$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/c--Z4jYd_HCmyzhYnQbSsq8DgdA.roa File: c--Z4jYd_HCmyzhYnQbSsq8DgdA.roa (raw, json) Hash identifier: RvBosQm4tCWulpQfWAg37iinczD0aZPNBEWKbxeYZI8= Subject key identifier: 73:EF:99:E2:36:1D:FC:70:A6:CB:38:58:9D:06:D2:B2:AF:03:81:D0 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: FA Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/c--Z4jYd_HCmyzhYnQbSsq8DgdA.roa Signing time: Sat 01 Nov 2025 01:28:37 +0000 ROA not before: Sat 01 Nov 2025 01:28:37 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 117.104.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:37 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=73EF99E2361DFC70A6CB38589D06D2B2AF0381D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:20:72:b4:e5:fa:24:58:50:93:f7:7a:5d:5f: 15:38:69:bc:4d:4e:4c:4d:d1:c3:69:17:00:89:c4: 90:e5:fc:0f:62:df:6a:50:83:8b:c2:32:94:7a:02: 5a:2f:68:14:d2:af:d4:69:96:35:d7:c7:fb:21:7d: b1:42:dd:7f:59:08:68:8a:4f:33:22:83:3a:33:66: a2:4b:32:56:1c:4e:b5:ae:88:85:13:d8:b8:98:97: 1d:f0:7a:60:ef:79:bd:ed:6d:de:19:74:99:db:c3: 33:28:67:3b:b8:8e:53:38:42:2d:23:cc:b9:a8:3b: 36:b4:50:92:a6:14:8d:d2:96:fb:3e:56:47:58:ac: b9:54:99:0e:51:5b:06:64:d8:9b:4b:7a:bf:3f:36: 2a:4f:14:c7:07:7c:5b:2f:00:1a:c3:29:02:98:80: 50:94:91:c9:9b:b7:54:8e:ec:9f:20:b5:34:f7:b6: f0:c9:12:f6:f2:a9:b1:5b:81:a0:d5:bd:eb:90:ad: 92:23:78:59:63:b6:57:ec:1b:9f:40:44:33:6a:4f: 75:71:03:09:c3:67:ad:a1:01:0f:91:f9:f0:05:96: 8f:e0:92:9f:9a:01:2a:cd:3d:66:77:b6:9b:47:0f: 7c:b6:7c:df:af:ca:2f:b1:d9:ad:dc:ec:23:2e:f5: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EF:99:E2:36:1D:FC:70:A6:CB:38:58:9D:06:D2:B2:AF:03:81:D0 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/c--Z4jYd_HCmyzhYnQbSsq8DgdA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.104.132.0/23 Signature Algorithm: sha256WithRSAEncryption 50:63:41:8e:d1:09:19:c6:bc:44:8a:3f:00:82:6f:d1:f5:75: 99:04:33:21:10:5a:95:c0:3d:f0:62:0f:36:06:52:4f:52:4e: 5e:0b:c8:ed:53:8e:84:9e:ef:d2:d5:e9:1e:ed:8c:f7:4c:84: 5f:d1:17:c5:19:dc:50:a8:4c:d7:81:ae:94:d2:fa:52:03:f3: e6:06:2a:7c:e9:09:96:dd:5f:9b:c1:93:42:b0:0f:68:0d:cc: b2:f9:6a:15:66:08:e0:79:97:e0:9a:75:38:ac:53:bd:b9:57: 8b:8b:50:b9:67:f3:41:c9:e3:05:48:d9:de:05:e7:38:ff:df: 4c:95:ad:77:63:37:54:8a:d2:bb:1d:a4:d0:48:0f:44:2b:a0: 68:1a:2b:c9:2e:61:ab:c9:15:89:f4:b0:b0:47:03:97:09:0b: 8e:14:f4:13:df:4b:13:95:68:9f:61:b1:47:ed:0a:3f:52:a7: 55:2a:b8:25:b2:da:a0:4d:dd:dc:8e:d3:80:7e:9f:80:58:b6: ea:5a:55:70:20:22:4e:45:ab:38:18:db:70:a7:54:80:13:5c: 3a:49:29:c2:e7:2a:59:4d:91:97:85:92:b1:b8:76:14:20:16: 1c:4e:22:9c:ac:37:05:cd:f0:de:d0:b7:66:01:0c:81:6c:3f: fc:a7:e2:fb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4MzdaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczRUY5OUUyMzYxREZD NzBBNkNCMzg1ODlEMDZEMkIyQUYwMzgxRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuIHK05fokWFCT93pdXxU4abxNTkxN0cNpFwCJxJDl/A9i32pQ g4vCMpR6AlovaBTSr9RpljXXx/shfbFC3X9ZCGiKTzMigzozZqJLMlYcTrWuiIUT 2LiYlx3wemDveb3tbd4ZdJnbwzMoZzu4jlM4Qi0jzLmoOza0UJKmFI3Slvs+VkdY rLlUmQ5RWwZk2JtLer8/NipPFMcHfFsvABrDKQKYgFCUkcmbt1SO7J8gtTT3tvDJ EvbyqbFbgaDVveuQrZIjeFljtlfsG59ARDNqT3VxAwnDZ62hAQ+R+fAFlo/gkp+a ASrNPWZ3tptHD3y2fN+vyi+x2a3c7CMu9bCFAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUc++Z4jYd/HCmyzhYnQbSsq8DgdAwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9jLS1aNGpZZF9IQ215emhZblFiU3NxOERnZEEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBdWiEMA0GCSqGSIb3DQEBCwUAA4IBAQBQY0GO0QkZxrxEij8Agm/R 9XWZBDMhEFqVwD3wYg82BlJPUk5eC8jtU46Enu/S1eke7Yz3TIRf0RfFGdxQqEzX ga6U0vpSA/PmBip86QmW3V+bwZNCsA9oDcyy+WoVZgjgeZfgmnU4rFO9uVeLi1C5 Z/NByeMFSNneBec4/99Mla13YzdUitK7HaTQSA9EK6BoGivJLmGryRWJ9LCwRwOX CQuOFPQT30sTlWifYbFH7Qo/UqdVKrglstqgTd3cjtOAfp+AWLbqWlVwICJORas4 GNtwp1SAE1w6SSnC5ypZTZGXhZKxuHYUIBYcTiKcrDcFzfDe0LdmAQyBbD/8p+L7 -----END CERTIFICATE-----Generated at Tue Nov 4 22:35:03 2025 by rpki-client