$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/QY4NwXaDC_IpmjFYsFu0lSgVBFI.roa File: QY4NwXaDC_IpmjFYsFu0lSgVBFI.roa (raw, json) Hash identifier: 9CZEoFCzAk3MMb1XLC8+XD9pz2/yLnYJ47/pTzjmZrU= Subject key identifier: 41:8E:0D:C1:76:83:0B:F2:29:9A:31:58:B0:5B:B4:95:28:15:04:52 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 010E Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/QY4NwXaDC_IpmjFYsFu0lSgVBFI.roa Signing time: Sat 01 Nov 2025 01:33:49 +0000 ROA not before: Sat 01 Nov 2025 01:33:49 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 63199 IP address blocks: 124.40.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:33:49 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=418E0DC176830BF2299A3158B05BB49528150452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:80:16:3a:14:43:52:56:d0:b0:f5:f8:ee: 8c:f4:fa:24:14:bf:5c:7f:94:68:6e:fe:0f:7a:8c: e4:db:e6:13:b4:c4:08:bf:b9:00:c3:e0:55:43:57: 91:3a:ac:a9:db:f4:5c:0b:7e:57:4d:6c:d1:87:cb: 05:98:c2:3c:5d:fc:85:66:52:a1:ff:44:81:87:ea: 4a:6f:c9:f8:b3:96:e6:96:e0:87:5d:33:11:c4:06: 67:44:78:38:5d:91:cc:0c:24:7c:6f:f0:e8:13:c5: c6:1b:ae:f0:c8:2b:d7:a3:fb:b6:32:c0:b0:8a:b7: de:53:19:51:98:33:e5:81:27:00:9c:ea:3e:18:03: fe:81:51:d8:e2:ba:da:91:f6:17:e9:4f:c8:ce:e7: 9b:c8:cd:db:40:44:5e:12:d9:18:79:1c:92:8d:c3: 69:69:ca:e8:3f:52:7e:04:fa:cf:fb:9b:05:2d:01: f8:e7:72:8a:fc:22:e4:8b:7c:c4:c0:a9:df:d4:b1: a0:3d:ad:73:95:da:f0:3e:cd:2d:b4:42:1a:13:13: ad:e2:7c:cb:66:84:cb:50:b3:83:85:6f:91:67:3e: 59:da:35:c5:d0:9b:d9:9f:c4:29:fd:1c:bd:90:7f: e3:a8:53:a3:63:a2:33:a5:4a:29:86:4b:7c:db:79: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8E:0D:C1:76:83:0B:F2:29:9A:31:58:B0:5B:B4:95:28:15:04:52 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/QY4NwXaDC_IpmjFYsFu0lSgVBFI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.40.56.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:5e:bd:4d:31:e3:c9:27:e8:26:a1:82:31:f3:24:25:6a:c1: 44:cb:f2:e0:3d:ba:04:93:94:60:17:89:7d:78:a1:4c:c5:66: 42:9c:d0:30:51:74:0b:e7:1d:fd:36:cb:c2:d3:70:f3:f6:50: 47:70:d4:34:83:16:36:d4:c0:9b:ba:73:11:ab:96:42:68:f4: e5:50:cf:ea:39:ba:02:4d:13:17:ca:61:8a:07:c1:a5:17:2b: fa:e1:1b:36:d7:e1:4a:e7:09:d4:a1:d3:53:77:90:2d:20:a9: f0:54:a0:f1:5b:b6:03:0a:95:bc:a2:10:33:0a:dd:b9:3a:14: 27:73:75:f0:21:ef:a0:9e:52:cb:80:30:3d:41:4e:c0:96:55: 9a:e4:1a:8d:8f:c6:29:79:7a:de:d1:4c:d7:a8:0e:14:6a:c0: a4:2a:04:be:e7:85:27:11:cc:9a:0a:71:be:35:8a:bb:10:9d: bb:4d:b9:75:4f:fc:86:9f:51:3b:ed:08:1d:77:93:ba:46:9e: 49:73:15:2c:86:58:ea:12:5d:5e:62:d0:86:c1:50:a7:b3:0e: 32:6a:c2:33:9c:b9:15:4a:b2:2f:fb:15:fe:02:d6:c6:31:a9: 1b:9a:de:83:8b:19:04:a9:07:95:21:68:de:25:0a:2d:a0:fe: 9b:af:34:5e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTMzNDlaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQxOEUwREMxNzY4MzBC RjIyOTlBMzE1OEIwNUJCNDk1MjgxNTA0NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrV4AWOhRDUlbQsPX47oz0+iQUv1x/lGhu/g96jOTb5hO0xAi/ uQDD4FVDV5E6rKnb9FwLfldNbNGHywWYwjxd/IVmUqH/RIGH6kpvyfizluaW4Idd MxHEBmdEeDhdkcwMJHxv8OgTxcYbrvDIK9ej+7YywLCKt95TGVGYM+WBJwCc6j4Y A/6BUdjiutqR9hfpT8jO55vIzdtARF4S2Rh5HJKNw2lpyug/Un4E+s/7mwUtAfjn cor8IuSLfMTAqd/UsaA9rXOV2vA+zS20QhoTE63ifMtmhMtQs4OFb5FnPlnaNcXQ m9mfxCn9HL2Qf+OoU6NjojOlSimGS3zbeZMDAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUQY4NwXaDC/IpmjFYsFu0lSgVBFIwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9RWTROd1hhRENfSXBtakZZc0Z1MGxTZ1ZCRkku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBfCg4MA0GCSqGSIb3DQEBCwUAA4IBAQBaXr1NMePJJ+gmoYIx8yQl asFEy/LgPboEk5RgF4l9eKFMxWZCnNAwUXQL5x39NsvC03Dz9lBHcNQ0gxY21MCb unMRq5ZCaPTlUM/qOboCTRMXymGKB8GlFyv64Rs21+FK5wnUodNTd5AtIKnwVKDx W7YDCpW8ohAzCt25OhQnc3XwIe+gnlLLgDA9QU7AllWa5BqNj8YpeXre0UzXqA4U asCkKgS+54UnEcyaCnG+NYq7EJ27Tbl1T/yGn1E77Qgdd5O6Rp5JcxUshljqEl1e YtCGwVCnsw4yasIznLkVSrIv+xX+AtbGMakbmt6DixkEqQeVIWjeJQotoP6brzRe -----END CERTIFICATE-----Generated at Wed Nov 5 00:09:21 2025 by rpki-client