$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Hw3hxQxD9Np0vjQDbk5Y_rCi5Eg.roa File: Hw3hxQxD9Np0vjQDbk5Y_rCi5Eg.roa (raw, json) Hash identifier: BD1ErUWPNK9L26/tqLg5yPaPKOeVJae5ZNBFBiBiWos= Subject key identifier: 1F:0D:E1:C5:0C:43:F4:DA:74:BE:34:03:6E:4E:58:FE:B0:A2:E4:48 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0116 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Hw3hxQxD9Np0vjQDbk5Y_rCi5Eg.roa Signing time: Sat 01 Nov 2025 01:33:54 +0000 ROA not before: Sat 01 Nov 2025 01:33:54 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 3949 IP address blocks: 61.213.187.0/26 maxlen: 26 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:33:54 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=1F0DE1C50C43F4DA74BE34036E4E58FEB0A2E448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7e:62:f5:2f:e7:44:0a:0e:64:03:a8:d8:44: 70:88:18:55:bb:cb:87:a1:64:9f:5e:c6:40:e9:51: b2:50:f2:c8:96:15:22:9b:42:69:05:75:f3:3e:6a: aa:34:71:5b:2b:25:9e:8a:40:13:22:2e:b7:c9:ec: 37:7d:11:7a:0a:ff:ce:1a:44:78:c9:4a:e7:6f:94: 0a:bd:b0:e6:4c:19:ae:75:5c:38:b5:61:06:04:da: d4:23:82:b7:ef:49:d1:b1:20:63:ea:54:84:f3:c8: 8e:8a:ed:f6:d9:de:8e:5d:53:f1:84:08:6b:f8:e5: 72:09:48:6f:cf:2b:e6:5d:8e:94:e3:e2:24:ef:df: 43:ab:6f:48:28:68:f6:92:74:64:e6:06:72:1f:dc: b8:bc:11:fe:31:a2:b9:4b:6c:e1:86:af:8f:a7:9a: fd:0c:09:a1:a1:ab:0c:5c:00:53:67:69:9d:5a:39: 05:44:3a:c3:70:cf:7e:cc:02:4f:ed:a0:ff:a9:0f: c7:3b:1e:93:ab:27:ce:7b:ac:fd:85:77:a8:67:ce: 16:c8:f7:ad:c3:04:9a:6d:c0:fa:a9:59:e7:80:a0: 89:2b:a0:d8:21:2d:12:19:72:2c:a3:9e:64:57:b2: bb:2d:a6:b4:e4:a2:2c:55:ea:d8:44:66:48:7f:09: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0D:E1:C5:0C:43:F4:DA:74:BE:34:03:6E:4E:58:FE:B0:A2:E4:48 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Hw3hxQxD9Np0vjQDbk5Y_rCi5Eg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.213.187.0/26 Signature Algorithm: sha256WithRSAEncryption 3c:89:7d:e9:06:3a:e9:73:96:d6:96:77:df:5e:2d:c6:00:1c: 78:95:8d:eb:75:61:13:35:a7:a7:f2:08:b3:29:55:c3:db:50: 27:05:c6:68:1b:5d:e2:2b:29:43:fe:c4:45:6e:2c:b8:7a:ff: ec:fb:6d:43:2c:6e:58:8a:6b:4c:ad:bc:66:0d:18:99:02:be: dd:10:e8:46:35:a5:e1:92:31:be:69:91:f9:e8:ae:b3:80:02: f8:3f:42:6c:6f:55:dd:10:4d:81:26:b3:fb:89:56:01:2c:28: f7:6e:91:a0:97:e6:a0:d4:40:b4:8c:17:ed:bc:c7:e1:bd:ac: 73:77:69:45:1d:de:69:d4:5d:cc:f8:97:93:08:fd:00:ea:fd: 2c:a6:56:f5:0f:32:13:4a:e3:03:07:7a:4f:36:6e:4b:81:36: 49:4a:cc:11:6c:65:5b:50:5e:fd:21:2e:b5:07:69:81:4a:8f: 15:45:6c:8d:e7:bb:16:ef:ca:ee:71:c0:d5:54:bc:83:2f:fc: ef:f5:e5:94:a5:03:59:30:ed:bf:24:bd:40:02:81:63:d8:4e: 25:38:f8:b7:99:a6:f2:21:b9:31:33:90:1b:f3:05:63:5d:63: da:98:f0:d8:dd:f9:31:a3:54:62:6b:6a:2b:2d:b3:b3:78:c5: f5:f9:c2:e7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgICARYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTMzNTRaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFGMERFMUM1MEM0M0Y0 REE3NEJFMzQwMzZFNEU1OEZFQjBBMkU0NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0fmL1L+dECg5kA6jYRHCIGFW7y4ehZJ9exkDpUbJQ8siWFSKb QmkFdfM+aqo0cVsrJZ6KQBMiLrfJ7Dd9EXoK/84aRHjJSudvlAq9sOZMGa51XDi1 YQYE2tQjgrfvSdGxIGPqVITzyI6K7fbZ3o5dU/GECGv45XIJSG/PK+ZdjpTj4iTv 30Orb0goaPaSdGTmBnIf3Li8Ef4xorlLbOGGr4+nmv0MCaGhqwxcAFNnaZ1aOQVE OsNwz37MAk/toP+pD8c7HpOrJ857rP2Fd6hnzhbI963DBJptwPqpWeeAoIkroNgh LRIZciyjnmRXsrstprTkoixV6thEZkh/CbwxAgMBAAGjggIpMIICJTAdBgNVHQ4E FgQUHw3hxQxD9Np0vjQDbk5Y/rCi5EgwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9IdzNoeFF4RDlOcDB2alFEYms1WV9yQ2k1RWcu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAATAHAwUGPdW7ADANBgkqhkiG9w0BAQsFAAOCAQEAPIl96QY66XOW1pZ3314t xgAceJWN63VhEzWnp/IIsylVw9tQJwXGaBtd4ispQ/7ERW4suHr/7PttQyxuWIpr TK28Zg0YmQK+3RDoRjWl4ZIxvmmR+eius4AC+D9CbG9V3RBNgSaz+4lWASwo926R oJfmoNRAtIwX7bzH4b2sc3dpRR3eadRdzPiXkwj9AOr9LKZW9Q8yE0rjAwd6TzZu S4E2SUrMEWxlW1Be/SEutQdpgUqPFUVsjee7Fu/K7nHA1VS8gy/87/XllKUDWTDt vyS9QAKBY9hOJTj4t5mm8iG5MTOQG/MFY11j2pjw2N35MaNUYmtqKy2zs3jF9fnC 5w== -----END CERTIFICATE-----Generated at Wed Nov 5 16:55:47 2025 by rpki-client