$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ADfiqeBGXBWJuR7rbBmm9WARjIk.roa File: ADfiqeBGXBWJuR7rbBmm9WARjIk.roa (raw, json) Hash identifier: ZGnNSE/T+7AbG98rkQ5LuBhBsHtkvn+hQERZxO46vIk= Subject key identifier: 00:37:E2:A9:E0:46:5C:15:89:B9:1E:EB:6C:19:A6:F5:60:11:8C:89 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 011D Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ADfiqeBGXBWJuR7rbBmm9WARjIk.roa Signing time: Sat 01 Nov 2025 01:33:58 +0000 ROA not before: Sat 01 Nov 2025 01:33:58 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 203.205.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:33:58 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=0037E2A9E0465C1589B91EEB6C19A6F560118C89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:92:09:ea:fa:69:f1:db:36:d5:9c:5a:6e: 5e:4d:42:c4:dd:ef:73:4c:79:b2:9f:b7:e0:3d:7e: ea:8d:39:da:30:be:e9:1e:cb:ce:92:d4:cc:ec:5c: 68:4a:9a:85:dc:01:a3:b7:54:40:ad:53:3a:4b:1c: 7d:82:aa:f1:9e:0a:be:84:e9:2f:e5:01:83:a3:89: c0:e6:09:07:a8:24:c3:8e:3e:c6:56:b5:7e:23:f8: b5:8f:01:ef:52:19:2c:40:0e:c8:20:c1:ce:f1:18: 6b:d0:c3:d1:7d:8e:16:33:4d:e4:45:a3:10:9b:02: 05:37:da:28:fb:53:db:58:41:95:fe:41:37:a5:7c: a7:89:04:02:34:4e:c4:fa:ea:08:f2:3a:f8:de:94: fb:fd:49:25:37:52:b2:66:35:42:89:ff:26:e3:e9: 88:b3:07:3f:6c:2d:c1:b6:93:01:0d:25:c1:eb:cb: 99:af:84:5e:e8:95:ca:46:3a:c4:d7:77:3a:32:c5: 17:85:a7:3e:75:40:b0:6c:9b:da:f0:1d:44:5d:4f: b2:20:3e:43:02:b7:34:78:ab:92:dc:9b:80:7b:f0: 2e:06:65:9b:46:55:aa:88:fd:e3:45:a2:a8:95:cc: 6f:fd:ef:a1:23:6d:f1:a4:a3:71:50:26:22:ea:5d: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:37:E2:A9:E0:46:5C:15:89:B9:1E:EB:6C:19:A6:F5:60:11:8C:89 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ADfiqeBGXBWJuR7rbBmm9WARjIk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.205.112.0/20 Signature Algorithm: sha256WithRSAEncryption 75:00:05:13:df:15:67:49:a7:9b:3b:89:f7:d9:8c:40:92:87: 95:46:d5:96:82:4c:1d:dd:84:e6:22:5e:d3:30:6f:33:f7:53: 82:d3:99:b3:3e:d7:56:03:5b:8c:94:6b:a0:fe:fd:25:6b:4b: 15:a0:5e:eb:b0:ed:cf:2b:bf:82:dd:92:d7:28:84:0c:ca:e5: 2a:2b:30:80:4d:42:04:65:98:15:2f:32:bf:8f:d7:d7:01:92: 13:9d:4c:ac:fc:c1:70:42:bb:72:37:a7:24:b8:6c:78:8e:3b: 62:b2:b9:49:58:e2:79:1f:06:a3:54:ac:06:45:86:36:24:28: 98:a1:09:79:4d:f2:1a:31:cf:97:26:ba:22:52:47:ab:27:44: d4:36:44:d1:4f:62:3e:32:d5:e3:eb:22:34:94:6d:ec:2d:23: 31:e4:12:81:66:da:80:61:d9:fb:32:53:6c:19:dd:54:83:ed: a1:f7:b3:38:3e:43:5f:dd:65:9c:b8:6e:e0:f9:e4:24:d0:01: 3b:7c:f4:e1:6c:6e:30:a8:af:d6:84:20:ba:0a:c5:d1:f9:d4: 1f:84:a8:86:c1:be:8a:8a:b5:7a:9a:3b:e4:f1:52:3f:7c:e5: 29:76:7a:b5:84:d9:cb:3a:f5:1e:91:5a:b6:88:99:2d:81:7c: 70:b8:c1:36 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTMzNThaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAwMzdFMkE5RTA0NjVD MTU4OUI5MUVFQjZDMTlBNkY1NjAxMThDODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx1JIJ6vpp8ds21Zxabl5NQsTd73NMebKft+A9fuqNOdowvuke y86S1MzsXGhKmoXcAaO3VECtUzpLHH2CqvGeCr6E6S/lAYOjicDmCQeoJMOOPsZW tX4j+LWPAe9SGSxADsggwc7xGGvQw9F9jhYzTeRFoxCbAgU32ij7U9tYQZX+QTel fKeJBAI0TsT66gjyOvjelPv9SSU3UrJmNUKJ/ybj6YizBz9sLcG2kwENJcHry5mv hF7olcpGOsTXdzoyxReFpz51QLBsm9rwHURdT7IgPkMCtzR4q5Lcm4B78C4GZZtG VaqI/eNFoqiVzG/976EjbfGko3FQJiLqXV8rAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUADfiqeBGXBWJuR7rbBmm9WARjIkwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9BRGZpcWVCR1hCV0p1UjdyYkJtbTlXQVJqSWsu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEy81wMA0GCSqGSIb3DQEBCwUAA4IBAQB1AAUT3xVnSaebO4n32YxA koeVRtWWgkwd3YTmIl7TMG8z91OC05mzPtdWA1uMlGug/v0la0sVoF7rsO3PK7+C 3ZLXKIQMyuUqKzCATUIEZZgVLzK/j9fXAZITnUys/MFwQrtyN6ckuGx4jjtisrlJ WOJ5HwajVKwGRYY2JCiYoQl5TfIaMc+XJroiUkerJ0TUNkTRT2I+MtXj6yI0lG3s LSMx5BKBZtqAYdn7MlNsGd1Ug+2h97M4PkNf3WWcuG7g+eQk0AE7fPThbG4wqK/W hCC6CsXR+dQfhKiGwb6KirV6mjvk8VI/fOUpdnq1hNnLOvUekVq2iJktgXxwuME2 -----END CERTIFICATE-----Generated at Tue Nov 4 22:34:54 2025 by rpki-client