$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/F_KnwhIQfe5UC3hljtnNCJ5448w.roa File: F_KnwhIQfe5UC3hljtnNCJ5448w.roa (raw, json) Hash identifier: dkVq+BHzzoTwqe5Aru249k3VOAxRVwZaOQ0TWH5mwFY= Subject key identifier: 17:F2:A7:C2:12:10:7D:EE:54:0B:78:65:8E:D9:CD:08:9E:78:E3:CC Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: F5 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/F_KnwhIQfe5UC3hljtnNCJ5448w.roa Signing time: Sat 01 Nov 2025 01:28:34 +0000 ROA not before: Sat 01 Nov 2025 01:28:34 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 153.254.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:34 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=17F2A7C212107DEE540B78658ED9CD089E78E3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:b0:8b:a9:1a:b6:9c:cb:d4:0c:0a:f2:b5: eb:22:7f:eb:4c:c8:2e:16:66:d0:e6:30:01:e0:32: b7:d4:9e:b1:af:f5:a4:80:20:80:a9:36:31:99:8d: e8:7d:7a:83:ad:f1:5e:e1:a9:19:75:66:a5:6e:3e: 22:12:bd:5a:de:b9:73:c7:5e:b8:aa:50:9b:fd:70: 29:30:2e:05:74:7d:af:ed:f7:67:cf:15:55:bd:25: dd:60:62:8a:df:36:59:3e:ee:7b:6d:b4:62:83:88: 08:7f:db:44:88:46:7e:58:60:0e:7e:92:b9:b1:ac: 31:ac:5b:e1:b4:04:c2:f9:4f:fe:5f:1b:ab:42:03: f3:d2:75:ea:d5:39:d7:a7:9f:a0:02:99:ee:fb:ec: 28:81:b3:06:41:35:53:11:2a:c4:df:27:36:bc:8e: 90:33:f5:8b:75:ab:2b:de:ce:66:d1:87:72:6e:5a: 8d:9d:ad:67:4b:fe:2f:a6:12:0a:55:4e:90:20:bb: c6:f9:7a:5a:66:7b:2b:ce:05:b3:1e:64:4f:db:4e: c6:eb:59:3f:ac:85:24:e0:3b:55:75:33:63:30:3d: 93:53:18:f9:e2:19:18:a6:9a:e3:61:5d:5a:06:0a: f6:5b:02:82:82:48:b8:ae:67:87:55:95:f6:85:5e: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F2:A7:C2:12:10:7D:EE:54:0B:78:65:8E:D9:CD:08:9E:78:E3:CC X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/F_KnwhIQfe5UC3hljtnNCJ5448w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.0.0/15 Signature Algorithm: sha256WithRSAEncryption 94:3f:b1:e3:e6:9f:da:10:b0:e6:ca:ba:f8:5b:58:da:87:00: 7c:e9:cb:50:b5:fc:08:b2:9e:57:41:ad:6c:8c:38:b0:56:fe: ef:e3:80:4b:3a:19:77:60:78:2d:d6:b5:cc:7c:c8:ae:2e:c7: 2a:0a:38:75:73:e6:e2:86:46:62:61:d7:35:67:fe:ae:89:0a: 03:b1:09:22:92:7a:56:52:44:38:66:f6:03:4a:45:75:a0:a2: 3c:d9:fe:b4:fc:9e:be:97:b9:db:37:2d:83:4e:42:b4:e2:77: f9:8c:34:fa:aa:04:36:3c:bd:2f:22:b1:ef:cb:0f:f7:50:29: 1f:36:85:e6:01:d3:b3:d6:a0:8a:24:6e:15:43:94:ad:26:37: c0:3a:04:1a:0b:79:2c:70:8f:cd:17:94:42:37:db:b3:6d:6b: 0e:1e:d2:2d:a6:a2:8f:a3:fb:42:b6:44:57:60:93:54:59:dd: 16:1e:09:01:82:64:ed:d9:88:f4:9c:e2:7c:63:a3:27:c7:f5: 00:25:d6:ba:b2:48:d2:4f:62:b6:35:4a:ad:c2:0a:6b:70:c7: 89:3d:4f:df:0e:b0:fe:39:32:3a:e9:a5:5a:15:28:a0:f4:5d: 60:e3:86:3f:8b:8e:72:fc:e2:71:42:54:46:f2:75:f1:dd:5f: fe:51:9d:85 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4MzRaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE3RjJBN0MyMTIxMDdE RUU1NDBCNzg2NThFRDlDRDA4OUU3OEUzQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgrrCLqRq2nMvUDArytesif+tMyC4WZtDmMAHgMrfUnrGv9aSA IICpNjGZjeh9eoOt8V7hqRl1ZqVuPiISvVreuXPHXriqUJv9cCkwLgV0fa/t92fP FVW9Jd1gYorfNlk+7ntttGKDiAh/20SIRn5YYA5+krmxrDGsW+G0BML5T/5fG6tC A/PSderVOdenn6ACme777CiBswZBNVMRKsTfJza8jpAz9Yt1qyvezmbRh3JuWo2d rWdL/i+mEgpVTpAgu8b5elpmeyvOBbMeZE/bTsbrWT+shSTgO1V1M2MwPZNTGPni GRimmuNhXVoGCvZbAoKCSLiuZ4dVlfaFXli/AgMBAAGjggInMIICIzAdBgNVHQ4E FgQUF/KnwhIQfe5UC3hljtnNCJ5448wwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9GX0tud2hJUWZlNVVDM2hsanRuTkNKNTQ0OHcu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBmf4wDQYJKoZIhvcNAQELBQADggEBAJQ/sePmn9oQsObKuvhbWNqH AHzpy1C1/AiynldBrWyMOLBW/u/jgEs6GXdgeC3Wtcx8yK4uxyoKOHVz5uKGRmJh 1zVn/q6JCgOxCSKSelZSRDhm9gNKRXWgojzZ/rT8nr6Xuds3LYNOQrTid/mMNPqq BDY8vS8ise/LD/dQKR82heYB07PWoIokbhVDlK0mN8A6BBoLeSxwj80XlEI327Nt aw4e0i2moo+j+0K2RFdgk1RZ3RYeCQGCZO3ZiPSc4nxjoyfH9QAl1rqySNJPYrY1 Sq3CCmtwx4k9T98OsP45MjrppVoVKKD0XWDjhj+LjnL84nFCVEbydfHdX/5RnYU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:00:22 2025 by rpki-client