$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/CRkuFpPZUdQvNf6RlACbewLKQ-Y.roa File: CRkuFpPZUdQvNf6RlACbewLKQ-Y.roa (raw, json) Hash identifier: Wx0Qwiqxd90KNZ+DdDE7ycf7bF3MmtaBrL6rcmEzfPc= Subject key identifier: 09:19:2E:16:93:D9:51:D4:2F:35:FE:91:94:00:9B:7B:02:CA:43:E6 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0124 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/CRkuFpPZUdQvNf6RlACbewLKQ-Y.roa Signing time: Sat 01 Nov 2025 01:34:01 +0000 ROA not before: Sat 01 Nov 2025 01:34:01 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 132203 IP address blocks: 120.88.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:34:01 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=09192E1693D951D42F35FE9194009B7B02CA43E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:ff:9f:84:01:e1:1f:24:4d:43:f8:9e:15: 68:99:1c:8f:d2:28:ee:c3:d2:ed:20:72:61:b8:b6: f8:06:7d:cf:58:2a:31:c0:07:86:77:56:e2:8d:8a: 46:de:63:e0:5a:d6:4e:b5:50:2e:56:9b:19:19:26: f5:3c:b4:e2:83:1f:5d:69:0b:4e:c3:5b:7d:de:c2: eb:11:37:44:57:98:39:8d:1d:8d:30:dc:c4:d6:4c: c7:07:d9:99:0e:2f:16:8c:63:cd:78:1f:84:f2:79: d5:d0:19:a3:77:61:24:ef:14:74:e7:94:89:a7:7b: 3a:b1:4f:e7:66:61:f2:ed:ca:d3:67:02:cc:14:23: 7e:0e:25:4f:ba:80:3a:19:bd:10:eb:b0:59:e3:2e: 3e:7c:f4:71:54:26:8c:f9:38:7f:18:d0:ad:6f:9a: 7c:da:d0:7a:96:82:dc:f8:53:de:d0:0f:4a:84:02: 1e:29:d1:82:bf:17:d2:db:44:19:97:ea:a7:e8:73: e9:f7:cd:39:4e:be:b5:a9:e8:80:ab:4c:93:bf:3a: a2:b1:64:d8:c6:7a:38:86:95:eb:d1:36:20:b0:09: 44:3e:0a:2e:27:78:59:6a:e5:09:f9:d5:0b:1a:db: a7:80:95:10:66:d4:29:5e:dd:8b:de:1e:e6:11:36: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:19:2E:16:93:D9:51:D4:2F:35:FE:91:94:00:9B:7B:02:CA:43:E6 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/CRkuFpPZUdQvNf6RlACbewLKQ-Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.88.56.0/23 Signature Algorithm: sha256WithRSAEncryption a0:f9:d3:2d:f3:b1:18:5d:ce:0a:a3:01:a5:36:db:cc:56:3f: f0:65:9d:f7:13:e6:d6:c5:fd:27:79:e8:d4:a7:27:98:26:e9: ae:34:6c:43:bf:ab:58:4a:3a:dd:bc:38:b8:44:aa:22:55:3d: e6:05:e8:ff:b6:e5:ac:de:70:39:42:bb:d2:d2:49:b6:8e:7a: 6e:aa:96:d5:81:bd:0a:3a:7a:9b:07:c2:f3:b7:55:d8:dd:ac: 7d:a7:04:de:f2:60:c1:00:9a:14:69:7a:59:42:56:1c:d4:f9: 70:8e:51:c6:f6:7b:c5:e2:92:f6:7f:c0:55:1f:7a:da:79:3a: a4:16:a5:af:5b:1d:e5:f3:7d:06:d8:2a:03:c3:2e:35:45:0f: 05:66:52:fe:85:f4:8c:39:b0:35:5d:37:25:a3:d9:e8:31:29: e2:13:fd:23:0c:d0:70:7e:7a:e7:a4:0a:b4:91:71:8a:f1:bb: 25:71:4b:13:e3:95:3e:c0:47:40:2c:94:6b:79:9a:6e:c0:b1: c5:d3:7d:7e:7a:f4:66:0f:50:43:1a:d4:4c:24:a0:78:01:2b: ad:61:fd:7a:b5:ec:67:2c:1c:b7:2e:8a:b3:6b:3c:93:f6:13: 6e:6d:b0:76:e8:e0:c3:db:09:ac:25:3c:39:d1:6e:b5:ca:9f: 20:9e:7d:dc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICASQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTM0MDFaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA5MTkyRTE2OTNEOTUx RDQyRjM1RkU5MTk0MDA5QjdCMDJDQTQzRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxnv+fhAHhHyRNQ/ieFWiZHI/SKO7D0u0gcmG4tvgGfc9YKjHA B4Z3VuKNikbeY+Ba1k61UC5WmxkZJvU8tOKDH11pC07DW33ewusRN0RXmDmNHY0w 3MTWTMcH2ZkOLxaMY814H4TyedXQGaN3YSTvFHTnlImnezqxT+dmYfLtytNnAswU I34OJU+6gDoZvRDrsFnjLj589HFUJoz5OH8Y0K1vmnza0HqWgtz4U97QD0qEAh4p 0YK/F9LbRBmX6qfoc+n3zTlOvrWp6ICrTJO/OqKxZNjGejiGlevRNiCwCUQ+Ci4n eFlq5Qn51Qsa26eAlRBm1Cle3YveHuYRNjg7AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUCRkuFpPZUdQvNf6RlACbewLKQ+YwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9DUmt1RnBQWlVkUXZOZjZSbEFDYmV3TEtRLVku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBeFg4MA0GCSqGSIb3DQEBCwUAA4IBAQCg+dMt87EYXc4KowGlNtvM Vj/wZZ33E+bWxf0neejUpyeYJumuNGxDv6tYSjrdvDi4RKoiVT3mBej/tuWs3nA5 QrvS0km2jnpuqpbVgb0KOnqbB8Lzt1XY3ax9pwTe8mDBAJoUaXpZQlYc1PlwjlHG 9nvF4pL2f8BVH3raeTqkFqWvWx3l830G2CoDwy41RQ8FZlL+hfSMObA1XTclo9no MSniE/0jDNBwfnrnpAq0kXGK8bslcUsT45U+wEdALJRreZpuwLHF031+evRmD1BD GtRMJKB4ASutYf16texnLBy3LoqzazyT9hNubbB26ODD2wmsJTw50W61yp8gnn3c -----END CERTIFICATE-----Generated at Wed Nov 5 03:12:58 2025 by rpki-client