$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/ibAj1PpjTz3EPVh5ZkhYNHJISXM.roa File: ibAj1PpjTz3EPVh5ZkhYNHJISXM.roa (raw, json) Hash identifier: S2NJkVI+PzmB/TaH5twyJLmgg2rYQxPKiKk3CmtIfI0= Subject key identifier: 89:B0:23:D4:FA:63:4F:3D:C4:3D:58:79:66:48:58:34:72:48:49:73 Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Certificate serial: 42 Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/ibAj1PpjTz3EPVh5ZkhYNHJISXM.roa Signing time: Mon 01 Sep 2025 01:30:21 +0000 ROA not before: Mon 01 Sep 2025 01:30:21 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 131969 IP address blocks: 133.88.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Validity Not Before: Sep 1 01:30:21 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=89B023D4FA634F3DC43D58796648583472484973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:c2:5b:2f:a8:7a:7a:4f:90:f6:94:47:20: ae:54:fa:a2:6b:01:a2:9a:48:c4:4f:9f:0e:8b:ca: bf:bb:e2:5a:ae:21:d4:35:91:a2:f5:02:90:d2:82: 8b:40:77:00:58:5e:09:55:4c:7e:12:68:e1:9c:8d: 1a:01:2e:71:fc:2f:5e:57:12:2d:d9:a5:88:0f:be: 0e:46:5a:ba:19:83:ae:4e:d9:40:37:9d:a6:90:d9: 3d:20:7d:8c:6a:64:2e:b2:53:26:b5:47:dd:d4:3c: 9e:c2:60:56:9e:35:bc:5c:23:66:aa:b1:49:3d:0c: 76:3f:45:c0:1a:89:cc:e3:d0:5b:04:56:51:96:13: 96:82:b1:1e:80:ab:32:cc:c1:6d:eb:5c:f7:6d:17: 14:9f:8b:1a:77:d9:00:e8:fd:54:d2:ad:a0:85:8c: 9b:61:8e:0f:5b:e1:69:da:ba:15:cb:70:b2:7d:0c: 25:dd:1c:00:b1:b8:20:2f:44:94:1b:cc:88:cb:7b: 0b:cf:d7:3d:72:6d:02:22:a3:42:be:f2:1e:1a:a5: 70:af:9b:53:28:b5:50:77:36:f6:bb:4f:4f:c7:8a: 13:a2:64:e7:ed:1a:f0:4c:97:51:ad:a8:74:18:3b: e1:be:d7:36:04:eb:9f:93:77:98:61:8e:a1:75:dc: f3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B0:23:D4:FA:63:4F:3D:C4:3D:58:79:66:48:58:34:72:48:49:73 X509v3 Authority Key Identifier: keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/ibAj1PpjTz3EPVh5ZkhYNHJISXM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.22.0/23 Signature Algorithm: sha256WithRSAEncryption 18:f3:26:1d:4d:63:b1:cf:4e:e3:21:19:aa:1e:9c:52:4e:35: f4:e2:2e:2d:0e:a0:54:39:05:af:5a:7c:3e:af:50:81:1c:eb: 77:c4:a2:fa:ff:82:fc:ac:e3:94:d4:f3:d6:b0:3f:25:08:14: 5a:31:8f:ce:bf:4f:c1:2e:51:87:2e:60:ed:4d:50:9a:7b:45: b2:2d:1a:fd:09:c0:8b:ca:3a:29:30:b3:c3:33:7e:b3:96:66: aa:e5:ae:0e:c2:08:b3:80:95:47:da:6e:6b:18:14:8c:42:05: 2a:1c:af:b1:b8:19:2f:16:bb:92:54:83:b6:d7:8c:2b:d0:92: c5:a6:0a:17:7e:1f:a3:fc:de:fa:41:9a:f2:a1:da:2a:42:f9: 6b:f1:b3:cb:66:cf:53:26:ef:79:ec:fd:40:35:64:9a:ac:8f: e5:1f:2b:02:e5:f8:12:12:9a:79:af:6c:ed:1e:fa:74:14:e9: 77:59:f7:47:a0:b1:c9:92:d3:c1:90:b2:d7:fc:ad:9f:ce:c8: 97:4d:af:e9:ee:89:a5:ae:3e:b6:06:29:b3:bd:2c:1f:7e:d2: 12:a2:54:4c:2b:6a:8b:de:d3:91:3d:4b:ba:f1:12:c8:43:ea: 3c:53:36:66:67:a8:ea:0b:0f:e4:fa:cf:bc:26:bb:a1:43:81: 29:03:47:14 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI1MDkwMTAx MzAyMVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoODlCMDIzRDRGQTYzNEYz REM0M0Q1ODc5NjY0ODU4MzQ3MjQ4NDk3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN0/wlsvqHp6T5D2lEcgrlT6omsBoppIxE+fDovKv7viWq4h1DWR ovUCkNKCi0B3AFheCVVMfhJo4ZyNGgEucfwvXlcSLdmliA++DkZauhmDrk7ZQDed ppDZPSB9jGpkLrJTJrVH3dQ8nsJgVp41vFwjZqqxST0Mdj9FwBqJzOPQWwRWUZYT loKxHoCrMszBbetc920XFJ+LGnfZAOj9VNKtoIWMm2GOD1vhadq6Fctwsn0MJd0c ALG4IC9ElBvMiMt7C8/XPXJtAiKjQr7yHhqlcK+bUyi1UHc29rtPT8eKE6Jk5+0a 8EyXUa2odBg74b7XNgTrn5N3mGGOoXXc87UCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSJsCPU+mNPPcQ9WHlmSFg0ckhJczAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0 fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc1L2liQWoxUHBqVHozRVBWaDVaa2hZTkhKSVNYTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGFWBYwDQYJKoZIhvcNAQELBQADggEBABjzJh1NY7HPTuMhGaoenFJO NfTiLi0OoFQ5Ba9afD6vUIEc63fEovr/gvys45TU89awPyUIFFoxj86/T8EuUYcu YO1NUJp7RbItGv0JwIvKOikws8MzfrOWZqrlrg7CCLOAlUfabmsYFIxCBSocr7G4 GS8Wu5JUg7bXjCvQksWmChd+H6P83vpBmvKh2ipC+Wvxs8tmz1Mm73ns/UA1ZJqs j+UfKwLl+BISmnmvbO0e+nQU6XdZ90egscmS08GQstf8rZ/OyJdNr+nuiaWuPrYG KbO9LB9+0hKiVEwraove05E9S7rxEshD6jxTNmZnqOoLD+T6z7wmu6FDgSkDRxQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:40:52 2025 by rpki-client