$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/2L4ATcs9CjVff2O4qOJL33yo33Y.roa File: 2L4ATcs9CjVff2O4qOJL33yo33Y.roa (raw, json) Hash identifier: QuPn2SDuW6JKDPW/cGnNIiPJMNhnQRj2g0kOp7LeSUo= Subject key identifier: D8:BE:00:4D:CB:3D:0A:35:5F:7F:63:B8:A8:E2:4B:DF:7C:A8:DF:76 Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Certificate serial: 40 Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/2L4ATcs9CjVff2O4qOJL33yo33Y.roa Signing time: Mon 01 Sep 2025 01:30:20 +0000 ROA not before: Mon 01 Sep 2025 01:30:20 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 131969 IP address blocks: 133.88.20.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Validity Not Before: Sep 1 01:30:20 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=D8BE004DCB3D0A355F7F63B8A8E24BDF7CA8DF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:9f:5a:cf:67:8d:4c:44:2c:51:82:62:5a: 4e:f2:59:12:53:3b:cb:7e:8a:23:d8:43:09:e6:45: f1:cf:3e:db:ad:04:5f:4e:75:56:53:c3:c2:bd:67: c4:94:eb:bf:9c:a4:3d:28:09:dc:c0:2a:4f:97:6a: 87:25:6e:3d:24:27:51:44:8e:9f:74:97:c5:53:c1: 71:08:41:01:32:ef:e6:dd:81:9e:af:2b:bf:54:ce: a3:63:59:37:b6:9e:a0:04:5a:a7:ff:97:01:55:57: fe:35:97:dc:48:79:4e:59:a8:78:7c:0f:87:7d:d3: 45:7d:c7:e0:4f:e4:ae:d4:a0:b9:ba:f2:5d:37:d0: f9:22:9c:27:c4:13:18:c7:b5:85:c4:d9:48:73:a2: 70:a7:65:de:39:f7:f1:dd:fc:7d:1d:e1:2a:89:fd: 3d:39:1a:7e:ac:b7:0f:70:35:1f:49:5a:fa:33:6c: c1:5e:7c:2f:ec:13:67:be:ca:ae:2d:e6:ac:20:6e: c9:36:5e:1c:48:c1:ae:53:63:5a:ef:e2:a3:13:76: 3e:d5:18:14:c3:53:31:25:03:7d:04:44:c0:c0:4d: 52:bb:b0:69:c9:09:77:49:06:55:63:47:ef:33:1d: c8:7a:1f:9a:0e:54:2e:bb:dc:14:a6:96:2f:1d:75: 7d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BE:00:4D:CB:3D:0A:35:5F:7F:63:B8:A8:E2:4B:DF:7C:A8:DF:76 X509v3 Authority Key Identifier: keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/2L4ATcs9CjVff2O4qOJL33yo33Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.20.0/22 Signature Algorithm: sha256WithRSAEncryption ab:2e:96:80:e3:10:18:a0:e7:d5:1c:3a:d8:02:cf:95:c8:d2: 16:88:9f:a6:6a:e3:16:be:fd:92:75:10:a0:da:e4:c2:05:bc: 37:26:5f:b2:ab:2b:93:a7:7a:93:a7:a4:f4:3a:5e:74:f8:9e: 30:9c:ec:87:ee:36:81:eb:85:ca:a0:7b:7f:e1:27:24:17:e2: dc:60:f1:49:d8:9b:79:a5:2c:ec:49:b5:34:cd:99:4f:95:a6: 52:e4:02:ad:78:0e:72:93:e0:66:f4:42:00:f3:f7:79:fa:97: 81:f6:94:4f:25:fe:62:0a:78:28:8c:1a:7a:34:6a:4c:41:f4: 23:6d:fa:66:13:14:18:a3:9e:fb:25:6c:aa:19:d4:d2:eb:b3: 68:c2:07:ac:ea:5f:a6:e6:1c:dc:06:1d:78:80:35:ce:5e:ee: 4d:e9:58:59:71:39:3f:57:fc:97:73:d2:70:a9:44:ba:4c:31: df:6b:04:30:f9:36:98:99:d9:2d:fc:36:4a:cb:2a:63:ca:b3: 71:ac:8e:3d:b3:7d:60:b1:dc:fd:14:c3:22:51:ad:28:e5:4c: b3:b3:19:f2:60:ca:a8:ba:bb:d6:12:57:5e:1b:48:5a:95:cf: f9:c6:84:17:d6:28:01:1c:00:cd:ab:54:7b:f8:4a:14:49:45: f8:84:d9:3b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI1MDkwMTAx MzAyMFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRDhCRTAwNERDQjNEMEEz NTVGN0Y2M0I4QThFMjRCREY3Q0E4REY3NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMH3n1rPZ41MRCxRgmJaTvJZElM7y36KI9hDCeZF8c8+260EX051 VlPDwr1nxJTrv5ykPSgJ3MAqT5dqhyVuPSQnUUSOn3SXxVPBcQhBATLv5t2Bnq8r v1TOo2NZN7aeoARap/+XAVVX/jWX3Eh5TlmoeHwPh33TRX3H4E/krtSgubryXTfQ +SKcJ8QTGMe1hcTZSHOicKdl3jn38d38fR3hKon9PTkafqy3D3A1H0la+jNswV58 L+wTZ77Kri3mrCBuyTZeHEjBrlNjWu/ioxN2PtUYFMNTMSUDfQREwMBNUruwackJ d0kGVWNH7zMdyHofmg5ULrvcFKaWLx11fXECAwEAAaOCAigwggIkMB0GA1UdDgQW BBTYvgBNyz0KNV9/Y7io4kvffKjfdjAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0 fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc1LzJMNEFUY3M5Q2pWZmYyTzRxT0pMMzN5bzMzWS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKFWBQwDQYJKoZIhvcNAQELBQADggEBAKsuloDjEBig59UcOtgCz5XI 0haIn6Zq4xa+/ZJ1EKDa5MIFvDcmX7KrK5OnepOnpPQ6XnT4njCc7IfuNoHrhcqg e3/hJyQX4txg8UnYm3mlLOxJtTTNmU+VplLkAq14DnKT4Gb0QgDz93n6l4H2lE8l /mIKeCiMGno0akxB9CNt+mYTFBijnvslbKoZ1NLrs2jCB6zqX6bmHNwGHXiANc5e 7k3pWFlxOT9X/Jdz0nCpRLpMMd9rBDD5NpiZ2S38NkrLKmPKs3Gsjj2zfWCx3P0U wyJRrSjlTLOzGfJgyqi6u9YSV14bSFqVz/nGhBfWKAEcAM2rVHv4ShRJRfiE2Ts= -----END CERTIFICATE-----Generated at Wed Nov 5 16:58:36 2025 by rpki-client