$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/diKVfGlnxPPAwFknAD-1j0SeaVM.roa File: diKVfGlnxPPAwFknAD-1j0SeaVM.roa (raw, json) Hash identifier: lNwOPFzaKVCVOxXSup15zWFqMQt9RMAGIoxAo8TdqvM= Subject key identifier: 76:22:95:7C:69:67:C4:F3:C0:C0:59:27:00:3F:B5:8F:44:9E:69:53 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0112 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/diKVfGlnxPPAwFknAD-1j0SeaVM.roa Signing time: Sat 01 Nov 2025 01:33:51 +0000 ROA not before: Sat 01 Nov 2025 01:33:51 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 394957 IP address blocks: 61.213.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:33:51 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=7622957C6967C4F3C0C05927003FB58F449E6953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:d1:45:33:d8:df:c3:56:70:87:60:94:9c: 22:59:55:55:7f:96:b4:7c:c3:26:07:9d:2b:10:e4: ff:3d:0c:a3:e4:06:3d:49:0f:41:e2:4f:ac:16:b8: 0c:e3:54:f5:86:71:01:1b:da:1e:c8:70:82:f7:ab: 28:8a:96:f2:15:73:09:f2:ad:9d:c3:37:c6:f9:e6: b6:ba:9c:18:89:47:68:20:00:cd:f9:03:cc:ed:89: d1:4b:4d:f0:22:f4:1b:d5:25:8c:7d:d9:47:35:a9: a9:9b:e0:8f:10:6e:39:1e:ba:ec:30:f0:56:a5:a0: 31:dd:8e:c2:c4:f9:82:96:96:5f:56:4d:7a:47:c6: db:50:ac:00:51:5a:98:2d:ca:77:cc:bb:b6:08:98: ef:e6:68:45:ad:a1:26:f3:e0:6d:c7:9a:e1:31:66: cc:ae:f9:d3:03:80:a7:db:ef:9f:57:8c:13:7d:cd: 15:de:36:5f:e1:f0:1f:2f:8c:1b:55:a3:27:99:9f: 31:b6:8d:d3:48:41:ab:8c:81:5c:84:76:a8:a5:32: 36:54:2c:74:2b:40:fc:90:89:6b:4c:6e:7a:ca:bb: 6b:52:40:7e:df:5b:a2:f6:08:55:c9:d3:9a:5c:9c: c0:f4:f0:de:0c:7d:e3:45:7d:e8:c7:e6:23:71:e1: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:22:95:7C:69:67:C4:F3:C0:C0:59:27:00:3F:B5:8F:44:9E:69:53 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/diKVfGlnxPPAwFknAD-1j0SeaVM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.213.151.0/24 Signature Algorithm: sha256WithRSAEncryption 33:2a:a8:de:c3:27:5a:ba:34:cc:33:45:88:10:b9:1b:4d:f3: 7e:a7:cf:19:49:f8:ab:50:fc:57:a2:72:58:d8:fb:23:f7:1b: ea:bb:3e:8d:c6:20:64:c2:fc:60:55:5f:f0:04:1c:8a:97:8b: bc:11:70:f5:4d:93:26:6e:6f:04:8e:b1:87:2c:41:c5:b6:f4: de:ea:47:df:74:40:85:04:a3:a9:4f:bc:c4:b2:d2:60:9c:1d: 4c:cb:aa:c3:44:20:76:36:f5:38:4f:58:22:88:30:7b:41:d6: 9c:7d:de:ff:ad:43:b0:75:cc:56:84:7b:15:96:cd:63:43:72: bf:82:85:21:da:bf:59:d8:20:35:ea:33:f6:45:2e:0c:d5:19: f3:69:bd:90:4f:c4:6f:ec:a6:49:8f:1c:64:1e:d4:25:7e:ed: 47:f6:f2:9c:88:15:cf:3e:cb:08:a0:31:65:1f:9b:6b:1e:10: ec:f2:ab:78:75:38:33:db:29:7c:67:d4:27:bf:9a:22:83:19: 7c:f8:8b:27:cc:3c:06:cf:0d:07:70:b8:89:72:fc:74:5c:02: 92:db:1a:79:09:2c:aa:e2:73:d4:29:e5:28:b6:30:e7:b1:cc: 8c:07:d1:b8:45:57:60:bc:3d:ff:ed:0d:3f:ba:61:2a:b3:2c: 53:93:e5:8c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICARIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTMzNTFaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc2MjI5NTdDNjk2N0M0 RjNDMEMwNTkyNzAwM0ZCNThGNDQ5RTY5NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbAdFFM9jfw1Zwh2CUnCJZVVV/lrR8wyYHnSsQ5P89DKPkBj1J D0HiT6wWuAzjVPWGcQEb2h7IcIL3qyiKlvIVcwnyrZ3DN8b55ra6nBiJR2ggAM35 A8ztidFLTfAi9BvVJYx92Uc1qamb4I8Qbjkeuuww8FaloDHdjsLE+YKWll9WTXpH xttQrABRWpgtynfMu7YImO/maEWtoSbz4G3HmuExZsyu+dMDgKfb759XjBN9zRXe Nl/h8B8vjBtVoyeZnzG2jdNIQauMgVyEdqilMjZULHQrQPyQiWtMbnrKu2tSQH7f W6L2CFXJ05pcnMD08N4MfeNFfejH5iNx4S+jAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUdiKVfGlnxPPAwFknAD+1j0SeaVMwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9kaUtWZkdsbnhQUEF3RmtuQUQtMWowU2VhVk0u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAPdWXMA0GCSqGSIb3DQEBCwUAA4IBAQAzKqjewydaujTMM0WIELkb TfN+p88ZSfirUPxXonJY2Psj9xvquz6NxiBkwvxgVV/wBByKl4u8EXD1TZMmbm8E jrGHLEHFtvTe6kffdECFBKOpT7zEstJgnB1My6rDRCB2NvU4T1giiDB7Qdacfd7/ rUOwdcxWhHsVls1jQ3K/goUh2r9Z2CA16jP2RS4M1Rnzab2QT8Rv7KZJjxxkHtQl fu1H9vKciBXPPssIoDFlH5trHhDs8qt4dTgz2yl8Z9Qnv5oigxl8+IsnzDwGzw0H cLiJcvx0XAKS2xp5CSyq4nPUKeUotjDnscyMB9G4RVdgvD3/7Q0/umEqsyxTk+WM -----END CERTIFICATE-----Generated at Wed Nov 5 06:21:33 2025 by rpki-client