$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ec2yeuGmSbt2U_LxbwfN-wDE90M.roa File: ec2yeuGmSbt2U_LxbwfN-wDE90M.roa (raw, json) Hash identifier: wXfLzWIGiy+ln/1MxNLv9mwutQqa1jorejvVG5f2UTw= Subject key identifier: 79:CD:B2:7A:E1:A6:49:BB:76:53:F2:F1:6F:07:CD:FB:00:C4:F7:43 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0119 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ec2yeuGmSbt2U_LxbwfN-wDE90M.roa Signing time: Sat 01 Nov 2025 01:33:55 +0000 ROA not before: Sat 01 Nov 2025 01:33:55 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 202.69.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:33:55 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=79CDB27AE1A649BB7653F2F16F07CDFB00C4F743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:bf:97:48:19:1e:72:aa:8d:de:c0:a4:37: dd:ec:e4:96:a7:f7:2a:e3:21:a4:f0:29:0f:08:d5: f9:66:89:07:e6:05:32:3f:a6:40:5c:cf:a0:95:bf: aa:a7:0e:69:6f:b6:08:a5:63:b0:57:49:7d:53:d3: e2:55:c3:36:5b:c6:0f:03:75:c3:c3:5f:44:06:35: db:76:d0:bc:45:ba:c9:81:0b:80:a7:4d:54:cd:0d: a3:fd:80:54:c2:6b:3c:62:1f:04:c5:03:51:f5:91: a7:69:a3:d2:fc:f9:99:9b:a9:0d:81:bc:b2:d3:4b: 95:a9:05:52:61:cf:43:6b:5a:97:33:06:48:36:4b: 87:a4:6f:96:0c:92:71:d4:7b:b9:cc:89:06:6d:9b: 10:ed:e0:fd:cf:61:30:14:db:c5:0f:06:60:d3:fa: 01:db:5c:9b:0e:78:cd:7a:1f:31:75:1d:6f:0c:66: 65:f9:55:35:2e:e8:7f:f9:f1:e0:0f:92:58:4a:fe: 36:f8:d5:9b:91:78:db:4a:6d:92:ae:74:8e:11:a9: ca:50:bc:a6:21:5b:7d:ec:f8:11:04:9e:3c:3a:c7: 9e:e0:4e:19:fb:e9:1e:25:ae:9b:72:93:6c:fc:4a: f9:82:1c:71:c4:c5:ef:46:4a:23:a7:0e:5f:26:f3: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CD:B2:7A:E1:A6:49:BB:76:53:F2:F1:6F:07:CD:FB:00:C4:F7:43 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ec2yeuGmSbt2U_LxbwfN-wDE90M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.69.224.0/20 Signature Algorithm: sha256WithRSAEncryption a4:ea:47:29:cf:a2:fd:62:66:90:1d:8d:99:ec:c4:14:01:50: 5d:d2:ee:16:07:a1:38:7e:ac:89:ac:d0:0c:66:b8:df:2e:78: 0d:12:78:e9:d7:6a:52:a7:b9:23:24:d5:f4:00:ab:ee:61:f9: ce:22:ce:ee:33:8f:07:b6:ec:c6:ce:ab:96:9f:9b:96:22:de: 44:b6:d0:08:45:15:25:87:9f:6c:1e:a2:9b:e6:0b:0c:5b:72: 60:3f:72:ee:a6:de:e1:d1:71:7d:00:4a:97:7d:fe:59:2e:af: e1:38:4b:28:ca:8b:1e:0e:cf:ab:69:5e:d9:e5:1c:ae:30:eb: 1c:16:bf:6e:b4:86:2b:d6:97:13:1a:20:93:e5:5d:61:56:45: 33:31:7b:55:35:4a:3b:bb:46:56:50:d5:2f:94:df:a8:f6:e3: 66:e6:41:85:58:2e:d5:53:5b:e6:83:19:c1:fd:34:24:62:5b: 43:8e:d4:a6:5d:b5:48:fd:1e:7d:1d:b7:1d:4e:40:4d:6a:a0: ad:63:35:ca:08:aa:8c:13:98:d1:65:88:2e:8f:5a:5b:b8:36: a0:8b:64:15:f7:68:99:c9:74:fa:11:e7:8d:ae:bf:49:f2:a6: 95:cd:ee:b8:84:44:2d:80:59:98:10:5d:62:2e:d4:c9:53:21: c0:20:f6:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICARkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTMzNTVaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc5Q0RCMjdBRTFBNjQ5 QkI3NjUzRjJGMTZGMDdDREZCMDBDNEY3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDl7+XSBkecqqN3sCkN93s5Jan9yrjIaTwKQ8I1flmiQfmBTI/ pkBcz6CVv6qnDmlvtgilY7BXSX1T0+JVwzZbxg8DdcPDX0QGNdt20LxFusmBC4Cn TVTNDaP9gFTCazxiHwTFA1H1kadpo9L8+ZmbqQ2BvLLTS5WpBVJhz0NrWpczBkg2 S4ekb5YMknHUe7nMiQZtmxDt4P3PYTAU28UPBmDT+gHbXJsOeM16HzF1HW8MZmX5 VTUu6H/58eAPklhK/jb41ZuReNtKbZKudI4RqcpQvKYhW33s+BEEnjw6x57gThn7 6R4lrptyk2z8SvmCHHHExe9GSiOnDl8m8xuZAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUec2yeuGmSbt2U/LxbwfN+wDE90MwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9lYzJ5ZXVHbVNidDJVX0x4YndmTi13REU5ME0u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEykXgMA0GCSqGSIb3DQEBCwUAA4IBAQCk6kcpz6L9YmaQHY2Z7MQU AVBd0u4WB6E4fqyJrNAMZrjfLngNEnjp12pSp7kjJNX0AKvuYfnOIs7uM48HtuzG zquWn5uWIt5EttAIRRUlh59sHqKb5gsMW3JgP3Lupt7h0XF9AEqXff5ZLq/hOEso yoseDs+raV7Z5RyuMOscFr9utIYr1pcTGiCT5V1hVkUzMXtVNUo7u0ZWUNUvlN+o 9uNm5kGFWC7VU1vmgxnB/TQkYltDjtSmXbVI/R59HbcdTkBNaqCtYzXKCKqME5jR ZYguj1pbuDagi2QV92iZyXT6EeeNrr9J8qaVze64hEQtgFmYEF1iLtTJUyHAIPay -----END CERTIFICATE-----Generated at Tue Nov 4 21:00:20 2025 by rpki-client