$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/gK_K8d796uM6AP-Ww0VY6RpxHvc.roa File: gK_K8d796uM6AP-Ww0VY6RpxHvc.roa (raw, json) Hash identifier: IdCBd+vwtJDKX8P+py+M4jjl3hoyiEWlBJ9ErsiJtrw= Subject key identifier: 80:AF:CA:F1:DE:FD:EA:E3:3A:00:FF:96:C3:45:58:E9:1A:71:1E:F7 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: E7 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/gK_K8d796uM6AP-Ww0VY6RpxHvc.roa Signing time: Fri 24 Oct 2025 10:27:11 +0000 ROA not before: Fri 24 Oct 2025 10:27:11 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 399077 IP address blocks: 153.254.103.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Oct 24 10:27:11 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=80AFCAF1DEFDEAE33A00FF96C34558E91A711EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:43:e1:a9:10:4d:50:cf:79:33:18:5c:3c: 1a:a8:01:0a:3e:24:60:62:49:3d:4b:f1:de:cb:85: 1a:2c:d0:50:36:32:0b:c4:5b:53:5c:71:b2:c6:8d: e5:0e:6f:e9:9f:3a:df:30:c5:1d:16:c9:ea:ae:ff: 2c:d1:17:b9:62:cb:44:df:de:b8:45:c3:07:13:ef: 5b:c8:cc:6e:82:8d:48:81:00:8a:c1:b9:10:e3:30: b8:e1:ee:33:84:32:98:f0:07:bb:84:b9:4b:ef:51: e5:5c:27:bc:62:a2:1b:2f:1b:c7:d5:3d:11:5c:0e: 29:b5:4d:5c:db:23:36:01:cf:c0:b6:4c:ab:ed:d6: 45:ff:d4:ad:44:70:18:3c:6e:63:3e:30:19:dd:ef: 23:2b:d2:0d:a0:63:c2:7b:6a:8a:a7:30:22:34:52: 9b:1c:6c:06:6a:f1:54:45:25:ac:15:94:f4:4c:6b: ab:0b:d0:5f:2c:c9:e5:10:33:db:be:9f:50:8e:ae: b3:a5:fb:18:2d:4c:a5:a3:8b:ba:7d:79:b8:d6:f0: 76:88:bf:4b:3a:07:66:c6:d1:ac:8b:de:a8:b8:02: 1b:18:80:c2:68:ed:bc:35:fb:b3:5f:97:b5:2b:96: 07:79:06:fa:78:b7:09:f9:a5:de:7d:51:bf:74:a7: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AF:CA:F1:DE:FD:EA:E3:3A:00:FF:96:C3:45:58:E9:1A:71:1E:F7 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/gK_K8d796uM6AP-Ww0VY6RpxHvc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.103.0/25 Signature Algorithm: sha256WithRSAEncryption 0e:cd:72:de:af:b7:ff:63:b3:d1:c2:ab:e5:55:bf:a2:80:3a: eb:e3:a1:4a:a6:a7:00:5e:e2:c9:0e:cb:59:b3:37:fa:79:02: 7a:4d:e1:f2:30:87:8d:fe:7e:8d:51:e9:73:42:99:f5:fa:0a: 03:f7:6a:82:a1:18:9e:fc:07:a5:f5:66:8c:aa:24:0e:2a:11: 45:88:ba:8a:68:c8:1c:92:0f:6a:04:96:6d:96:51:24:76:e5: d7:77:74:a7:2c:f7:b8:1e:75:13:1f:14:32:ee:5c:10:e6:db: dc:ce:32:2a:6b:29:15:b0:6d:7c:3d:cc:80:d5:0c:e3:f1:59: da:3d:8a:ca:6f:98:00:fc:4f:41:2f:54:2e:1b:6f:d3:d8:09: 9b:54:da:a7:0d:02:48:91:53:04:b6:b6:91:42:d0:59:1c:4b: 44:d2:87:de:ae:0c:da:a6:4a:08:d6:20:ae:5c:96:cd:d6:82: da:56:fc:5b:8d:98:10:ec:19:80:e1:32:39:25:ca:8f:49:77: d3:62:8d:e6:e4:10:2f:31:e0:98:2f:0b:1b:19:76:bf:30:40: 11:d7:31:a4:ea:07:af:67:09:19:b4:e7:2b:42:e9:b9:71:24: 9d:91:ae:48:b7:3e:c2:73:82:85:f3:35:6f:68:3e:44:75:c3: 26:0b:60:78 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTEwMjQx MDI3MTFaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgwQUZDQUYxREVGREVB RTMzQTAwRkY5NkMzNDU1OEU5MUE3MTFFRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/oUPhqRBNUM95MxhcPBqoAQo+JGBiST1L8d7LhRos0FA2MgvE W1NccbLGjeUOb+mfOt8wxR0Wyequ/yzRF7liy0Tf3rhFwwcT71vIzG6CjUiBAIrB uRDjMLjh7jOEMpjwB7uEuUvvUeVcJ7xiohsvG8fVPRFcDim1TVzbIzYBz8C2TKvt 1kX/1K1EcBg8bmM+MBnd7yMr0g2gY8J7aoqnMCI0UpscbAZq8VRFJawVlPRMa6sL 0F8syeUQM9u+n1COrrOl+xgtTKWji7p9ebjW8HaIv0s6B2bG0ayL3qi4AhsYgMJo 7bw1+7Nfl7Urlgd5Bvp4twn5pd59Ub90p0NHAgMBAAGjggIpMIICJTAdBgNVHQ4E FgQUgK/K8d796uM6AP+Ww0VY6RpxHvcwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9nS19LOGQ3OTZ1TTZBUC1XdzBWWTZScHhIdmMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAATAHAwUHmf5nADANBgkqhkiG9w0BAQsFAAOCAQEADs1y3q+3/2Oz0cKr5VW/ ooA66+OhSqanAF7iyQ7LWbM3+nkCek3h8jCHjf5+jVHpc0KZ9foKA/dqgqEYnvwH pfVmjKokDioRRYi6imjIHJIPagSWbZZRJHbl13d0pyz3uB51Ex8UMu5cEObb3M4y KmspFbBtfD3MgNUM4/FZ2j2Kym+YAPxPQS9ULhtv09gJm1Tapw0CSJFTBLa2kULQ WRxLRNKH3q4M2qZKCNYgrlyWzdaC2lb8W42YEOwZgOEyOSXKj0l302KN5uQQLzHg mC8LGxl2vzBAEdcxpOoHr2cJGbTnK0LpuXEknZGuSLc+wnOChfM1b2g+RHXDJgtg eA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:45:43 2025 by rpki-client