$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/klC7u7raX8lqkiScvo2whYZ-r00.roa File: klC7u7raX8lqkiScvo2whYZ-r00.roa (raw, json) Hash identifier: tKs7VLx6r3cHEJEfqZ/5Zo7RxctdDoHekH1m08wFeL8= Subject key identifier: 92:50:BB:BB:BA:DA:5F:C9:6A:92:24:9C:BE:8D:B0:85:86:7E:AF:4D Certificate issuer: /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Certificate serial: 3A Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/klC7u7raX8lqkiScvo2whYZ-r00.roa Signing time: Fri 01 Aug 2025 01:35:27 +0000 ROA not before: Fri 01 Aug 2025 01:35:27 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 63782 IP address blocks: 133.186.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Validity Not Before: Aug 1 01:35:27 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=9250BBBBBADA5FC96A92249CBE8DB085867EAF4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:63:51:d8:48:08:e9:f8:4c:ca:c1:01:e2: 32:c7:be:1b:f1:38:3c:2e:03:69:f5:a8:15:60:8e: 74:f4:b6:26:cf:c8:d1:05:b6:6a:b6:97:f7:67:45: d1:b4:ca:d2:57:eb:b8:96:1a:45:b6:ac:80:ef:16: e2:15:37:3a:d2:d3:ee:98:a8:01:4e:75:35:f7:d0: 78:56:a5:b5:cc:02:87:79:72:ee:64:cf:69:49:87: fc:37:0b:17:1f:2c:ac:ad:96:99:3e:d5:ab:b0:fb: c8:b3:31:e0:c4:68:c8:fb:e0:fd:4e:31:35:53:7e: 7d:01:ab:20:c6:f6:3d:6f:57:6b:b3:cd:11:75:21: 7a:f3:17:78:1b:91:0e:e6:3a:d4:49:e1:16:f8:3e: c4:11:2d:5a:58:f1:e5:4f:d2:03:66:34:71:8c:8f: b5:92:e4:8e:00:ae:f9:76:bd:ee:18:d3:d5:de:b6: eb:96:f3:38:e5:c1:27:0b:bb:0c:39:12:7e:29:1f: 3f:48:58:4f:c5:f5:70:7d:f5:c6:9c:66:be:ba:21: 22:aa:5b:e8:6d:10:ec:b2:7e:e6:64:20:47:e7:16: 1f:34:df:58:3b:1a:d5:d4:10:d1:47:2a:ea:b6:a2: 30:09:da:e0:b8:d2:41:7e:76:fe:9a:90:67:12:16: 0a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:50:BB:BB:BA:DA:5F:C9:6A:92:24:9C:BE:8D:B0:85:86:7E:AF:4D X509v3 Authority Key Identifier: keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/klC7u7raX8lqkiScvo2whYZ-r00.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.186.52.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:05:86:23:cf:0f:62:3d:d9:18:84:46:38:87:4f:2e:fe:9d: 9b:50:d5:71:b3:f2:c0:fd:b0:4e:97:e6:d8:1c:a5:7e:cb:82: 53:87:c0:bd:44:06:3b:3e:e0:41:32:48:34:90:38:8d:61:26: 6e:ce:5f:19:ce:21:fa:7d:15:63:a5:c4:ce:25:e6:84:26:d1: e9:16:02:49:4d:c0:fd:cb:c8:4a:65:45:54:58:32:df:9b:3f: 19:e3:3c:09:bb:9a:1e:68:75:62:15:fb:88:2f:14:4d:3d:86: ae:a9:58:f0:5b:9d:86:55:e8:38:f6:24:24:0c:0c:a8:da:13: b6:24:f4:ad:c2:e5:ab:93:6a:4b:d7:9b:11:87:d2:d5:b0:40: 2c:70:31:8e:45:4b:48:a5:7c:82:dc:6b:83:5f:ad:12:aa:c4: 0c:9f:c1:24:3f:c3:2b:74:ad:15:ed:45:47:4d:c9:dd:73:fa: a2:42:79:c1:e5:cd:0e:c6:3b:88:55:38:49:25:64:ed:f2:2b: 20:ef:5e:8a:dc:b5:09:6c:d9:ce:39:15:ea:ec:ad:81:99:9b: c9:d2:14:8f:27:5c:3d:f8:1b:90:18:cd:60:22:9f:aa:3f:cc: 62:d6:5d:a5:a8:90:ce:e2:79:bc:c3:82:ce:1f:88:4f:ec:12: 00:ad:21:39 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTUw MDRENDRBRjI5QUQxMjA5QUI4NUE5NUYxNjBFODNEMjRFNTg4MB4XDTI1MDgwMTAx MzUyN1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoOTI1MEJCQkJCQURBNUZD OTZBOTIyNDlDQkU4REIwODU4NjdFQUY0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKT7Y1HYSAjp+EzKwQHiMse+G/E4PC4DafWoFWCOdPS2Js/I0QW2 araX92dF0bTK0lfruJYaRbasgO8W4hU3OtLT7pioAU51NffQeFaltcwCh3ly7mTP aUmH/DcLFx8srK2WmT7Vq7D7yLMx4MRoyPvg/U4xNVN+fQGrIMb2PW9Xa7PNEXUh evMXeBuRDuY61EnhFvg+xBEtWljx5U/SA2Y0cYyPtZLkjgCu+Xa97hjT1d6265bz OOXBJwu7DDkSfikfP0hYT8X1cH31xpxmvrohIqpb6G0Q7LJ+5mQgR+cWHzTfWDsa 1dQQ0Ucq6raiMAna4LjSQX52/pqQZxIWCkECAwEAAaOCAigwggIkMB0GA1UdDgQW BBSSULu7utpfyWqSJJy+jbCFhn6vTTAfBgNVHSMEGDAWgBSeUATUSvKa0SCauFqV 8WDoPSTliDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzQvbmxBRTFFcnltdEVnbXJoYWxmRmc2RDBrNVlnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmxBRTFFcnltdEVnbXJoYWxmRmc2 RDBrNVlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc0L2tsQzd1N3JhWDhscWtpU2N2bzJ3aFlaLXIwMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKFujQwDQYJKoZIhvcNAQELBQADggEBAA0FhiPPD2I92RiERjiHTy7+ nZtQ1XGz8sD9sE6X5tgcpX7LglOHwL1EBjs+4EEySDSQOI1hJm7OXxnOIfp9FWOl xM4l5oQm0ekWAklNwP3LyEplRVRYMt+bPxnjPAm7mh5odWIV+4gvFE09hq6pWPBb nYZV6Dj2JCQMDKjaE7Yk9K3C5auTakvXmxGH0tWwQCxwMY5FS0ilfILca4NfrRKq xAyfwSQ/wyt0rRXtRUdNyd1z+qJCecHlzQ7GO4hVOEklZO3yKyDvXorctQls2c45 FersrYGZm8nSFI8nXD34G5AYzWAin6o/zGLWXaWokM7iebzDgs4fiE/sEgCtITk= -----END CERTIFICATE-----Generated at Thu Nov 6 04:56:31 2025 by rpki-client