:5a:d5:7c:2f:54:dd:f1:ac:b0:ab:6e:62:e2:9f: bd:8d:e8:f0:10:93:28:73:71:e1:69:d3:7a:62:72:4c:6f:6a: 77:80:03:f2:4c:ab:aa:1d:fc:52:1a:a8:81:6b:f0:64:09:d4: e6:4d:66:0a:76:4e:fa:4c:90:09:cc:03:c5:59:21:e5:d6:e9: dc:dc:2e:a7:2d:0f:c7:1e:28:44:36:3d:9e:cc:30:44:6d:81: 99:62:e2:e7:a1:f8:43:e3:96:e3:34:b5:7a:66:e0:95:73:06: 95:35:1f:09:12:06:de:06:13:b5:8c:22:d1:3a:db:33:ce:88: 3f:3f:9e:6c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI1MTEwMTAx MzUwMFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRDRBN0VGOUYyNzZDNEFG M0E1QUZCQTlGMDYzRTIzRUY5MkZGRDRCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMhtPpcdVqPaPwTjrja8hTgqEtqCi2S/TejGakppGcO9GOLJZ7uH uvNaflUZE41xdaVijLt4f0nfs1QTZzTU09yWzgLzFKZFWeGfIFEWdiXGpBWLQQ0I SlN+Ip8vonVG8PazXF5cnFKzy+zj6Dzwu0IIsv+vXz13Y5PnvUsq9aApbMHkf/nm HX0Td7PKEKuz6oYFg1p7rUH6TSuLXrrWj4T89B7OIVPW2wAuX6oeXa91sT1YRwGh 7aiGJKkCcXQ1IZ6UupqPSQv2OTqTcT88SjKarvpuTasyDSkuvHkBZJHTS0fmDThB o3EkueuM8nhv2I2Ibp23c5ORHLJjic7rInUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTUp++fJ2xK86Wvup8GPiPvkv/UtDAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG 8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5 UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDM0LzFLZnZueWRzU3ZPbHI3cWZCajRqNzVMXzFMUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnX2gwDQYJKoZIhvcNAQELBQADggEBADYA63KNIJ1um/nygxlO1Hu1 Ws9tsv0T5IDsOyaD2/Es7D9KmXUESfgkrFDplJvzYkf0tlrsMhJ+c5sPru9qIZOI eiVAwL04bb+QELMDrfAZHuWg/mjuFzFvVg4t94Qh0qdcuwqKTjspvKXkXYyQnY9H LUBvsh+NcdtJPisPGsqgc3Va1XwvVN3xrLCrbmLin72N6PAQkyhzceFp03pickxv aneAA/JMq6od/FIaqIFr8GQJ1OZNZgp2TvpMkAnMA8VZIeXW6dzcLqctD8ceKEQ2 PZ7MMERtgZli4ueh+EPjluM0tXpm4JVzBpU1HwkSBt4GE7WMItE62zPOiD8/nmw= -----END CERTIFICATE-----Generated at Wed Nov 5 23:31:11 2025 by rpki-client