$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hlrYaTnDQRyJPYuA2Jne2Us55o0.roa File: hlrYaTnDQRyJPYuA2Jne2Us55o0.roa (raw, json) Hash identifier: G24wviftlcGbjvNi7SfzqiDxEljlZk39AjUb/Nwj2cs= Subject key identifier: 86:5A:D8:69:39:C3:41:1C:89:3D:8B:80:D8:99:DE:D9:4B:39:E6:8D Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0120 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hlrYaTnDQRyJPYuA2Jne2Us55o0.roa Signing time: Sat 01 Nov 2025 01:33:59 +0000 ROA not before: Sat 01 Nov 2025 01:33:59 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 111.68.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:33:59 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=865AD86939C3411C893D8B80D899DED94B39E68D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:57:4c:57:d9:6e:a2:8c:6d:58:5a:b4:ef: fa:2f:47:8e:1a:1e:05:1c:49:5e:d1:18:09:a7:37: 2e:3d:dc:4c:c2:52:5e:02:95:d8:fe:63:28:58:07: fb:b9:80:ac:0f:65:70:91:43:87:b3:6e:0c:16:df: b7:57:d0:80:6b:6f:15:ab:d5:da:da:ac:19:0b:e8: d7:7b:36:14:c4:8e:8c:6b:f1:4b:97:65:59:60:f9: 65:6e:2a:b0:d1:db:68:ae:4c:07:63:dd:3c:9d:92: 0f:cb:e3:45:b0:99:cf:92:8e:75:8c:82:4d:9b:8d: cb:d1:7c:2a:52:1b:0b:be:04:61:0d:fb:69:36:f9: f0:cc:10:c3:40:4d:d7:28:1f:dd:12:c4:0c:49:e0: 19:1b:9f:e9:e1:f1:72:98:7d:f6:b0:73:6c:5b:67: a0:e7:59:00:47:99:a6:4e:28:2e:da:55:0b:4c:fa: 29:e7:a9:85:ba:b0:1b:c8:36:b4:7e:7e:6b:2d:ca: 41:44:19:23:e9:da:0f:d8:7e:ef:cc:45:bb:e2:97: 45:98:9f:8a:ca:09:67:c7:2c:c4:97:15:a2:45:13: 2b:4c:03:ec:6c:da:c0:5d:05:5a:f5:eb:66:a6:82: 64:e3:89:fb:00:e4:ab:22:c3:82:90:df:ca:49:d2: b7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5A:D8:69:39:C3:41:1C:89:3D:8B:80:D8:99:DE:D9:4B:39:E6:8D X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hlrYaTnDQRyJPYuA2Jne2Us55o0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.68.128.0/17 Signature Algorithm: sha256WithRSAEncryption a4:6f:ca:68:ae:fe:40:6f:43:99:1f:f9:06:8d:fa:2d:e8:06: 5b:92:53:3f:3e:8a:f3:73:74:8a:ce:5c:13:8d:16:29:d0:a1: 88:00:fc:c6:95:6e:5d:c3:54:d4:e0:14:93:55:9f:2c:6e:0e: 75:fe:12:48:3a:a6:93:19:0d:40:82:6c:bf:ec:92:28:6d:7c: 42:29:8c:f5:03:2c:03:8b:93:0c:29:cb:c3:ce:6d:12:63:28: e1:7c:e1:68:64:21:73:d9:59:28:d1:13:9f:df:d2:04:be:46: 59:d7:8a:f5:76:23:bf:05:f4:34:4e:5d:15:3f:93:e5:45:32: 9f:26:4d:a8:f1:12:f9:1d:d3:96:f4:c3:49:25:9a:8a:07:11: 66:f8:bd:75:db:74:1f:50:8c:e0:5b:0a:79:bd:70:db:79:ae: df:5c:c1:aa:af:21:b1:9a:4c:df:ee:1d:a2:24:f2:29:ac:26: 47:6b:86:60:2b:6b:22:14:5c:b1:58:4e:57:2a:c4:d4:6c:ec: 2b:47:90:ef:99:6e:6a:b2:88:88:10:bb:51:1a:56:9e:22:7b: ac:63:ab:28:91:61:96:66:e3:a3:97:83:2d:6c:f4:a5:ee:04: cc:62:d0:fd:5b:52:4e:9f:2d:85:4b:6f:7a:88:b2:14:3a:83: 44:32:ad:98 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTMzNTlaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg2NUFEODY5MzlDMzQx MUM4OTNEOEI4MEQ4OTlERUQ5NEIzOUU2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7aVdMV9luooxtWFq07/ovR44aHgUcSV7RGAmnNy493EzCUl4C ldj+YyhYB/u5gKwPZXCRQ4ezbgwW37dX0IBrbxWr1drarBkL6Nd7NhTEjoxr8UuX ZVlg+WVuKrDR22iuTAdj3Tydkg/L40Wwmc+SjnWMgk2bjcvRfCpSGwu+BGEN+2k2 +fDMEMNATdcoH90SxAxJ4Bkbn+nh8XKYffawc2xbZ6DnWQBHmaZOKC7aVQtM+inn qYW6sBvINrR+fmstykFEGSPp2g/Yfu/MRbvil0WYn4rKCWfHLMSXFaJFEytMA+xs 2sBdBVr162amgmTjifsA5Ksiw4KQ38pJ0rdrAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUhlrYaTnDQRyJPYuA2Jne2Us55o0wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9obHJZYVRuRFFSeUpQWXVBMkpuZTJVczU1bzAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQHb0SAMA0GCSqGSIb3DQEBCwUAA4IBAQCkb8porv5Ab0OZH/kGjfot 6AZbklM/Porzc3SKzlwTjRYp0KGIAPzGlW5dw1TU4BSTVZ8sbg51/hJIOqaTGQ1A gmy/7JIobXxCKYz1AywDi5MMKcvDzm0SYyjhfOFoZCFz2Vko0ROf39IEvkZZ14r1 diO/BfQ0Tl0VP5PlRTKfJk2o8RL5HdOW9MNJJZqKBxFm+L1123QfUIzgWwp5vXDb ea7fXMGqryGxmkzf7h2iJPIprCZHa4ZgK2siFFyxWE5XKsTUbOwrR5DvmW5qsoiI ELtRGlaeInusY6sokWGWZuOjl4MtbPSl7gTMYtD9W1JOny2FS296iLIUOoNEMq2Y -----END CERTIFICATE-----Generated at Tue Nov 4 21:00:25 2025 by rpki-client