$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Qn2T4Iy7ZYJqLkQYZOagBhqUN8I.roa File: Qn2T4Iy7ZYJqLkQYZOagBhqUN8I.roa (raw, json) Hash identifier: f4Q3D15ejB9pxpD+Vcr+XrU1YeJV7HOHPDUm/SbO/I0= Subject key identifier: 42:7D:93:E0:8C:BB:65:82:6A:2E:44:18:64:E6:A0:06:1A:94:37:C2 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0123 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Qn2T4Iy7ZYJqLkQYZOagBhqUN8I.roa Signing time: Sat 01 Nov 2025 01:34:00 +0000 ROA not before: Sat 01 Nov 2025 01:34:00 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 120.88.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:34:00 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=427D93E08CBB65826A2E441864E6A0061A9437C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:16:af:06:8a:75:fd:9f:cd:69:41:e4:47:98: 52:84:ae:bf:2f:96:91:84:4b:1e:34:c4:69:8a:d2: c1:fb:66:1a:63:73:91:5f:a0:22:f8:42:cf:02:0f: 17:c1:1c:71:2f:a7:ab:bf:44:5e:47:08:a9:4e:b2: c0:7e:3d:63:a3:60:92:02:ae:34:25:e1:f5:07:6b: 67:66:7e:25:4b:c9:c4:18:9d:30:29:e6:51:87:2d: 37:25:cc:5a:84:58:8d:4c:92:85:d5:42:7e:e2:90: bf:33:44:44:a9:af:3a:da:25:47:e5:e3:03:a1:67: a5:22:5f:47:a9:47:4c:b5:03:38:f4:5e:fe:57:d6: 94:c6:aa:d7:f5:96:67:9c:7a:1d:93:52:68:07:d9: d9:08:01:7b:3f:9c:43:d8:38:86:15:7a:5c:22:30: b5:4e:f8:60:2f:66:c7:1d:48:8c:e2:aa:f4:c0:5d: 27:51:59:43:90:bd:61:d5:15:06:08:32:7b:bc:ae: d7:f1:59:8f:b2:40:a0:81:52:7e:11:57:f3:6a:b5: 37:2a:4f:2f:86:9d:fd:c0:c2:a5:18:7c:0f:f3:7f: a1:7a:04:7d:0e:0f:91:f9:b6:b8:11:11:33:9b:5d: 9c:53:ba:7e:04:4c:60:33:cf:8d:15:c3:d4:97:84: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7D:93:E0:8C:BB:65:82:6A:2E:44:18:64:E6:A0:06:1A:94:37:C2 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Qn2T4Iy7ZYJqLkQYZOagBhqUN8I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.88.48.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:f2:4d:ed:b6:3d:bb:f5:c1:0f:eb:62:16:cc:40:ae:ea:8a: e3:51:c6:54:27:89:51:83:08:b1:ee:f8:25:7e:d8:80:85:63: 09:f6:c5:ab:bc:6c:2c:bc:68:4c:42:17:cb:2c:80:80:83:95: d5:a1:56:ed:21:6e:f4:4f:e1:fe:aa:90:cd:2c:23:1e:18:37: 90:3b:3c:e3:cb:33:f6:46:e7:15:48:16:d3:82:2d:79:2a:ba: f3:60:14:0b:cc:bb:70:fd:88:92:8b:50:e7:79:c9:b6:2f:f1: 7c:2f:00:5d:a8:d7:6d:9f:7f:3a:17:16:7a:6c:6f:7b:2f:dd: 3e:fe:94:4b:40:ae:e9:43:25:62:9c:b8:17:03:c5:50:8d:dc: 12:a2:ca:62:c6:20:56:fe:d3:f7:12:70:71:c5:8e:52:a3:34: 7d:a9:ab:39:a6:b0:8d:94:46:02:db:e4:72:82:2c:75:eb:07: 67:a7:88:bd:5b:1d:da:f5:80:1f:91:e3:ca:d2:d2:99:ce:79: 79:1b:91:d9:13:55:72:9e:4b:20:a1:d6:36:05:b7:a9:3f:54: 99:b9:49:dc:5c:0b:6b:37:19:8e:f5:5e:c4:67:53:f1:44:54: 28:b7:d7:6a:c8:0e:ee:6e:03:f6:39:8f:65:76:83:e7:e4:a1: ad:fb:8d:3c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICASMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTM0MDBaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQyN0Q5M0UwOENCQjY1 ODI2QTJFNDQxODY0RTZBMDA2MUE5NDM3QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrFq8GinX9n81pQeRHmFKErr8vlpGESx40xGmK0sH7Zhpjc5Ff oCL4Qs8CDxfBHHEvp6u/RF5HCKlOssB+PWOjYJICrjQl4fUHa2dmfiVLycQYnTAp 5lGHLTclzFqEWI1MkoXVQn7ikL8zRESprzraJUfl4wOhZ6UiX0epR0y1Azj0Xv5X 1pTGqtf1lmeceh2TUmgH2dkIAXs/nEPYOIYVelwiMLVO+GAvZscdSIziqvTAXSdR WUOQvWHVFQYIMnu8rtfxWY+yQKCBUn4RV/NqtTcqTy+Gnf3AwqUYfA/zf6F6BH0O D5H5trgRETObXZxTun4ETGAzz40Vw9SXhFDxAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUQn2T4Iy7ZYJqLkQYZOagBhqUN8IwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9RbjJUNEl5N1pZSnFMa1FZWk9hZ0JocVVOOEku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDeFgwMA0GCSqGSIb3DQEBCwUAA4IBAQA68k3ttj279cEP62IWzECu 6orjUcZUJ4lRgwix7vglftiAhWMJ9sWrvGwsvGhMQhfLLICAg5XVoVbtIW70T+H+ qpDNLCMeGDeQOzzjyzP2RucVSBbTgi15KrrzYBQLzLtw/YiSi1Dnecm2L/F8LwBd qNdtn386FxZ6bG97L90+/pRLQK7pQyVinLgXA8VQjdwSospixiBW/tP3EnBxxY5S ozR9qas5prCNlEYC2+Rygix16wdnp4i9Wx3a9YAfkePK0tKZznl5G5HZE1Vynksg odY2BbepP1SZuUncXAtrNxmO9V7EZ1PxRFQot9dqyA7ubgP2OY9ldoPn5KGt+408 -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:04 2025 by rpki-client