$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/hFFdGMxeFSYSu-A8HnS-WjSGL5k.roa File: hFFdGMxeFSYSu-A8HnS-WjSGL5k.roa (raw, json) Hash identifier: USq8X7uLuMaHqAjS4lYKz5aCHicqV3zHhOuel0K5Su0= Subject key identifier: 84:51:5D:18:CC:5E:15:26:12:BB:E0:3C:1E:74:BE:5A:34:86:2F:99 Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Certificate serial: 9A Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/hFFdGMxeFSYSu-A8HnS-WjSGL5k.roa Signing time: Fri 24 Oct 2025 10:27:18 +0000 ROA not before: Fri 24 Oct 2025 10:27:18 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 131898 IP address blocks: 219.100.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Validity Not Before: Oct 24 10:27:18 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=84515D18CC5E152612BBE03C1E74BE5A34862F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:bb:01:d7:48:78:6e:23:5f:be:1d:be:1a: a8:39:4d:04:9d:88:78:81:aa:60:10:0c:a1:f0:9a: a4:2e:c0:17:b0:6c:85:0a:f9:71:b2:0f:73:dc:83: a8:a1:02:de:ea:d1:76:54:a3:ca:f5:ad:51:b4:a3: fe:41:13:98:ff:98:5f:18:40:ce:b3:81:bd:96:a4: 6c:1b:56:1b:2c:f2:19:c9:4d:4f:09:f4:d2:78:0b: de:81:3d:46:06:20:05:53:65:42:15:28:d3:e6:60: 3e:3d:84:07:36:bc:a2:d1:8a:13:3e:73:7b:93:43: 1c:76:0f:54:db:b6:d1:d7:8b:10:dc:b4:9c:32:4f: 4d:0a:c0:ad:19:bc:d4:9d:6c:3f:66:f9:69:81:73: 4e:e2:4d:25:0f:e6:e0:16:1b:d2:21:29:cd:41:e7: 84:1f:48:f5:35:f2:d0:0c:64:ab:66:65:47:d9:31: 6a:63:74:25:88:8b:5e:8f:6d:57:3f:f1:cf:65:68: 6b:00:3f:22:fb:b6:0f:d7:3a:4c:40:01:91:7a:7f: 90:13:04:b5:cc:88:65:2f:e5:2b:90:a0:a1:1d:97: 81:d7:5a:41:33:e5:48:d8:9b:61:2d:ad:a7:14:de: 07:ec:92:39:f1:d8:75:0f:a4:8c:aa:2c:52:49:51: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:51:5D:18:CC:5E:15:26:12:BB:E0:3C:1E:74:BE:5A:34:86:2F:99 X509v3 Authority Key Identifier: keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/hFFdGMxeFSYSu-A8HnS-WjSGL5k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.147.0/24 Signature Algorithm: sha256WithRSAEncryption 99:25:28:be:ab:88:6a:4c:df:88:e9:8f:7b:eb:2a:36:e1:aa: b9:e8:18:09:0b:f8:cf:56:28:5c:27:a7:5c:85:75:ce:de:bd: b5:85:22:b5:c2:68:1e:87:60:c3:6c:6d:a2:6c:34:7e:cf:23: fa:01:e6:62:18:99:52:56:f3:12:c0:f5:1d:aa:1f:40:d1:e5: e6:43:42:57:6f:27:e0:5a:39:8d:7a:8b:69:3e:34:9b:2e:be: 5e:3f:af:10:d7:ae:e7:ae:de:8b:7f:b1:fd:4a:12:7a:9c:dc: 2d:c7:56:89:af:ae:df:9f:df:ee:94:06:b5:bc:eb:56:8e:97: 01:e9:5e:e7:89:f4:40:a2:d0:82:44:fc:11:54:87:08:9c:46: 72:6f:3e:99:19:25:0a:f8:e4:87:3a:87:b1:b6:e5:29:02:a5: be:20:47:0c:b6:bb:19:d1:7f:2a:a4:c8:0e:2b:a6:70:9b:0c: 47:f6:41:7a:26:2d:95:8a:a9:72:05:17:78:62:d2:a6:33:18: eb:ce:fe:d3:17:41:28:ae:f4:2b:8b:47:cc:09:23:0b:34:53: d9:0a:a3:e1:86:1a:1d:19:fa:83:e5:5b:8c:3a:d5:65:6f:0f: bd:72:0c:a8:f7:bf:3b:01:e2:12:70:9b:33:ba:81:3a:5c:94: a8:24:e7:93 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTY0RkI3QzhDN0M2QjVDRDdDNzcwMTg4MkU4NTk3QzQyODM4RTAeFw0yNTEwMjQx MDI3MThaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg0NTE1RDE4Q0M1RTE1 MjYxMkJCRTAzQzFFNzRCRTVBMzQ4NjJGOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYfbsB10h4biNfvh2+Gqg5TQSdiHiBqmAQDKHwmqQuwBewbIUK +XGyD3Pcg6ihAt7q0XZUo8r1rVG0o/5BE5j/mF8YQM6zgb2WpGwbVhss8hnJTU8J 9NJ4C96BPUYGIAVTZUIVKNPmYD49hAc2vKLRihM+c3uTQxx2D1TbttHXixDctJwy T00KwK0ZvNSdbD9m+WmBc07iTSUP5uAWG9IhKc1B54QfSPU18tAMZKtmZUfZMWpj dCWIi16PbVc/8c9laGsAPyL7tg/XOkxAAZF6f5ATBLXMiGUv5SuQoKEdl4HXWkEz 5UjYm2EtracU3gfskjnx2HUPpIyqLFJJUYs1AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUhFFdGMxeFSYSu+A8HnS+WjSGL5kwHwYDVR0jBBgwFoAUxJ5k+3yMfGtc18dw GILoWXxCg44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTE2L3hKNWstM3lNZkd0YzE4ZHdHSUxvV1h4Q2c0NC5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hKNWstM3lNZkd0YzE4ZHdHSUxv V1h4Q2c0NC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDExNi9oRkZkR014ZUZTWVN1LUE4SG5TLVdqU0dMNWsu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA22STMA0GCSqGSIb3DQEBCwUAA4IBAQCZJSi+q4hqTN+I6Y976yo2 4aq56BgJC/jPVihcJ6dchXXO3r21hSK1wmgeh2DDbG2ibDR+zyP6AeZiGJlSVvMS wPUdqh9A0eXmQ0JXbyfgWjmNeotpPjSbLr5eP68Q167nrt6Lf7H9ShJ6nNwtx1aJ r67fn9/ulAa1vOtWjpcB6V7nifRAotCCRPwRVIcInEZybz6ZGSUK+OSHOoextuUp AqW+IEcMtrsZ0X8qpMgOK6ZwmwxH9kF6Ji2ViqlyBRd4YtKmMxjrzv7TF0EorvQr i0fMCSMLNFPZCqPhhhodGfqD5VuMOtVlbw+9cgyo9787AeIScJszuoE6XJSoJOeT -----END CERTIFICATE-----Generated at Thu Nov 6 00:21:35 2025 by rpki-client