$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Fec5Xjuz-G7lBHV1tjDp7GDRSq4.roa File: Fec5Xjuz-G7lBHV1tjDp7GDRSq4.roa (raw, json) Hash identifier: Uhbgl5ZmroFgXifXXyKCasi+4/tIgcHs5FGlxFNgv6c= Subject key identifier: 15:E7:39:5E:3B:B3:F8:6E:E5:04:75:75:B6:30:E9:EC:60:D1:4A:AE Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: E9 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Fec5Xjuz-G7lBHV1tjDp7GDRSq4.roa Signing time: Fri 24 Oct 2025 10:27:13 +0000 ROA not before: Fri 24 Oct 2025 10:27:13 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 14821 IP address blocks: 153.254.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Oct 24 10:27:13 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=15E7395E3BB3F86EE5047575B630E9EC60D14AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:50:7b:49:c4:e5:56:a0:ef:2c:37:1b:c7: 65:5d:33:37:f3:cd:9a:7d:d6:ab:ce:c7:b2:7d:56: e9:d2:73:b2:87:ef:89:0e:76:a8:f9:20:08:00:9e: ab:98:f5:60:2e:d3:7b:a6:f4:b8:7d:0b:96:45:5e: e6:a4:4a:01:20:64:fc:ed:4f:ac:e3:d1:24:4c:65: fc:20:eb:e4:31:61:41:45:d1:63:46:41:10:67:9e: a4:7d:3d:39:2e:a2:9a:b7:39:89:46:85:8a:73:1d: 76:94:0b:62:b9:12:14:32:fb:61:27:c8:fe:aa:28: 4e:11:00:00:4f:dd:7d:88:11:93:59:3a:ee:bb:dd: 10:00:8b:1f:bf:5d:29:08:0b:c9:b8:30:03:73:07: ed:dc:6d:68:7f:07:02:b1:e9:a9:b2:fa:7f:4a:d5: d7:46:f7:f9:2d:78:6c:07:21:d0:8e:3e:8b:ec:63: e2:40:18:ed:31:1b:b2:e7:37:12:cc:e7:6d:ec:a4: 14:a5:bb:7d:ed:e8:fb:84:b2:44:9e:41:2b:1f:a2: 78:52:c8:f2:1c:c7:1c:c5:1d:a6:85:9d:95:62:3f: 87:a6:9f:13:c4:28:dd:ec:df:cb:1d:6e:4e:cc:4e: 29:8f:c1:aa:5e:7a:2e:d9:c6:2f:2f:65:d6:8a:57: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E7:39:5E:3B:B3:F8:6E:E5:04:75:75:B6:30:E9:EC:60:D1:4A:AE X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Fec5Xjuz-G7lBHV1tjDp7GDRSq4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.111.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:ee:f7:6d:a6:30:e1:21:96:30:15:03:14:dc:18:d0:49:9e: 84:b4:68:dd:6b:9c:31:c5:19:73:30:ab:7f:e4:c0:0c:2c:f2: e3:da:3c:05:51:0c:a5:53:98:37:2f:2f:68:6d:15:ea:05:29: 80:ac:27:18:fe:9d:b5:6c:53:fb:33:3a:c7:9a:3f:43:7b:cf: be:4a:6a:f4:3f:3c:2f:b1:64:03:d6:15:a2:ae:c3:85:77:3d: 14:01:39:0a:88:73:4e:db:f0:07:1e:98:82:30:86:60:14:d0: ca:3f:84:53:67:2e:d4:a3:de:a7:ec:3d:83:94:71:e4:e7:f0: 23:99:36:1c:73:f1:28:17:93:a7:07:e5:ad:3f:8c:5a:6e:56: 43:64:73:e0:60:8c:72:15:71:d6:08:34:b6:5e:be:e5:5a:81: cc:1e:57:dd:04:c7:82:de:8c:35:f0:7e:a1:af:b8:85:d2:bd: 33:bb:da:f3:10:96:d7:33:d7:f3:b4:f6:bf:a7:ef:86:8e:b6: a2:b8:ef:3f:5c:8d:88:ee:d9:03:a2:d2:e3:13:6d:75:46:9e: 02:73:3f:08:7c:87:0c:1f:d9:6c:a6:1e:42:e3:7d:ef:b5:c4: 28:76:cf:55:89:69:b3:49:22:ac:fd:2d:ec:88:fd:b8:0c:53: fa:11:af:00 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTEwMjQx MDI3MTNaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE1RTczOTVFM0JCM0Y4 NkVFNTA0NzU3NUI2MzBFOUVDNjBEMTRBQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPflB7ScTlVqDvLDcbx2VdMzfzzZp91qvOx7J9VunSc7KH74kO dqj5IAgAnquY9WAu03um9Lh9C5ZFXuakSgEgZPztT6zj0SRMZfwg6+QxYUFF0WNG QRBnnqR9PTkuopq3OYlGhYpzHXaUC2K5EhQy+2EnyP6qKE4RAABP3X2IEZNZOu67 3RAAix+/XSkIC8m4MANzB+3cbWh/BwKx6amy+n9K1ddG9/kteGwHIdCOPovsY+JA GO0xG7LnNxLM523spBSlu33t6PuEskSeQSsfonhSyPIcxxzFHaaFnZViP4emnxPE KN3s38sdbk7MTimPwapeei7Zxi8vZdaKV3OnAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUFec5Xjuz+G7lBHV1tjDp7GDRSq4wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9GZWM1WGp1ei1HN2xCSFYxdGpEcDdHRFJTcTQu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAmf5vMA0GCSqGSIb3DQEBCwUAA4IBAQB87vdtpjDhIZYwFQMU3BjQ SZ6EtGjda5wxxRlzMKt/5MAMLPLj2jwFUQylU5g3Ly9obRXqBSmArCcY/p21bFP7 MzrHmj9De8++Smr0PzwvsWQD1hWirsOFdz0UATkKiHNO2/AHHpiCMIZgFNDKP4RT Zy7Uo96n7D2DlHHk5/AjmTYcc/EoF5OnB+WtP4xablZDZHPgYIxyFXHWCDS2Xr7l WoHMHlfdBMeC3ow18H6hr7iF0r0zu9rzEJbXM9fztPa/p++GjraiuO8/XI2I7tkD otLjE211Rp4Ccz8IfIcMH9lsph5C433vtcQods9ViWmzSSKs/S3siP24DFP6Ea8A -----END CERTIFICATE-----Generated at Wed Nov 5 21:49:30 2025 by rpki-client