$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZT7BZr3WZmeU5v4kV84zizsBKPc.roa File: ZT7BZr3WZmeU5v4kV84zizsBKPc.roa (raw, json) Hash identifier: 1AQqDiyKgyWScvXV3lhPF4dsjWUD4agnKltK1jfcETs= Subject key identifier: 65:3E:C1:66:BD:D6:66:67:94:E6:FE:24:57:CE:33:8B:3B:01:28:F7 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 010D Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZT7BZr3WZmeU5v4kV84zizsBKPc.roa Signing time: Sat 01 Nov 2025 01:33:48 +0000 ROA not before: Sat 01 Nov 2025 01:33:48 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 137922 IP address blocks: 124.40.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:33:48 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=653EC166BDD6666794E6FE2457CE338B3B0128F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:31:21:27:47:aa:b8:af:52:87:29:c0:ed:18: 8a:eb:e6:54:43:5b:d5:62:4b:15:2a:0e:73:4d:25: c7:e2:3c:a4:b3:fd:ea:08:2c:61:2f:10:46:2b:cf: b0:ba:76:79:ec:2c:d7:34:88:fc:5f:bb:52:f1:3d: 6a:87:04:71:12:9d:8b:ef:ca:32:96:1e:24:65:5a: 09:cb:52:fe:a6:fa:0d:f7:1a:d8:7b:82:eb:94:4f: 36:16:de:71:01:d4:78:e7:62:8e:23:78:3a:13:b3: 7e:65:a1:21:79:49:8d:9b:b2:44:cf:67:47:90:96: 88:ac:d4:25:ee:a9:5c:3e:e0:4f:68:da:f0:ad:dc: 2f:0b:60:8d:cc:a7:1a:47:17:37:31:29:84:c9:df: 12:6f:d4:3c:07:f5:8b:80:c5:c2:41:c8:4f:bd:6f: 22:9f:f1:2b:e9:59:77:74:47:9b:cf:99:8b:89:cf: 93:d2:ea:c4:3b:b7:05:61:42:09:9c:00:7f:c3:87: a6:b8:29:7e:0a:ec:f3:55:eb:ee:56:41:dd:3d:54: 45:92:8c:97:c6:4d:46:02:ac:7e:91:26:15:d1:53: c4:a8:d5:cb:01:82:22:59:e6:a3:93:c3:73:03:73: 79:c7:b9:53:5b:17:40:02:52:32:51:4c:89:8d:91: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3E:C1:66:BD:D6:66:67:94:E6:FE:24:57:CE:33:8B:3B:01:28:F7 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZT7BZr3WZmeU5v4kV84zizsBKPc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.40.55.0/24 Signature Algorithm: sha256WithRSAEncryption 83:43:f2:e3:5f:24:06:6a:0c:fb:ad:57:60:f9:43:a3:f8:e8: ee:27:34:11:cd:36:09:29:0c:57:71:81:33:50:6d:ab:51:f8: c5:4f:22:42:33:01:22:81:30:ce:44:04:ac:78:ad:0f:0d:30: cb:ae:b2:06:c1:29:74:9a:4e:8a:78:ae:f9:99:22:f5:ea:ce: 03:02:5a:92:59:c2:9d:4c:c3:92:9f:b4:47:3e:fa:52:b1:d5: c8:52:8a:a1:9e:9a:85:d5:d3:bb:3c:19:26:89:ea:62:63:c2: 15:f6:cc:29:a5:a8:69:93:7d:68:c3:4d:9b:32:11:19:be:e1: 07:d0:23:b4:89:9f:ef:7c:ca:3f:e8:c6:d0:31:c6:c8:55:fc: 0a:f1:ba:e4:91:03:77:66:35:bd:f5:1f:43:d6:5e:3f:c9:c3: 11:ba:3e:28:97:28:ee:f9:2d:27:e3:05:7a:99:23:f6:1d:97: 30:93:75:9e:ae:ab:46:5b:dc:35:17:9d:b8:7d:1e:4d:48:50: ac:48:43:e0:87:bf:dc:5f:14:62:cf:80:8d:b8:b5:3b:27:88: d0:00:6c:3c:83:04:5f:1c:86:7d:5e:3f:6d:50:93:21:50:36: 8a:6a:fb:8b:48:a8:d1:08:20:e7:82:cf:cb:79:d6:65:d5:11: 41:81:a4:26 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTMzNDhaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1M0VDMTY2QkRENjY2 Njc5NEU2RkUyNDU3Q0UzMzhCM0IwMTI4RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwMSEnR6q4r1KHKcDtGIrr5lRDW9ViSxUqDnNNJcfiPKSz/eoI LGEvEEYrz7C6dnnsLNc0iPxfu1LxPWqHBHESnYvvyjKWHiRlWgnLUv6m+g33Gth7 guuUTzYW3nEB1HjnYo4jeDoTs35loSF5SY2bskTPZ0eQlois1CXuqVw+4E9o2vCt 3C8LYI3MpxpHFzcxKYTJ3xJv1DwH9YuAxcJByE+9byKf8SvpWXd0R5vPmYuJz5PS 6sQ7twVhQgmcAH/Dh6a4KX4K7PNV6+5WQd09VEWSjJfGTUYCrH6RJhXRU8So1csB giJZ5qOTw3MDc3nHuVNbF0ACUjJRTImNkWvdAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUZT7BZr3WZmeU5v4kV84zizsBKPcwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9aVDdCWnIzV1ptZVU1djRrVjg0eml6c0JLUGMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAfCg3MA0GCSqGSIb3DQEBCwUAA4IBAQCDQ/LjXyQGagz7rVdg+UOj +OjuJzQRzTYJKQxXcYEzUG2rUfjFTyJCMwEigTDORASseK0PDTDLrrIGwSl0mk6K eK75mSL16s4DAlqSWcKdTMOSn7RHPvpSsdXIUoqhnpqF1dO7PBkmiepiY8IV9swp pahpk31ow02bMhEZvuEH0CO0iZ/vfMo/6MbQMcbIVfwK8brkkQN3ZjW99R9D1l4/ ycMRuj4olyju+S0n4wV6mSP2HZcwk3WerqtGW9w1F524fR5NSFCsSEPgh7/cXxRi z4CNuLU7J4jQAGw8gwRfHIZ9Xj9tUJMhUDaKavuLSKjRCCDngs/LedZl1RFBgaQm -----END CERTIFICATE-----Generated at Wed Nov 5 04:59:27 2025 by rpki-client