$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qF2EcTfyPH-ojh-UC727SZsGVZs.roa File: qF2EcTfyPH-ojh-UC727SZsGVZs.roa (raw, json) Hash identifier: eFqaetzf/Se71TxB7Mg9tuuNRJ+s0ovznH7ApAkiPlc= Subject key identifier: A8:5D:84:71:37:F2:3C:7F:A8:8E:1F:94:0B:BD:BB:49:9B:06:55:9B Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: F9 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qF2EcTfyPH-ojh-UC727SZsGVZs.roa Signing time: Thu 24 Jul 2025 02:05:28 +0000 ROA not before: Thu 24 Jul 2025 02:05:28 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 211.14.134.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:05:28 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=A85D847137F23C7FA88E1F940BBDBB499B06559B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:34:75:8b:f8:b9:56:f7:9f:18:e1:dd:08: ec:70:ab:0b:3b:b2:c8:9d:95:09:78:a1:a1:c9:bf: 9b:e1:e1:57:f8:06:72:f2:e8:b1:4a:82:c1:1a:8d: 9a:d6:25:7a:aa:2e:f6:3c:26:72:07:f3:54:5f:6a: 0e:cd:91:8a:7e:0b:e6:dc:f5:f6:3e:74:a8:a4:ac: 17:65:46:bf:20:b7:e5:bb:4f:8d:2e:68:b6:e1:40: cf:b3:2a:89:2c:ee:df:b1:f8:66:36:31:39:4f:2c: c5:9e:ed:a5:60:65:2e:4a:77:14:56:5b:06:f0:19: c1:57:b8:51:ff:90:7b:56:0b:e9:b6:2d:13:8e:32: c0:19:96:c1:b4:fd:cf:ac:dc:d5:11:88:ca:8f:73: a1:90:2d:41:00:cf:ba:1a:ca:35:26:e6:c4:3c:95: 46:f0:16:24:44:5a:67:fb:f3:6f:39:d5:4a:39:4d: 7d:c8:ce:7b:90:68:ca:aa:45:70:fe:e1:88:af:b5: a7:c5:fd:df:07:c1:63:33:55:c2:69:ae:bd:ca:1d: f7:a5:6e:ed:d0:8f:16:ed:cb:ca:ac:a9:af:fd:e7: aa:4c:15:e9:bc:6f:61:df:57:2e:c6:74:2a:18:25: 91:47:cc:d0:48:f5:ef:a1:17:08:71:62:21:11:19: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5D:84:71:37:F2:3C:7F:A8:8E:1F:94:0B:BD:BB:49:9B:06:55:9B X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qF2EcTfyPH-ojh-UC727SZsGVZs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.134.0/24 Signature Algorithm: sha256WithRSAEncryption 99:bc:bb:2b:98:d2:8a:ff:12:ad:f7:ec:f7:3c:7e:84:0f:2c: bf:7a:aa:09:61:ce:16:22:16:7a:c5:dd:d6:0a:bc:14:eb:f0: d5:5b:88:81:67:a4:32:3e:bb:d4:ed:f7:30:34:66:e6:d6:6d: a9:87:b2:85:89:63:f5:db:4d:b2:43:54:a0:f4:d6:6e:a8:83: 94:83:5d:a3:c9:8b:b3:9e:ca:01:95:d9:d4:78:95:48:46:e5: 55:90:3d:40:82:f5:18:0e:a2:2c:a9:df:e6:ad:4f:4b:0d:76: ca:ab:92:2a:76:4e:f7:c5:63:2c:66:0b:f7:f7:e1:f9:fd:0e: f7:e6:a0:88:ee:f4:26:87:79:6d:4d:66:61:da:ec:af:5c:ed: 49:ec:29:f6:c2:90:1a:0e:a2:ec:db:d8:36:b3:22:82:dd:5d: c6:a2:ca:25:c5:52:cd:40:a9:f3:dc:49:27:64:5b:e8:95:0a: d8:60:c6:09:ee:0b:bd:f3:7d:83:ba:f0:2c:dd:4d:1b:af:60: 77:ff:ff:43:75:7a:cb:05:6e:80:8a:0e:ab:9c:c5:6b:69:50: 30:d8:03:25:fc:e9:ad:4f:65:a7:71:ef:d5:25:09:78:af:75: cd:bc:d7:27:f9:f7:b6:3d:0a:d8:df:ee:6a:92:ff:72:27:40: 5c:b7:0b:83 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjA1MjhaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEE4NUQ4NDcxMzdGMjND N0ZBODhFMUY5NDBCQkRCQjQ5OUIwNjU1OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6HzR1i/i5VvefGOHdCOxwqws7ssidlQl4oaHJv5vh4Vf4BnLy 6LFKgsEajZrWJXqqLvY8JnIH81Rfag7NkYp+C+bc9fY+dKikrBdlRr8gt+W7T40u aLbhQM+zKoks7t+x+GY2MTlPLMWe7aVgZS5KdxRWWwbwGcFXuFH/kHtWC+m2LROO MsAZlsG0/c+s3NURiMqPc6GQLUEAz7oayjUm5sQ8lUbwFiREWmf782851Uo5TX3I znuQaMqqRXD+4YivtafF/d8HwWMzVcJprr3KHfelbu3Qjxbty8qsqa/956pMFem8 b2HfVy7GdCoYJZFHzNBI9e+hFwhxYiERGS+1AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUqF2EcTfyPH+ojh+UC727SZsGVZswHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9xRjJFY1RmeVBILW9qaC1VQzcyN1Nac0dWWnMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA0w6GMA0GCSqGSIb3DQEBCwUAA4IBAQCZvLsrmNKK/xKt9+z3PH6E Dyy/eqoJYc4WIhZ6xd3WCrwU6/DVW4iBZ6QyPrvU7fcwNGbm1m2ph7KFiWP1202y Q1Sg9NZuqIOUg12jyYuznsoBldnUeJVIRuVVkD1AgvUYDqIsqd/mrU9LDXbKq5Iq dk73xWMsZgv39+H5/Q735qCI7vQmh3ltTWZh2uyvXO1J7Cn2wpAaDqLs29g2syKC 3V3GosolxVLNQKnz3EknZFvolQrYYMYJ7gu9832DuvAs3U0br2B3//9DdXrLBW6A ig6rnMVraVAw2AMl/OmtT2Wnce/VJQl4r3XNvNcn+fe2PQrY3+5qkv9yJ0BctwuD -----END CERTIFICATE-----Generated at Wed Nov 5 19:54:06 2025 by rpki-client