$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/k3lR7QCvlE3mMjqo9r4WQNmvt3Q.roa File: k3lR7QCvlE3mMjqo9r4WQNmvt3Q.roa (raw, json) Hash identifier: erTcv1Kn64UrIbt5x8oD2VaOp4qu67Fzk0bgw9QsAWA= Subject key identifier: 93:79:51:ED:00:AF:94:4D:E6:32:3A:A8:F6:BE:16:40:D9:AF:B7:74 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: F6 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/k3lR7QCvlE3mMjqo9r4WQNmvt3Q.roa Signing time: Sat 01 Nov 2025 01:28:35 +0000 ROA not before: Sat 01 Nov 2025 01:28:35 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 3949 IP address blocks: 117.104.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:35 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=937951ED00AF944DE6323AA8F6BE1640D9AFB774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:0b:0c:14:cb:f6:b0:c3:a7:89:10:6e:d5: 14:6e:fb:f1:e5:10:7b:10:d4:4f:51:15:62:bf:f6: 91:a9:bb:2c:3a:12:e4:38:b5:79:8a:0e:40:6a:d2: 75:ed:cf:04:95:fd:44:2f:39:2d:e7:33:ea:67:f1: a7:7c:72:b5:6e:3d:d3:ef:6f:16:22:6b:f0:60:26: 2e:e3:22:7e:9d:6a:00:8c:9d:f9:62:aa:13:dc:c6: 1c:aa:c8:76:ab:90:e2:7a:08:c0:0f:79:77:10:91: 8e:30:98:ee:33:d7:ae:69:38:94:d5:59:17:6b:2d: 11:57:b6:25:96:cd:4e:bf:85:63:ea:be:8b:85:e3: e7:a9:cc:cb:66:45:52:af:f2:9f:25:66:76:c3:e3: 65:73:dd:20:c1:02:4f:fe:88:fe:0c:9f:7b:a6:b7: 75:6a:58:24:d9:49:d8:82:99:76:fd:08:e7:9f:52: a3:a1:78:87:1d:fa:4f:5f:7c:a7:4b:5b:2b:ac:64: 26:da:b5:1e:46:e2:1b:cb:30:a5:75:31:ba:d7:bf: e4:19:5a:9a:ea:e9:0f:c2:b2:30:be:1b:6a:01:e1: eb:10:e2:48:24:17:08:ea:30:1a:73:a9:a1:98:e2: a3:af:23:85:be:be:1f:19:0d:bf:59:02:be:67:38: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:79:51:ED:00:AF:94:4D:E6:32:3A:A8:F6:BE:16:40:D9:AF:B7:74 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/k3lR7QCvlE3mMjqo9r4WQNmvt3Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.104.133.0/24 Signature Algorithm: sha256WithRSAEncryption 71:97:c1:fc:0a:46:bd:09:d2:3c:44:f5:3e:c9:3e:5c:af:1c: c9:f8:b7:d1:09:e9:c1:1f:10:d6:51:f5:1f:91:9f:c5:30:67: bf:16:55:cf:6e:e7:50:d9:82:b0:e5:1a:f2:53:98:d9:6e:a2: 13:6d:32:98:cd:ca:f6:3d:87:86:c1:a8:62:da:d6:c9:f9:58: a2:e3:4d:d9:14:72:1d:ce:57:5e:a6:11:93:53:b5:e4:fc:84: 18:3c:29:ef:3b:6c:cd:ff:a4:84:cb:ad:0a:e1:3c:ea:c6:5b: d8:99:75:05:91:77:39:b6:81:8b:df:f3:13:30:1e:e9:3c:86: ed:83:d6:79:dc:28:b4:16:0b:b6:fd:b6:90:41:a6:98:14:46: e1:86:cc:cf:5b:33:22:48:3e:86:7f:5e:13:a7:72:22:03:4f: a6:e4:f0:2b:f8:79:e8:da:aa:06:6e:22:2b:63:c4:3f:9a:74: 8b:8d:97:3b:2d:69:40:bb:4e:c4:09:f0:97:bb:2f:3d:39:a0: c4:24:55:4b:19:24:48:0e:b9:e0:7f:92:99:b6:84:9b:86:0a: 0f:e1:4c:1c:ac:47:7c:f7:3b:2b:9e:e8:fe:80:80:da:a2:4b: 48:89:62:26:27:8d:fd:5c:f1:7d:7e:9f:2a:bc:17:df:61:75: f3:ea:01:1d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4MzVaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzNzk1MUVEMDBBRjk0 NERFNjMyM0FBOEY2QkUxNjQwRDlBRkI3NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfDQsMFMv2sMOniRBu1RRu+/HlEHsQ1E9RFWK/9pGpuyw6EuQ4 tXmKDkBq0nXtzwSV/UQvOS3nM+pn8ad8crVuPdPvbxYia/BgJi7jIn6dagCMnfli qhPcxhyqyHarkOJ6CMAPeXcQkY4wmO4z165pOJTVWRdrLRFXtiWWzU6/hWPqvouF 4+epzMtmRVKv8p8lZnbD42Vz3SDBAk/+iP4Mn3umt3VqWCTZSdiCmXb9COefUqOh eIcd+k9ffKdLWyusZCbatR5G4hvLMKV1MbrXv+QZWprq6Q/CsjC+G2oB4esQ4kgk FwjqMBpzqaGY4qOvI4W+vh8ZDb9ZAr5nONjLAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUk3lR7QCvlE3mMjqo9r4WQNmvt3QwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9rM2xSN1FDdmxFM21NanFvOXI0V1FObXZ0M1Eu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdWiFMA0GCSqGSIb3DQEBCwUAA4IBAQBxl8H8Cka9CdI8RPU+yT5c rxzJ+LfRCenBHxDWUfUfkZ/FMGe/FlXPbudQ2YKw5RryU5jZbqITbTKYzcr2PYeG wahi2tbJ+Vii403ZFHIdzldephGTU7Xk/IQYPCnvO2zN/6SEy60K4TzqxlvYmXUF kXc5toGL3/MTMB7pPIbtg9Z53Ci0Fgu2/baQQaaYFEbhhszPWzMiSD6Gf14Tp3Ii A0+m5PAr+Hno2qoGbiIrY8Q/mnSLjZc7LWlAu07ECfCXuy89OaDEJFVLGSRIDrng f5KZtoSbhgoP4UwcrEd89zsrnuj+gIDaoktIiWImJ439XPF9fp8qvBffYXXz6gEd -----END CERTIFICATE-----Generated at Wed Nov 5 08:08:29 2025 by rpki-client