$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/hlG5kBRlO1QPH52-PGAnZlObf7M.roa File: hlG5kBRlO1QPH52-PGAnZlObf7M.roa (raw, json) Hash identifier: +xe7glYl/6K/GGS1TGTscMVGW1Rk9loOXvAWJiOBzt8= Subject key identifier: 86:51:B9:90:14:65:3B:54:0F:1F:9D:BE:3C:60:27:66:53:9B:7F:B3 Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Certificate serial: 44 Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/hlG5kBRlO1QPH52-PGAnZlObf7M.roa Signing time: Mon 01 Sep 2025 01:30:23 +0000 ROA not before: Mon 01 Sep 2025 01:30:23 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 131951 IP address blocks: 133.88.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Validity Not Before: Sep 1 01:30:23 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=8651B99014653B540F1F9DBE3C602766539B7FB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:33:94:f9:11:8f:d8:69:72:e4:72:19:bd:a9: 66:de:88:6c:7d:45:84:75:e4:7b:cf:60:45:30:12: fd:58:9b:67:40:3a:0a:a1:e6:90:46:c2:94:d3:f6: 47:2f:a2:f7:8d:37:08:fa:0a:09:59:7c:24:3f:53: 9e:ca:b5:52:97:83:b1:d6:6a:ec:02:8d:02:3d:48: d4:36:a0:c6:97:8e:c0:31:d6:db:64:11:68:2e:e7: 9a:7b:f2:26:05:f9:92:28:b1:95:fc:f8:f5:d3:08: 3e:fe:09:f3:5b:4e:78:a5:1a:25:83:80:9c:9d:29: 36:2b:b6:57:1f:1f:e8:65:5b:c3:5e:66:b1:70:71: a0:3a:62:48:bc:12:62:01:52:c1:f3:f6:67:d1:5a: 7f:98:43:d4:8b:c6:51:9d:ba:b3:66:9b:9a:8b:31: d5:73:94:61:d4:c9:ff:d7:02:d3:dd:df:89:db:59: 84:e9:61:db:61:8e:6f:64:05:c9:6f:ff:ca:ae:9f: f2:d5:68:a9:6f:33:ac:b5:2d:a7:39:c7:57:bb:38: d2:ef:cb:48:ef:b9:17:5d:41:7c:e7:16:05:5f:9a: 35:51:b8:82:b3:ac:52:f3:c4:66:f9:ac:a2:b9:3d: ef:b8:dc:11:3f:6f:23:6d:3d:3c:ed:10:96:07:cf: 4a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:51:B9:90:14:65:3B:54:0F:1F:9D:BE:3C:60:27:66:53:9B:7F:B3 X509v3 Authority Key Identifier: keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/hlG5kBRlO1QPH52-PGAnZlObf7M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.31.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:08:78:76:a3:ae:8d:cc:c8:11:2b:72:57:63:bb:7d:65:89: c8:8e:85:49:4e:36:b0:ad:69:2e:e2:0f:5b:b0:b7:cb:06:84: a2:20:80:24:ed:ab:46:da:37:74:81:eb:cb:1b:9c:2c:41:5f: 05:1d:dc:77:c4:f8:c3:10:f9:16:f4:a7:ed:64:f4:51:e4:1e: aa:e8:74:c9:9f:88:da:8b:9a:98:02:39:08:5c:02:64:80:93: 5b:23:21:9b:eb:14:28:96:67:77:e2:c5:63:91:33:71:d7:1d: b2:af:34:60:fd:19:2a:e9:2e:b9:ec:3c:a2:2b:97:fa:e8:2e: 73:4d:86:a2:a6:74:48:70:35:63:8f:79:9f:79:a0:27:92:8d: 35:15:60:ca:4f:87:41:55:3e:1d:be:fb:6e:c0:e1:c1:f5:43: 83:59:27:0e:a2:ff:73:12:4c:88:9a:db:a7:5d:8f:89:3b:95: 69:0d:d0:82:ce:2f:be:03:bd:9c:c2:c0:8b:d3:a7:25:1e:b5: f6:f7:52:02:5d:f8:25:bc:fb:5b:0c:3c:2c:99:b2:82:e9:67: 8e:53:4c:47:e1:e4:60:48:52:ed:2a:f8:f4:68:73:d1:2d:e4: e5:84:da:5d:50:8c:75:9a:10:71:78:95:7f:f9:ec:b7:b4:a7: 1d:e2:6d:e2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI1MDkwMTAx MzAyM1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoODY1MUI5OTAxNDY1M0I1 NDBGMUY5REJFM0M2MDI3NjY1MzlCN0ZCMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOUzlPkRj9hpcuRyGb2pZt6IbH1FhHXke89gRTAS/VibZ0A6CqHm kEbClNP2Ry+i9403CPoKCVl8JD9Tnsq1UpeDsdZq7AKNAj1I1DagxpeOwDHW22QR aC7nmnvyJgX5kiixlfz49dMIPv4J81tOeKUaJYOAnJ0pNiu2Vx8f6GVbw15msXBx oDpiSLwSYgFSwfP2Z9Faf5hD1IvGUZ26s2abmosx1XOUYdTJ/9cC093fidtZhOlh 22GOb2QFyW//yq6f8tVoqW8zrLUtpznHV7s40u/LSO+5F11BfOcWBV+aNVG4grOs UvPEZvmsork977jcET9vI209PO0QlgfPSkkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSGUbmQFGU7VA8fnb48YCdmU5t/szAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0 fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc1L2hsRzVrQlJsTzFRUEg1Mi1QR0FuWmxPYmY3TS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACFWB8wDQYJKoZIhvcNAQELBQADggEBAA4IeHajro3MyBErcldju31l iciOhUlONrCtaS7iD1uwt8sGhKIggCTtq0baN3SB68sbnCxBXwUd3HfE+MMQ+Rb0 p+1k9FHkHqrodMmfiNqLmpgCOQhcAmSAk1sjIZvrFCiWZ3fixWORM3HXHbKvNGD9 GSrpLrnsPKIrl/roLnNNhqKmdEhwNWOPeZ95oCeSjTUVYMpPh0FVPh2++27A4cH1 Q4NZJw6i/3MSTIia26ddj4k7lWkN0ILOL74DvZzCwIvTpyUetfb3UgJd+CW8+1sM PCyZsoLpZ45TTEfh5GBIUu0q+PRoc9Et5OWE2l1QjHWaEHF4lX/57Le0px3ibeI= -----END CERTIFICATE-----Generated at Wed Nov 5 21:07:47 2025 by rpki-client