$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KJqQYqCNGwNUkLKAYBaj3ZgJXKU.roa File: KJqQYqCNGwNUkLKAYBaj3ZgJXKU.roa (raw, json) Hash identifier: VyrolMyWRR7C0uWBlqVpytPhl82kx/sqqHg6L28nPVs= Subject key identifier: 28:9A:90:62:A0:8D:1B:03:54:90:B2:80:60:16:A3:DD:98:09:5C:A5 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: D9 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KJqQYqCNGwNUkLKAYBaj3ZgJXKU.roa Signing time: Mon 01 Sep 2025 01:30:04 +0000 ROA not before: Mon 01 Sep 2025 01:30:04 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 24319 IP address blocks: 124.40.52.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Sep 1 01:30:04 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=289A9062A08D1B035490B2806016A3DD98095CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:c2:85:d5:2f:62:5b:f5:63:6c:ed:d8:4c: 0b:4e:3b:c3:0f:c2:4c:a1:f0:60:bc:b7:62:75:9a: 34:69:dd:d5:db:25:9f:e0:4c:b7:12:94:57:db:7b: 90:db:2e:c1:e3:0f:a2:1f:f7:f9:54:c1:8e:ed:85: 78:8d:96:fa:09:b8:37:8a:1a:48:9e:7f:85:e9:8e: d9:8a:7a:ec:44:fc:1b:8c:98:36:92:dc:0e:5e:ef: fe:d9:ab:1c:1f:05:eb:66:9b:79:8d:f3:79:85:c0: 62:77:2a:bf:bf:af:59:ba:08:9a:d9:cf:d7:17:e9: f5:bb:ae:42:7e:94:d2:06:49:4e:30:aa:76:27:af: c6:be:25:be:f3:54:ee:39:ba:4b:d4:61:35:bb:3f: 1d:90:07:3e:7a:55:a6:a4:e8:80:f4:9e:5b:20:62: cc:5c:0e:ba:ba:1b:12:cc:7d:27:e7:21:f9:8a:9b: 31:46:e7:ef:df:73:3c:cc:39:3b:6c:57:1a:1d:a3: d1:6f:b3:e2:57:b1:f9:81:59:dd:f2:8b:f2:04:1b: 3f:6a:fc:68:25:aa:0a:0c:bd:63:a7:50:26:23:80: f8:da:13:d0:f9:1d:7a:1b:7e:52:b4:f7:08:d2:d0: f9:a8:cb:70:d0:95:1f:12:87:43:77:dd:9f:9c:70: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9A:90:62:A0:8D:1B:03:54:90:B2:80:60:16:A3:DD:98:09:5C:A5 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KJqQYqCNGwNUkLKAYBaj3ZgJXKU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.40.52.208/28 Signature Algorithm: sha256WithRSAEncryption 58:1e:ec:38:76:b0:09:da:66:97:75:27:b1:f8:a5:73:ba:bf: 51:24:7a:b4:83:42:b9:0f:f6:88:88:83:29:95:b1:2d:cd:2f: 4e:3c:0c:e0:fd:2d:e6:9c:92:1f:41:d8:f6:f6:c5:b9:3e:24: f4:a3:8b:2d:9e:e6:77:93:43:a0:46:03:ea:1c:94:ff:d4:eb: 5e:9a:6d:60:9e:48:a1:4e:e0:31:60:72:50:c7:c1:e1:53:72: fb:f5:d0:5f:34:f5:bd:8a:d1:23:11:f0:8a:0b:83:ac:19:87: 2c:9b:99:8c:a6:80:a7:ef:a2:c5:a3:1b:0e:23:65:e1:14:41: f1:42:35:66:e5:c1:1a:2c:58:ba:03:8a:64:3e:4f:f9:26:70: ff:ec:88:b3:d1:77:35:72:7f:0b:2e:ad:da:aa:16:20:01:72: 16:0f:b9:9e:76:b1:3d:2c:f8:38:5a:66:7f:91:55:39:a9:51: d5:ee:1f:41:e3:3d:82:66:b5:af:e3:0d:2c:da:9b:6e:7d:9f: 0c:df:b9:14:15:b7:47:6f:86:e9:5b:ff:03:59:29:51:ca:81: e7:4b:17:24:11:7b:73:88:80:d5:53:6c:45:fc:3d:c4:33:0b: f5:46:ab:0c:a4:8e:40:35:ed:5d:b3:01:b5:9f:7a:08:27:89: 34:c3:08:22 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTA5MDEw MTMwMDRaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4OUE5MDYyQTA4RDFC MDM1NDkwQjI4MDYwMTZBM0REOTgwOTVDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPqcKF1S9iW/VjbO3YTAtOO8MPwkyh8GC8t2J1mjRp3dXbJZ/g TLcSlFfbe5DbLsHjD6If9/lUwY7thXiNlvoJuDeKGkief4XpjtmKeuxE/BuMmDaS 3A5e7/7ZqxwfBetmm3mN83mFwGJ3Kr+/r1m6CJrZz9cX6fW7rkJ+lNIGSU4wqnYn r8a+Jb7zVO45ukvUYTW7Px2QBz56Vaak6ID0nlsgYsxcDrq6GxLMfSfnIfmKmzFG 5+/fczzMOTtsVxodo9Fvs+JXsfmBWd3yi/IEGz9q/GglqgoMvWOnUCYjgPjaE9D5 HXobflK09wjS0Pmoy3DQlR8Sh0N33Z+ccMU5AgMBAAGjggIpMIICJTAdBgNVHQ4E FgQUKJqQYqCNGwNUkLKAYBaj3ZgJXKUwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9LSnFRWXFDTkd3TlVrTEtBWUJhajNaZ0pYS1Uu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAATAHAwUEfCg00DANBgkqhkiG9w0BAQsFAAOCAQEAWB7sOHawCdpml3Unsfil c7q/USR6tINCuQ/2iIiDKZWxLc0vTjwM4P0t5pySH0HY9vbFuT4k9KOLLZ7md5ND oEYD6hyU/9TrXpptYJ5IoU7gMWByUMfB4VNy+/XQXzT1vYrRIxHwiguDrBmHLJuZ jKaAp++ixaMbDiNl4RRB8UI1ZuXBGixYugOKZD5P+SZw/+yIs9F3NXJ/Cy6t2qoW IAFyFg+5nnaxPSz4OFpmf5FVOalR1e4fQeM9gma1r+MNLNqbbn2fDN+5FBW3R2+G 6Vv/A1kpUcqB50sXJBF7c4iA1VNsRfw9xDML9UarDKSOQDXtXbMBtZ96CCeJNMMI Ig== -----END CERTIFICATE-----Generated at Wed Nov 5 04:21:51 2025 by rpki-client