$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/EmFHSnBqpwh4emFnXxllo94CECo.roa File: EmFHSnBqpwh4emFnXxllo94CECo.roa (raw, json) Hash identifier: +3B4sJIpNTy62fxSXueW7z5C8+krq/Gv7VKY+j6qXGo= Subject key identifier: 12:61:47:4A:70:6A:A7:08:78:7A:61:67:5F:19:65:A3:DE:02:10:2A Certificate issuer: /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Certificate serial: 32 Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/EmFHSnBqpwh4emFnXxllo94CECo.roa Signing time: Thu 01 May 2025 01:33:15 +0000 ROA not before: Thu 01 May 2025 01:33:15 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 63782 IP address blocks: 103.119.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Validity Not Before: May 1 01:33:15 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1261474A706AA708787A61675F1965A3DE02102A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:e0:29:3f:0f:3d:2c:0d:99:d8:6e:56:29: 41:89:d6:65:12:69:97:ec:ad:d8:98:e3:26:8e:9c: 59:9e:cd:ce:b4:4e:2a:4f:66:92:ba:f1:d9:69:8e: 7d:ac:7e:c4:a8:c6:cc:fe:62:a2:a7:2f:f1:9f:88: 10:28:ba:6c:40:ec:23:87:31:5e:ba:a3:4d:1a:ac: d5:75:b4:c4:93:cd:ff:07:78:d7:26:42:67:a7:f2: 9d:91:5d:cb:aa:e0:9d:0c:4b:9d:e4:1c:92:40:93: 2b:3c:0c:c2:80:be:b9:00:11:80:6a:6e:2b:32:15: 47:57:24:23:48:46:39:9f:a2:75:aa:ef:fe:a5:13: b7:f4:1e:9b:fb:74:3b:1d:27:da:61:95:61:1f:68: 2c:93:a0:14:a9:e8:e1:f4:07:4d:dc:eb:e4:55:55: 7a:29:e4:45:8d:1d:45:64:fb:74:25:f6:b8:c8:5b: 50:21:bf:eb:0d:29:60:22:3b:e8:f9:65:35:e8:88: 1c:d1:79:d2:d0:38:a0:f3:95:f1:b9:df:78:56:3f: b9:16:78:21:af:49:13:70:97:9e:9b:a2:a9:8a:e3: 75:6b:52:14:53:e5:79:01:8a:c9:3d:f6:23:b3:4f: d5:a2:79:18:2f:6b:6e:ae:26:56:fd:0a:39:ce:f7: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:61:47:4A:70:6A:A7:08:78:7A:61:67:5F:19:65:A3:DE:02:10:2A X509v3 Authority Key Identifier: keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/EmFHSnBqpwh4emFnXxllo94CECo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.88.0/22 Signature Algorithm: sha256WithRSAEncryption 10:e3:79:70:ed:ea:d8:b6:61:1d:1b:30:31:28:7d:27:b5:b9: e8:bf:be:27:01:8c:66:77:43:bf:ba:70:00:6d:a0:22:c2:60: 3d:78:00:8c:1f:d9:a6:94:8b:50:8e:3d:c0:4e:99:88:b6:85: 58:ba:54:5d:07:cb:ce:6e:4e:cb:58:90:5e:26:4b:c0:67:a4: 1b:b9:c4:c5:30:5d:a1:de:d0:32:d2:d9:68:66:15:13:aa:31: b2:a9:dd:d6:44:ef:d4:f0:19:16:4b:a4:62:2c:ea:78:f8:cb: e8:9e:e5:3e:89:62:91:dd:c2:fa:a6:c7:ac:e0:78:2d:2a:80: fb:cb:09:fa:e5:a3:8d:84:95:13:e3:5a:45:77:18:a8:a1:cb: 54:c4:3e:9c:34:49:c1:f0:72:ae:ea:79:7d:cd:b5:6b:f2:12: 7b:96:8f:d9:eb:9c:bc:5b:6f:54:fb:f1:d0:09:f2:b7:76:88: 18:41:6f:4e:f2:9d:06:7f:65:8c:b3:1a:4d:07:14:33:e0:4a: 6f:90:9c:4d:ab:44:c4:06:6e:d5:a1:62:f4:44:65:f4:c8:cc: 09:69:4b:41:a1:fe:88:2c:a5:b5:9e:1c:01:fd:16:48:5f:b8: 5b:35:6b:8c:26:f3:ff:82:d6:34:1c:3f:71:d5:06:b6:0a:d6: f1:5a:00:72 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTUw MDRENDRBRjI5QUQxMjA5QUI4NUE5NUYxNjBFODNEMjRFNTg4MB4XDTI1MDUwMTAx MzMxNVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMTI2MTQ3NEE3MDZBQTcw ODc4N0E2MTY3NUYxOTY1QTNERTAyMTAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKqI4Ck/Dz0sDZnYblYpQYnWZRJpl+yt2JjjJo6cWZ7NzrROKk9m krrx2WmOfax+xKjGzP5ioqcv8Z+IECi6bEDsI4cxXrqjTRqs1XW0xJPN/wd41yZC Z6fynZFdy6rgnQxLneQckkCTKzwMwoC+uQARgGpuKzIVR1ckI0hGOZ+idarv/qUT t/Qem/t0Ox0n2mGVYR9oLJOgFKno4fQHTdzr5FVVeinkRY0dRWT7dCX2uMhbUCG/ 6w0pYCI76PllNeiIHNF50tA4oPOV8bnfeFY/uRZ4Ia9JE3CXnpuiqYrjdWtSFFPl eQGKyT32I7NP1aJ5GC9rbq4mVv0KOc73TNkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQSYUdKcGqnCHh6YWdfGWWj3gIQKjAfBgNVHSMEGDAWgBSeUATUSvKa0SCauFqV 8WDoPSTliDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzQvbmxBRTFFcnltdEVnbXJoYWxmRmc2RDBrNVlnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmxBRTFFcnltdEVnbXJoYWxmRmc2 RDBrNVlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc0L0VtRkhTbkJxcHdoNGVtRm5YeGxsbzk0Q0VDby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnd1gwDQYJKoZIhvcNAQELBQADggEBABDjeXDt6ti2YR0bMDEofSe1 uei/vicBjGZ3Q7+6cABtoCLCYD14AIwf2aaUi1COPcBOmYi2hVi6VF0Hy85uTstY kF4mS8BnpBu5xMUwXaHe0DLS2WhmFROqMbKp3dZE79TwGRZLpGIs6nj4y+ie5T6J YpHdwvqmx6zgeC0qgPvLCfrlo42ElRPjWkV3GKihy1TEPpw0ScHwcq7qeX3NtWvy EnuWj9nrnLxbb1T78dAJ8rd2iBhBb07ynQZ/ZYyzGk0HFDPgSm+QnE2rRMQGbtWh YvREZfTIzAlpS0Gh/ogspbWeHAH9FkhfuFs1a4wm8/+C1jQcP3HVBrYK1vFaAHI= -----END CERTIFICATE-----Generated at Thu Nov 6 04:56:31 2025 by rpki-client