$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/gYhI8bzL5_IizkXmd2aWoMOOowA.roa File: gYhI8bzL5_IizkXmd2aWoMOOowA.roa (raw, json) Hash identifier: HkfwazgP2X2Qm8MwfWbsdjuyQc77i0I7Qe48Sr5KKms= Subject key identifier: 81:88:48:F1:BC:CB:E7:F2:22:CE:45:E6:77:66:96:A0:C3:8E:A3:00 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: F4 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/gYhI8bzL5_IizkXmd2aWoMOOowA.roa Signing time: Sat 01 Nov 2025 01:28:34 +0000 ROA not before: Sat 01 Nov 2025 01:28:34 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 153.254.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:34 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=818848F1BCCBE7F222CE45E6776696A0C38EA300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:13:61:83:45:3c:37:de:af:2a:98:53:69:67: f0:c2:1a:76:20:f3:86:9a:04:98:46:c6:fc:57:02: 2f:8c:06:07:cb:f8:50:9e:c6:09:79:0c:83:19:58: 2f:16:92:2d:31:d7:be:3a:0d:c0:03:66:bc:cf:7e: 1f:7b:d0:e0:ed:d0:56:79:c3:c6:78:a9:33:b8:d1: cd:ca:cc:eb:3a:9f:f0:71:47:d1:85:16:25:e9:80: b4:4d:74:17:bf:26:76:51:3e:3c:64:a1:8a:5d:7b: 14:0a:a1:fb:92:79:0b:7c:94:4e:b6:60:26:1f:bc: d0:37:a8:b2:50:3f:fa:c2:ad:4b:02:33:0c:c3:12: 91:f1:0d:ad:22:84:6b:67:2e:06:99:08:88:d3:98: 01:69:27:7f:b2:55:b7:f5:a3:d2:ef:03:78:4e:06: 78:86:5d:4c:38:6c:17:56:ae:3d:df:82:81:52:10: 8a:b2:dc:72:1c:90:07:2c:6b:5a:38:38:04:58:33: 66:58:64:8e:ca:cd:2d:a9:d8:05:1e:46:43:6d:d1: b1:96:06:6f:1a:93:5a:9e:71:9e:86:60:f7:06:dd: c1:b3:34:5c:b3:f1:a1:0c:06:20:c1:4c:d9:64:7a: 4f:a2:5f:2a:61:69:66:09:7a:8c:22:09:a4:36:7d: ee:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:88:48:F1:BC:CB:E7:F2:22:CE:45:E6:77:66:96:A0:C3:8E:A3:00 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/gYhI8bzL5_IizkXmd2aWoMOOowA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.92.0/22 Signature Algorithm: sha256WithRSAEncryption 84:c5:a6:f7:8a:95:db:2a:e6:4f:4e:19:cd:8d:ef:8e:67:45: d1:0c:96:03:10:43:c5:0b:c8:0c:a6:bc:2c:4a:88:95:3c:f3: 7a:95:bf:4a:86:81:69:31:84:cd:2b:15:49:45:1b:94:1e:be: 3c:20:66:b7:34:34:d4:b6:8b:48:95:bb:b2:c7:b9:b1:93:b7: 81:da:c4:50:68:52:3e:64:03:da:09:51:c1:19:9b:9b:76:b9: db:e7:93:f4:aa:a0:64:6a:b2:14:04:94:ac:60:8f:bc:07:f7: d9:b9:eb:74:39:d4:a7:24:7d:9d:a8:7b:28:20:bb:44:34:98: 8e:40:e8:d4:6b:40:7f:e5:8c:ab:68:83:58:cf:4b:02:1f:83: 05:c0:3d:68:79:04:23:6e:83:6b:c9:cd:66:b7:b6:20:e6:1e: 7c:a4:cf:d2:af:fb:c1:cf:64:4c:4a:41:03:33:ec:40:59:2d: f8:2a:9a:c0:45:b5:0d:f1:ae:02:be:04:0a:95:73:e4:f8:8a: 46:2c:0c:c5:ce:3b:1a:22:1d:f4:cc:14:df:29:16:7b:d2:f2: e6:3b:fc:af:25:77:6b:bf:d5:60:1e:e7:e6:e9:6e:6f:a3:12: 57:ff:bc:03:9b:c8:44:5d:2b:78:73:80:0e:93:17:b7:a8:9d: 29:87:d3:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4MzRaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgxODg0OEYxQkNDQkU3 RjIyMkNFNDVFNjc3NjY5NkEwQzM4RUEzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQE2GDRTw33q8qmFNpZ/DCGnYg84aaBJhGxvxXAi+MBgfL+FCe xgl5DIMZWC8Wki0x1746DcADZrzPfh970ODt0FZ5w8Z4qTO40c3KzOs6n/BxR9GF FiXpgLRNdBe/JnZRPjxkoYpdexQKofuSeQt8lE62YCYfvNA3qLJQP/rCrUsCMwzD EpHxDa0ihGtnLgaZCIjTmAFpJ3+yVbf1o9LvA3hOBniGXUw4bBdWrj3fgoFSEIqy 3HIckAcsa1o4OARYM2ZYZI7KzS2p2AUeRkNt0bGWBm8ak1qecZ6GYPcG3cGzNFyz 8aEMBiDBTNlkek+iXyphaWYJeowiCaQ2fe79AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUgYhI8bzL5/IizkXmd2aWoMOOowAwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9nWWhJOGJ6TDVfSWl6a1htZDJhV29NT09vd0Eu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCmf5cMA0GCSqGSIb3DQEBCwUAA4IBAQCExab3ipXbKuZPThnNje+O Z0XRDJYDEEPFC8gMprwsSoiVPPN6lb9KhoFpMYTNKxVJRRuUHr48IGa3NDTUtotI lbuyx7mxk7eB2sRQaFI+ZAPaCVHBGZubdrnb55P0qqBkarIUBJSsYI+8B/fZuet0 OdSnJH2dqHsoILtENJiOQOjUa0B/5YyraINYz0sCH4MFwD1oeQQjboNryc1mt7Yg 5h58pM/Sr/vBz2RMSkEDM+xAWS34KprARbUN8a4CvgQKlXPk+IpGLAzFzjsaIh30 zBTfKRZ70vLmO/yvJXdrv9VgHufm6W5voxJX/7wDm8hEXSt4c4AOkxe3qJ0ph9M/ -----END CERTIFICATE-----Generated at Tue Nov 4 22:35:13 2025 by rpki-client