$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ANIXW44I9GKejsCxOz8ZS5O3WMU.roa File: ANIXW44I9GKejsCxOz8ZS5O3WMU.roa (raw, json) Hash identifier: ef4t2PITtEUO1pUGwpXf7Jr26Ph6rWYA5y4a2hsDooE= Subject key identifier: 00:D2:17:5B:8E:08:F4:62:9E:8E:C0:B1:3B:3F:19:4B:93:B7:58:C5 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: FD Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ANIXW44I9GKejsCxOz8ZS5O3WMU.roa Signing time: Sat 01 Nov 2025 01:28:39 +0000 ROA not before: Sat 01 Nov 2025 01:28:39 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 120.29.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:39 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=00D2175B8E08F4629E8EC0B13B3F194B93B758C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:12:f3:cd:03:e0:e8:e5:5c:9f:bd:da:8b: 8a:84:8f:ae:63:72:88:a1:62:27:40:17:49:2d:4e: c2:e4:95:4d:e6:a2:25:ce:c5:5d:c7:22:f8:48:a5: c9:e8:9d:ca:30:85:2f:20:83:9b:1c:54:ff:78:fe: 58:b6:88:94:b2:11:37:03:43:4a:9c:e5:6f:40:fa: 48:8c:a2:fa:e7:3f:c3:17:05:74:4b:e9:c8:2e:7a: 1b:2b:29:e3:39:c5:0f:95:8b:9a:a7:a1:0b:93:b4: e0:6c:eb:36:27:10:50:84:47:14:76:3f:31:a2:d5: b5:8d:05:79:e5:b9:7b:67:f4:1e:5c:40:9c:8c:37: 67:ad:7a:f5:14:57:68:16:79:82:fc:56:66:38:a3: 2d:05:f7:a1:eb:10:f3:4b:44:5a:5e:1b:3f:25:e1: 62:9c:bf:17:9d:da:98:7f:43:76:23:95:7a:20:e6: f8:94:4e:f1:83:36:b1:54:5f:1f:d9:f8:7b:93:6f: ce:cd:e8:ca:53:4b:94:d7:ef:21:1d:18:7e:af:8e: a8:9a:5f:b8:b2:6c:14:51:45:04:68:6b:87:59:91: 1d:17:1a:a7:65:bf:24:f0:d0:ea:f1:3b:4c:b0:85: fb:84:1d:7c:81:e3:c7:8f:42:18:2c:d5:eb:a8:26: 6c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D2:17:5B:8E:08:F4:62:9E:8E:C0:B1:3B:3F:19:4B:93:B7:58:C5 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ANIXW44I9GKejsCxOz8ZS5O3WMU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.144.0/21 Signature Algorithm: sha256WithRSAEncryption 01:64:1d:5f:02:73:52:09:68:56:c5:f8:2e:c1:f7:11:1f:29: 76:85:18:d5:c5:49:ac:e1:3a:6b:89:92:ec:1b:ce:41:bc:ca: 1c:6c:63:16:8f:39:0b:5d:27:64:d4:ad:56:6a:a8:e2:7a:e1: ee:35:b9:d6:85:74:06:8f:cd:9a:16:fc:31:4c:41:85:26:b1: 46:38:23:75:98:60:83:18:49:c5:7f:55:e0:ce:2a:0b:a7:ae: 67:3a:9a:62:8c:09:db:13:20:bd:6c:5b:a4:17:d0:64:e5:d6: 90:20:1e:65:66:1c:63:98:b0:f6:bc:45:86:1a:15:b5:62:30: 49:88:04:7a:04:4f:d2:75:73:80:d7:eb:37:b4:98:4f:03:30: b9:51:30:fe:5d:4d:5b:79:7b:cc:cd:3c:5a:0f:ad:ee:2d:6f: 82:f4:7a:67:21:c8:0e:16:10:17:54:01:65:a5:83:a2:33:a7: 60:b3:cd:ea:55:86:60:58:bd:e7:d1:98:ce:ae:b2:83:49:cc: 38:c8:96:5e:e9:2e:7b:a1:f5:97:22:91:2e:32:96:27:56:8c: 19:99:65:0b:2d:c7:8f:29:13:25:cc:06:57:8d:1c:18:b0:49: 07:14:20:a6:76:4b:8e:7e:bd:9b:2d:29:29:87:32:07:12:2c: 78:d3:16:47 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4MzlaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAwRDIxNzVCOEUwOEY0 NjI5RThFQzBCMTNCM0YxOTRCOTNCNzU4QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD3xLzzQPg6OVcn73ai4qEj65jcoihYidAF0ktTsLklU3moiXO xV3HIvhIpcnoncowhS8gg5scVP94/li2iJSyETcDQ0qc5W9A+kiMovrnP8MXBXRL 6cguehsrKeM5xQ+Vi5qnoQuTtOBs6zYnEFCERxR2PzGi1bWNBXnluXtn9B5cQJyM N2etevUUV2gWeYL8VmY4oy0F96HrEPNLRFpeGz8l4WKcvxed2ph/Q3YjlXog5viU TvGDNrFUXx/Z+HuTb87N6MpTS5TX7yEdGH6vjqiaX7iybBRRRQRoa4dZkR0XGqdl vyTw0OrxO0ywhfuEHXyB48ePQhgs1euoJmydAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUANIXW44I9GKejsCxOz8ZS5O3WMUwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9BTklYVzQ0STlHS2Vqc0N4T3o4WlM1TzNXTVUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDeB2QMA0GCSqGSIb3DQEBCwUAA4IBAQABZB1fAnNSCWhWxfguwfcR Hyl2hRjVxUms4TpriZLsG85BvMocbGMWjzkLXSdk1K1WaqjieuHuNbnWhXQGj82a FvwxTEGFJrFGOCN1mGCDGEnFf1XgzioLp65nOppijAnbEyC9bFukF9Bk5daQIB5l ZhxjmLD2vEWGGhW1YjBJiAR6BE/SdXOA1+s3tJhPAzC5UTD+XU1beXvMzTxaD63u LW+C9HpnIcgOFhAXVAFlpYOiM6dgs83qVYZgWL3n0ZjOrrKDScw4yJZe6S57ofWX IpEuMpYnVowZmWULLcePKRMlzAZXjRwYsEkHFCCmdkuOfr2bLSkphzIHEix40xZH -----END CERTIFICATE-----Generated at Wed Nov 5 04:24:24 2025 by rpki-client