$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/8VwW6k3ULJrI93VnVZVP9t-cmus.roa File: 8VwW6k3ULJrI93VnVZVP9t-cmus.roa (raw, json) Hash identifier: vZh/cGO28s7cFa4tMHCHMy/HjHGZvoYPKpZpPabyahU= Subject key identifier: F1:5C:16:EA:4D:D4:2C:9A:C8:F7:75:67:55:95:4F:F6:DF:9C:9A:EB Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: DC Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/8VwW6k3ULJrI93VnVZVP9t-cmus.roa Signing time: Wed 01 Oct 2025 01:28:02 +0000 ROA not before: Wed 01 Oct 2025 01:28:02 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 55888 IP address blocks: 153.254.87.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Oct 1 01:28:02 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=F15C16EA4DD42C9AC8F7756755954FF6DF9C9AEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:f6:a7:84:9f:41:a5:0a:bf:53:cf:6c:55: 02:39:02:e7:98:71:86:f9:08:85:1e:a6:77:ea:7f: 42:7a:b0:77:50:93:b6:2b:8a:2e:fc:5e:6f:5a:57: 4a:df:47:57:6f:0b:aa:55:4e:fa:9d:50:b0:59:92: dc:f4:da:20:69:4b:ff:3b:27:81:37:46:61:17:9d: 1c:94:15:b4:38:a8:cc:45:e6:bb:c9:d6:77:1a:8a: ec:cd:1d:56:6d:10:3b:4f:e8:71:5a:5f:31:41:cf: 1f:a7:41:f0:09:93:4e:95:64:68:d2:5c:1d:a1:5c: 71:94:48:b5:8d:1a:ef:8b:85:83:9b:25:ce:58:52: 5c:5c:ba:eb:e0:23:a0:12:f3:06:ab:21:40:08:3a: 03:69:1f:f1:b8:bc:f9:e5:14:52:ae:f7:20:90:0e: 67:0a:d6:e3:4a:e2:3f:1c:82:ab:cd:e7:98:a3:aa: cd:96:bb:47:ad:07:9a:01:ac:f5:57:33:73:7a:f2: dc:09:11:3c:64:7a:a2:e0:73:6c:8d:6f:98:56:f8: 28:94:a8:35:93:db:06:83:35:12:16:ea:38:e6:d3: 93:61:51:80:d6:fe:76:ee:f6:19:e2:41:a5:7a:34: 0d:56:f0:19:30:71:79:ee:f8:e9:51:13:dc:ea:f5: 2f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5C:16:EA:4D:D4:2C:9A:C8:F7:75:67:55:95:4F:F6:DF:9C:9A:EB X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/8VwW6k3ULJrI93VnVZVP9t-cmus.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.87.0/26 Signature Algorithm: sha256WithRSAEncryption 50:a1:2a:ff:c4:f3:99:4d:7b:02:86:62:bc:50:f8:26:7d:c9: a4:00:a9:21:b5:c5:0c:11:22:6e:c9:bc:62:59:4c:6a:7f:a1: b1:80:ec:46:c5:d7:ef:06:f0:e0:17:98:12:2a:55:61:49:ce: d6:ea:01:52:b2:0d:bd:07:7e:09:f1:f9:ef:48:f8:ff:81:c7: 23:d1:63:f6:5c:e3:e4:91:a1:b5:e4:96:e7:ae:3b:b3:eb:cd: f7:91:f7:12:f2:8e:e1:b5:05:8f:67:ec:d4:6b:fd:7e:eb:3b: 58:34:25:e7:ad:28:f8:aa:d4:2d:bc:e6:88:85:27:17:c5:ef: 56:c5:0f:51:f9:dd:98:be:3e:50:38:8b:26:81:8e:cc:a0:1f: 22:68:a3:8d:6f:57:e1:a8:13:7c:7f:d0:37:39:c8:1a:3e:c9: 6e:c4:04:d8:eb:87:ff:c4:1a:96:76:ed:f3:bd:cf:d5:a0:af: de:da:13:0c:00:2f:01:a4:0b:e2:f1:08:4b:1b:7f:3f:46:65: fa:49:16:6a:9a:b7:e7:19:ce:9c:67:7c:95:b3:95:80:f6:89: b0:fd:5f:f4:f1:a5:cf:b8:6f:f7:35:4a:75:92:63:67:a9:0f: 4f:7c:34:fe:78:fd:2b:24:73:12:25:71:ec:89:af:c3:b1:77: df:d5:1f:cc -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTEwMDEw MTI4MDJaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYxNUMxNkVBNERENDJD OUFDOEY3NzU2NzU1OTU0RkY2REY5QzlBRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA5fanhJ9BpQq/U89sVQI5AueYcYb5CIUepnfqf0J6sHdQk7Yr ii78Xm9aV0rfR1dvC6pVTvqdULBZktz02iBpS/87J4E3RmEXnRyUFbQ4qMxF5rvJ 1ncaiuzNHVZtEDtP6HFaXzFBzx+nQfAJk06VZGjSXB2hXHGUSLWNGu+LhYObJc5Y UlxcuuvgI6AS8warIUAIOgNpH/G4vPnlFFKu9yCQDmcK1uNK4j8cgqvN55ijqs2W u0etB5oBrPVXM3N68twJETxkeqLgc2yNb5hW+CiUqDWT2waDNRIW6jjm05NhUYDW /nbu9hniQaV6NA1W8BkwcXnu+OlRE9zq9S+XAgMBAAGjggIpMIICJTAdBgNVHQ4E FgQU8VwW6k3ULJrI93VnVZVP9t+cmuswHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC84VndXNmszVUxKckk5M1ZuVlpWUDl0LWNtdXMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAATAHAwUGmf5XADANBgkqhkiG9w0BAQsFAAOCAQEAUKEq/8TzmU17AoZivFD4 Jn3JpACpIbXFDBEibsm8YllMan+hsYDsRsXX7wbw4BeYEipVYUnO1uoBUrINvQd+ CfH570j4/4HHI9Fj9lzj5JGhteSW5647s+vN95H3EvKO4bUFj2fs1Gv9fus7WDQl 560o+KrULbzmiIUnF8XvVsUPUfndmL4+UDiLJoGOzKAfImijjW9X4agTfH/QNznI Gj7JbsQE2OuH/8Qalnbt873P1aCv3toTDAAvAaQL4vEISxt/P0Zl+kkWapq35xnO nGd8lbOVgPaJsP1f9PGlz7hv9zVKdZJjZ6kPT3w0/nj9KyRzEiVx7Imvw7F339Uf zA== -----END CERTIFICATE-----Generated at Wed Nov 5 17:30:19 2025 by rpki-client