$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2MydiWSnbr5qd9oupIXfZ-GLbys.roa File: 2MydiWSnbr5qd9oupIXfZ-GLbys.roa (raw, json) Hash identifier: Hovqu7hKDvSj4n9zQVSvL4dSukVX2+JngRlRXoV2e9c= Subject key identifier: D8:CC:9D:89:64:A7:6E:BE:6A:77:DA:2E:A4:85:DF:67:E1:8B:6F:2B Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: E8 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2MydiWSnbr5qd9oupIXfZ-GLbys.roa Signing time: Fri 24 Oct 2025 10:27:12 +0000 ROA not before: Fri 24 Oct 2025 10:27:12 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 3949 IP address blocks: 153.254.110.72/29 maxlen: 29 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Oct 24 10:27:12 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=D8CC9D8964A76EBE6A77DA2EA485DF67E18B6F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:34:4f:17:5a:56:35:64:ea:8e:66:5b:31:0c: c9:aa:0c:3b:9f:32:08:9b:ab:dc:f1:0a:5d:ed:1d: 97:4c:5d:d7:be:6f:9a:8b:0a:24:1a:6d:1e:af:4e: d3:ab:bd:45:a7:df:07:07:e3:fe:55:87:29:25:68: 11:09:db:92:24:b2:d1:be:cb:e8:18:af:ce:31:bf: 51:ba:d1:ea:c1:47:bb:77:46:1e:65:7e:c6:6b:84: ad:67:06:50:7b:08:34:74:bf:0c:61:c7:2e:66:6b: 37:b1:f9:9b:46:48:e8:94:f8:1b:61:26:15:7c:8b: 44:bb:7a:27:b8:f7:e0:e3:fd:93:9e:8d:ed:12:1a: a8:4d:e4:8c:5b:0b:38:77:c2:f1:e8:af:bf:27:4a: a5:97:60:c6:1c:59:fa:55:9c:d3:01:01:0b:57:0b: bf:7a:7f:25:43:96:e4:ff:d0:c7:0c:94:86:b7:29: f2:d5:96:9b:16:e8:8b:2e:46:db:7a:a7:9a:ed:43: 0c:90:4d:8e:a7:8b:98:b9:75:28:ca:09:3f:f2:e1: 3c:f6:c4:c5:3f:68:be:b9:3e:ca:14:17:b5:d0:e5: 2e:00:81:95:3b:4b:90:d3:1d:f1:e6:cc:48:d7:e3: 1b:18:d1:47:69:1c:c8:84:40:ed:54:d1:88:63:d7: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CC:9D:89:64:A7:6E:BE:6A:77:DA:2E:A4:85:DF:67:E1:8B:6F:2B X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2MydiWSnbr5qd9oupIXfZ-GLbys.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.110.72/29 Signature Algorithm: sha256WithRSAEncryption 2e:d7:21:7a:82:77:61:95:15:da:ad:06:ca:13:62:48:90:d6: 5d:98:5b:c5:f0:33:6c:28:b0:ef:2f:f7:7a:74:8d:d8:03:d0: 46:af:ee:ec:26:98:54:af:13:05:35:26:02:6a:5e:cf:68:68: cf:c7:36:42:57:bb:d5:61:60:36:2b:97:69:1c:d6:30:91:38: 38:5b:de:c1:d1:65:a0:c3:d7:ca:05:ab:9f:bb:b4:16:03:3d: 2e:4e:98:4c:34:64:e5:25:78:f0:6c:ec:f3:b1:ff:06:da:9d: 75:b6:f8:a1:12:30:31:ca:85:cb:22:aa:5a:33:dc:06:1e:c6: 22:46:06:50:1f:16:cd:7c:8c:8f:32:e8:36:ac:50:24:00:52: 3f:6a:8e:9e:13:c5:d1:56:3e:ce:f8:2a:07:c4:d9:2c:94:08: 75:bd:b3:6f:12:e7:6b:db:d5:e4:f2:8d:06:ea:f4:84:a2:70: fe:de:4f:40:73:a8:c0:fa:c0:fa:36:a9:8d:65:4d:0d:e5:09: c7:16:52:04:12:10:2e:16:e5:76:f0:01:9f:a5:cb:90:80:c2: 39:c1:fc:06:98:cb:01:86:df:fc:81:dc:d2:44:a3:7f:d6:e3: 93:68:60:0f:c1:99:51:3e:9c:89:93:3f:8e:56:52:bc:e3:88: 6d:2c:e4:3b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTEwMjQx MDI3MTJaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4Q0M5RDg5NjRBNzZF QkU2QTc3REEyRUE0ODVERjY3RTE4QjZGMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzNE8XWlY1ZOqOZlsxDMmqDDufMgibq9zxCl3tHZdMXde+b5qL CiQabR6vTtOrvUWn3wcH4/5VhyklaBEJ25IkstG+y+gYr84xv1G60erBR7t3Rh5l fsZrhK1nBlB7CDR0vwxhxy5mazex+ZtGSOiU+BthJhV8i0S7eie49+Dj/ZOeje0S GqhN5IxbCzh3wvHor78nSqWXYMYcWfpVnNMBAQtXC796fyVDluT/0McMlIa3KfLV lpsW6IsuRtt6p5rtQwyQTY6ni5i5dSjKCT/y4Tz2xMU/aL65PsoUF7XQ5S4AgZU7 S5DTHfHmzEjX4xsY0UdpHMiEQO1U0Yhj1+CdAgMBAAGjggIpMIICJTAdBgNVHQ4E FgQU2MydiWSnbr5qd9oupIXfZ+GLbyswHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC8yTXlkaVdTbmJyNXFkOW91cElYZlotR0xieXMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAATAHAwUDmf5uSDANBgkqhkiG9w0BAQsFAAOCAQEALtcheoJ3YZUV2q0GyhNi SJDWXZhbxfAzbCiw7y/3enSN2APQRq/u7CaYVK8TBTUmAmpez2hoz8c2Qle71WFg NiuXaRzWMJE4OFvewdFloMPXygWrn7u0FgM9Lk6YTDRk5SV48Gzs87H/Btqddbb4 oRIwMcqFyyKqWjPcBh7GIkYGUB8WzXyMjzLoNqxQJABSP2qOnhPF0VY+zvgqB8TZ LJQIdb2zbxLna9vV5PKNBur0hKJw/t5PQHOowPrA+japjWVNDeUJxxZSBBIQLhbl dvABn6XLkIDCOcH8BpjLAYbf/IHc0kSjf9bjk2hgD8GZUT6ciZM/jlZSvOOIbSzk Ow== -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:10 2025 by rpki-client