$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/NNdE_i9HfKatYDp_NaLCVEcl3Kg.roa File: NNdE_i9HfKatYDp_NaLCVEcl3Kg.roa (raw, json) Hash identifier: apGZXs4PsI2DZWp6OLoHxyUo7qymNi3IxH0+FlrSnsY= Subject key identifier: 34:D7:44:FE:2F:47:7C:A6:AD:60:3A:7F:35:A2:C2:54:47:25:DC:A8 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: FF Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/NNdE_i9HfKatYDp_NaLCVEcl3Kg.roa Signing time: Sat 01 Nov 2025 01:28:40 +0000 ROA not before: Sat 01 Nov 2025 01:28:40 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 59130 IP address blocks: 61.120.149.80/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:40 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=34D744FE2F477CA6AD603A7F35A2C2544725DCA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:95:e4:88:cb:60:88:04:9b:26:42:7d:61: a1:c8:13:e3:c5:b0:40:78:df:7d:ba:b1:39:2a:fd: 99:95:54:d0:b4:15:18:13:2b:37:ce:54:0f:da:9c: f3:b0:d1:87:a1:9d:61:0d:73:17:6e:a9:84:a5:68: 8b:94:78:78:e7:cd:34:ec:f8:26:a4:23:8f:4e:59: 75:2f:7f:14:17:69:60:8a:97:65:9b:37:a4:de:e2: fb:c0:cd:ea:2c:b8:04:d4:51:04:e3:cc:c2:fc:2b: a8:30:66:dc:51:31:53:23:dc:4b:3a:f6:78:80:17: 8f:d4:9f:7a:69:60:f3:d0:ea:00:72:d0:45:98:db: 1d:f8:ce:07:64:e6:93:84:d1:43:c8:01:67:b8:01: 56:a2:ed:92:42:57:cb:0d:55:bd:cb:b7:de:06:c5: 75:91:f7:b1:1c:ec:6f:3e:27:85:61:8b:d7:ae:2c: f9:fd:74:20:a0:0d:8c:a9:96:df:d1:69:08:b8:dc: f3:66:04:76:8f:89:17:1c:f6:11:cd:eb:a2:7d:de: 25:d3:a3:41:4f:36:f5:e1:b5:64:a1:87:82:d0:d8: fc:08:4d:6d:8a:30:f4:e0:0f:65:b0:9f:6d:bd:d5: 76:c2:79:22:1e:6d:06:6e:63:1d:f0:48:b8:09:07: 60:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D7:44:FE:2F:47:7C:A6:AD:60:3A:7F:35:A2:C2:54:47:25:DC:A8 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/NNdE_i9HfKatYDp_NaLCVEcl3Kg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.120.149.80/28 Signature Algorithm: sha256WithRSAEncryption ab:d8:68:3c:9c:54:71:12:58:55:40:72:81:e4:0a:f5:30:6c: f7:4b:73:b0:1f:f7:7c:ec:db:d5:96:71:93:9a:75:84:d8:1a: a7:57:a3:96:01:ea:2b:1c:31:ad:86:b4:f3:ab:fd:b3:95:f6: 05:2c:5a:e3:56:9a:7d:c4:26:a3:9c:18:28:4d:5a:a8:2f:d2: 9b:b3:85:6f:7e:69:3a:2c:ad:20:f8:0b:e0:b0:41:c8:e0:44: a3:df:25:2e:e9:8a:54:2b:95:6d:ed:f5:1b:49:1e:af:ca:4a: c1:c7:a4:ad:28:a8:ac:06:f0:a4:39:94:99:17:51:6b:7d:45: d3:6a:83:1b:94:ab:c9:82:4f:62:3a:6c:ae:4c:32:dd:b6:d1: 29:33:6b:7c:36:15:e1:d7:8d:f6:7a:ef:3a:4d:a9:1d:9f:7f: 43:b1:f8:fe:e9:30:3e:ee:49:a1:2c:67:ae:fe:c3:31:e1:8e: 4a:4f:67:1c:68:c7:3b:06:bf:10:01:4c:50:b7:cb:03:a5:59: 57:88:9f:59:db:73:f5:13:d0:5d:10:f9:1a:b1:0e:f2:30:ee: 34:ff:e3:76:a0:1e:30:0d:4d:f2:dc:40:9b:46:76:90:41:81: 7e:cb:bb:26:a5:56:35:1a:77:f7:cb:39:6b:fe:18:48:46:e1: 3e:35:9d:cb -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4NDBaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM0RDc0NEZFMkY0NzdD QTZBRDYwM0E3RjM1QTJDMjU0NDcyNURDQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVQJXkiMtgiASbJkJ9YaHIE+PFsEB43326sTkq/ZmVVNC0FRgT KzfOVA/anPOw0YehnWENcxduqYSlaIuUeHjnzTTs+CakI49OWXUvfxQXaWCKl2Wb N6Te4vvAzeosuATUUQTjzML8K6gwZtxRMVMj3Es69niAF4/Un3ppYPPQ6gBy0EWY 2x34zgdk5pOE0UPIAWe4AVai7ZJCV8sNVb3Lt94GxXWR97Ec7G8+J4Vhi9euLPn9 dCCgDYyplt/RaQi43PNmBHaPiRcc9hHN66J93iXTo0FPNvXhtWShh4LQ2PwITW2K MPTgD2Wwn2291XbCeSIebQZuYx3wSLgJB2BNAgMBAAGjggIpMIICJTAdBgNVHQ4E FgQUNNdE/i9HfKatYDp/NaLCVEcl3KgwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9OTmRFX2k5SGZLYXRZRHBfTmFMQ1ZFY2wzS2cu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAATAHAwUEPXiVUDANBgkqhkiG9w0BAQsFAAOCAQEAq9hoPJxUcRJYVUBygeQK 9TBs90tzsB/3fOzb1ZZxk5p1hNgap1ejlgHqKxwxrYa086v9s5X2BSxa41aafcQm o5wYKE1aqC/Sm7OFb35pOiytIPgL4LBByOBEo98lLumKVCuVbe31G0ker8pKwcek rSiorAbwpDmUmRdRa31F02qDG5SryYJPYjpsrkwy3bbRKTNrfDYV4deN9nrvOk2p HZ9/Q7H4/ukwPu5JoSxnrv7DMeGOSk9nHGjHOwa/EAFMULfLA6VZV4ifWdtz9RPQ XRD5GrEO8jDuNP/jdqAeMA1N8txAm0Z2kEGBfsu7JqVWNRp398s5a/4YSEbhPjWd yw== -----END CERTIFICATE-----Generated at Wed Nov 5 16:05:41 2025 by rpki-client