$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/S_vcTjxbV-wlWGoh4eNoygf_kxY.roa File: S_vcTjxbV-wlWGoh4eNoygf_kxY.roa (raw, json) Hash identifier: uYl130KQ4ebi3LdKAGv8FW3dVKXEFD5pbsyVILtkzSo= Subject key identifier: 4B:FB:DC:4E:3C:5B:57:EC:25:58:6A:21:E1:E3:68:CA:07:FF:93:16 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: EE Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/S_vcTjxbV-wlWGoh4eNoygf_kxY.roa Signing time: Sat 01 Nov 2025 01:28:30 +0000 ROA not before: Sat 01 Nov 2025 01:28:30 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 153.254.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:30 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=4BFBDC4E3C5B57EC25586A21E1E368CA07FF9316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1d:2a:01:cb:8b:67:2d:59:09:72:89:68:6d: c8:74:9f:f3:c0:56:f5:fc:20:ce:08:19:93:56:d1: 9f:08:eb:fa:07:1e:70:c0:e0:89:96:9f:32:12:c6: 87:c1:02:06:b5:24:c3:09:09:1f:33:f7:ba:8c:8a: fa:d5:78:ce:f9:a8:c1:10:1d:1b:59:0d:61:e0:12: 89:6d:64:ff:8e:2f:fd:86:b6:a5:bd:71:fd:6c:98: f7:84:26:38:29:54:c8:86:48:ce:37:fa:18:90:b1: 50:41:db:0b:6d:7e:33:bd:c2:04:c7:bc:a6:9a:42: 8e:79:f7:ae:99:ed:21:4d:ef:68:5e:60:e6:3b:2c: b3:fb:72:2e:63:29:9f:15:54:77:d6:02:8c:3e:cd: b1:4e:9c:64:e5:02:32:17:f4:e4:f2:8f:9e:c2:36: 1c:a6:08:1b:94:ee:4b:3b:69:fb:71:0a:c1:d6:f3: b3:01:5f:98:6e:08:97:d5:38:b4:31:10:a3:de:29: 88:83:2b:36:96:ab:a9:e5:60:ad:da:e6:8c:7c:4e: df:bb:7a:b4:cd:33:a7:50:e7:27:2c:97:c8:c2:67: 77:36:92:e4:49:9b:c1:f1:45:24:8b:bd:bd:d5:49: 9e:0a:c2:59:95:30:77:ac:e0:d9:3a:bf:fe:a1:15: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:DC:4E:3C:5B:57:EC:25:58:6A:21:E1:E3:68:CA:07:FF:93:16 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/S_vcTjxbV-wlWGoh4eNoygf_kxY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.90.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:91:0e:76:10:72:42:17:dc:d2:58:a0:61:a4:92:9c:cc:4e: f0:57:14:ec:d3:df:da:a7:fe:d4:ec:2d:1a:d5:8b:07:fd:1d: 6f:fe:33:61:e5:6c:15:66:7f:88:43:5a:24:87:cc:aa:d2:f8: b2:3c:f0:2e:b0:03:12:dd:bb:65:3d:d7:1e:46:9a:69:e3:30: 0b:15:d0:df:98:20:f5:d0:9a:70:5a:37:ec:c8:5b:74:c5:7e: 1e:2c:57:c3:7f:f6:f6:3c:cf:c9:bc:70:4a:75:c1:54:ee:d0: bc:c2:12:42:a8:00:00:67:e0:3e:b9:02:55:b0:6d:60:c7:18: 3b:29:f1:a2:d0:f3:d5:77:ee:8d:aa:b7:d3:b5:22:ea:d5:68: 45:83:6e:63:22:d2:7b:ae:f7:a4:d0:1b:35:c9:b2:23:68:9e: 53:49:59:eb:27:bd:63:50:74:5f:01:e3:cc:da:fd:2e:52:06: e7:97:85:f2:27:f8:6c:40:ca:56:d5:bd:8f:41:c3:0e:40:3b: 39:c1:79:4f:e1:81:e7:69:c8:d6:67:45:33:10:ec:f5:aa:61: 3f:9b:9d:01:42:82:13:94:4a:d5:1a:05:f3:4a:4b:09:91:af: 2d:a8:c8:4c:1f:e0:39:f5:c4:4a:a8:f7:89:35:21:9e:ab:24: f7:91:c7:41 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4MzBaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRCRkJEQzRFM0M1QjU3 RUMyNTU4NkEyMUUxRTM2OENBMDdGRjkzMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOHSoBy4tnLVkJcolobch0n/PAVvX8IM4IGZNW0Z8I6/oHHnDA 4ImWnzISxofBAga1JMMJCR8z97qMivrVeM75qMEQHRtZDWHgEoltZP+OL/2GtqW9 cf1smPeEJjgpVMiGSM43+hiQsVBB2wttfjO9wgTHvKaaQo55966Z7SFN72heYOY7 LLP7ci5jKZ8VVHfWAow+zbFOnGTlAjIX9OTyj57CNhymCBuU7ks7aftxCsHW87MB X5huCJfVOLQxEKPeKYiDKzaWq6nlYK3a5ox8Tt+7erTNM6dQ5ycsl8jCZ3c2kuRJ m8HxRSSLvb3VSZ4KwlmVMHes4Nk6v/6hFX1TAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUS/vcTjxbV+wlWGoh4eNoygf/kxYwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9TX3ZjVGp4YlYtd2xXR29oNGVOb3lnZl9reFku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAmf5aMA0GCSqGSIb3DQEBCwUAA4IBAQBvkQ52EHJCF9zSWKBhpJKc zE7wVxTs09/ap/7U7C0a1YsH/R1v/jNh5WwVZn+IQ1okh8yq0viyPPAusAMS3btl PdceRppp4zALFdDfmCD10JpwWjfsyFt0xX4eLFfDf/b2PM/JvHBKdcFU7tC8whJC qAAAZ+A+uQJVsG1gxxg7KfGi0PPVd+6NqrfTtSLq1WhFg25jItJ7rvek0Bs1ybIj aJ5TSVnrJ71jUHRfAePM2v0uUgbnl4XyJ/hsQMpW1b2PQcMOQDs5wXlP4YHnacjW Z0UzEOz1qmE/m50BQoITlErVGgXzSksJka8tqMhMH+A59cRKqPeJNSGeqyT3kcdB -----END CERTIFICATE-----Generated at Tue Nov 4 21:00:22 2025 by rpki-client