$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/x9T49IaF7Pw-DBS_aZsAFQJQdgU.roa File: x9T49IaF7Pw-DBS_aZsAFQJQdgU.roa (raw, json) Hash identifier: Unv6uyBj7W7/ZUuYmWl71kWSG4mm+y9hFaP0pSd9rE8= Subject key identifier: C7:D4:F8:F4:86:85:EC:FC:3E:0C:14:BF:69:9B:00:15:02:50:76:05 Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Certificate serial: 43 Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/x9T49IaF7Pw-DBS_aZsAFQJQdgU.roa Signing time: Mon 01 Sep 2025 01:30:22 +0000 ROA not before: Mon 01 Sep 2025 01:30:22 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 146986 IP address blocks: 133.88.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Validity Not Before: Sep 1 01:30:22 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=C7D4F8F48685ECFC3E0C14BF699B001502507605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:54:ea:57:29:3d:c0:6e:d2:aa:b4:1d:fb: 73:cd:0f:87:37:6f:85:26:65:f3:03:55:f2:56:2d: 8a:d4:0d:98:73:5b:a8:5c:3f:4e:fa:60:26:68:3d: 6f:ea:43:1f:e0:e7:19:00:39:86:fd:47:ea:e4:4d: c5:46:dd:0f:e8:2a:2d:53:b4:da:97:68:07:23:c4: d1:15:1e:67:f7:66:92:62:7d:5f:1b:d4:93:42:66: 3b:d1:f0:f1:f6:dc:58:62:53:50:59:7f:86:96:74: fe:60:90:b7:fb:f5:8a:7e:d4:e6:0c:f4:ec:8c:dd: c5:5f:33:87:58:39:0c:64:68:4b:fc:f6:0f:aa:a2: a6:33:52:5f:8d:00:5c:18:76:bf:17:c0:04:56:66: 57:a0:64:e7:e6:5d:a4:c9:dd:87:2a:e9:ab:64:b4: a4:66:41:b1:02:61:ba:21:f3:23:48:6b:ec:62:05: 2e:ea:9d:5b:eb:9f:33:bf:f3:d8:14:07:68:5b:02: 29:c1:1c:15:5f:18:45:f2:bd:8d:09:fb:4a:a2:69: ce:9e:f3:1d:5f:aa:cc:39:77:38:e6:b9:b7:32:b5: db:9b:78:c2:85:5b:bc:ba:38:3a:1d:87:6a:cd:95: 67:e9:30:2e:4c:c8:f2:4b:9e:4e:ae:23:5c:84:b5: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:F8:F4:86:85:EC:FC:3E:0C:14:BF:69:9B:00:15:02:50:76:05 X509v3 Authority Key Identifier: keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/x9T49IaF7Pw-DBS_aZsAFQJQdgU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.28.0/24 Signature Algorithm: sha256WithRSAEncryption c8:b3:8c:c2:b2:2e:ad:c2:81:a2:85:57:40:8a:67:8e:7f:16: d7:db:af:56:dd:e8:52:44:e7:85:d3:45:5c:28:62:3c:fb:3b: b2:bb:e9:95:e6:c6:a1:8a:be:2d:c1:0c:e0:bc:8e:bb:25:37: 5a:2b:27:d2:c4:f7:4a:7d:bf:b2:4e:86:e1:89:68:17:34:16: df:b8:66:dd:48:98:5a:55:ab:a8:53:9f:ea:55:17:35:1d:96: db:30:a8:28:34:40:18:cc:35:a8:2a:cd:06:f9:12:90:9d:89: a1:86:0a:ea:9d:94:d8:69:7b:25:40:a0:60:9c:3b:de:49:06: e5:72:1c:e9:0a:fd:78:2b:d4:35:88:fb:4b:4a:4d:0b:1f:de: 7c:84:32:c2:84:61:d5:41:32:7d:98:03:36:18:d6:93:76:37: 29:53:c5:50:40:32:cf:3c:80:02:54:eb:21:65:a7:8e:5e:c9: f4:44:fe:01:82:4f:44:01:26:08:aa:eb:dc:31:c8:5c:4f:3e: 3d:bf:13:82:d5:7e:c2:4e:52:72:83:0f:09:be:f7:6b:1a:28: fb:7a:46:36:c1:4e:a7:99:c9:2e:92:7c:45:3e:25:70:77:1e: ba:12:24:9c:92:08:52:1f:cb:f4:4b:79:73:ca:87:fd:36:4f: bd:30:e3:48 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI1MDkwMTAx MzAyMloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzdENEY4RjQ4Njg1RUNG QzNFMEMxNEJGNjk5QjAwMTUwMjUwNzYwNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALTaVOpXKT3AbtKqtB37c80PhzdvhSZl8wNV8lYtitQNmHNbqFw/ TvpgJmg9b+pDH+DnGQA5hv1H6uRNxUbdD+gqLVO02pdoByPE0RUeZ/dmkmJ9XxvU k0JmO9Hw8fbcWGJTUFl/hpZ0/mCQt/v1in7U5gz07IzdxV8zh1g5DGRoS/z2D6qi pjNSX40AXBh2vxfABFZmV6Bk5+ZdpMndhyrpq2S0pGZBsQJhuiHzI0hr7GIFLuqd W+ufM7/z2BQHaFsCKcEcFV8YRfK9jQn7SqJpzp7zHV+qzDl3OOa5tzK125t4woVb vLo4Oh2Has2VZ+kwLkzI8kueTq4jXIS11G0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBTH1Pj0hoXs/D4MFL9pmwAVAlB2BTAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0 fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc1L3g5VDQ5SWFGN1B3LURCU19hWnNBRlFKUWRnVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACFWBwwDQYJKoZIhvcNAQELBQADggEBAMizjMKyLq3CgaKFV0CKZ45/ Ftfbr1bd6FJE54XTRVwoYjz7O7K76ZXmxqGKvi3BDOC8jrslN1orJ9LE90p9v7JO huGJaBc0Ft+4Zt1ImFpVq6hTn+pVFzUdltswqCg0QBjMNagqzQb5EpCdiaGGCuqd lNhpeyVAoGCcO95JBuVyHOkK/Xgr1DWI+0tKTQsf3nyEMsKEYdVBMn2YAzYY1pN2 NylTxVBAMs88gAJU6yFlp45eyfRE/gGCT0QBJgiq69wxyFxPPj2/E4LVfsJOUnKD Dwm+92saKPt6RjbBTqeZyS6SfEU+JXB3HroSJJySCFIfy/RLeXPKh/02T70w40g= -----END CERTIFICATE-----Generated at Wed Nov 5 23:58:24 2025 by rpki-client