$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/khPLiCLvTwgff-8qlDV3pic4_1c.roa File: khPLiCLvTwgff-8qlDV3pic4_1c.roa (raw, json) Hash identifier: EA6lbpdi8ndjpX6CTyPP9V3NR67IXVfg/tElyKTpbwE= Subject key identifier: 92:13:CB:88:22:EF:4F:08:1F:7F:EF:2A:94:35:77:A6:27:38:FF:57 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 010F Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/khPLiCLvTwgff-8qlDV3pic4_1c.roa Signing time: Sat 01 Nov 2025 01:33:49 +0000 ROA not before: Sat 01 Nov 2025 01:33:49 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 124.40.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:33:49 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=9213CB8822EF4F081F7FEF2A943577A62738FF57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:f1:27:97:c8:8d:ce:e6:01:65:8c:0c:ae: 48:56:1d:fe:24:59:ba:59:61:3b:dc:63:e3:62:ff: a5:3c:a2:b0:b1:75:fc:33:03:be:03:00:1e:9b:16: 6a:e2:8c:f7:0c:c3:09:cd:dc:8e:4d:50:2c:fd:07: 88:af:a7:ed:a8:34:82:8f:d2:79:36:e3:dd:02:64: 3b:1c:6b:5a:a4:9d:15:96:f0:3b:10:93:ec:a5:d2: 74:29:75:21:c6:64:8b:72:03:ed:a5:50:49:ae:59: 8c:e6:47:0f:9c:2f:46:72:a8:f1:d7:00:e4:e4:77: 6e:d1:68:65:53:4c:be:44:86:b1:dd:f0:fb:d8:be: 58:5b:37:9c:41:a3:ea:b6:89:c8:e4:e4:54:44:18: 9e:bd:c1:a2:6c:7e:48:d4:a5:b4:0c:35:f0:e8:81: 65:0e:6f:5b:1c:52:77:09:9d:3c:29:6e:46:47:a5: 5c:f7:3d:8f:58:2c:6b:88:81:fc:7b:19:ac:b1:5d: e0:66:b1:6b:ea:67:7e:cc:2d:93:e8:a1:6f:d2:45: d9:57:f5:15:9e:0e:fd:90:78:3d:27:3f:97:ac:a9: 10:d1:f3:4c:38:c8:69:19:5d:af:e3:67:4d:71:24: 5b:5b:02:e3:de:92:ca:e0:d6:2d:57:25:a3:9f:84: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:13:CB:88:22:EF:4F:08:1F:7F:EF:2A:94:35:77:A6:27:38:FF:57 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/khPLiCLvTwgff-8qlDV3pic4_1c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.40.32.0/19 Signature Algorithm: sha256WithRSAEncryption 71:b3:0a:1f:e8:ae:73:a8:29:f9:bb:02:9f:f8:fe:d2:ed:14: d0:5a:0a:1b:34:0d:49:1a:af:73:9b:07:82:8c:e4:37:0a:20: 93:b6:9a:9c:59:5f:80:09:b7:0b:bb:6b:06:94:78:3c:ba:ad: ec:ac:6c:5b:a8:0b:ba:89:ef:e7:ef:55:2e:d0:12:5a:a0:9b: a0:45:68:da:3c:ca:18:e1:93:d1:31:02:b3:8a:eb:ed:0e:bc: 0b:66:77:c4:2c:2a:91:7f:2c:57:de:45:5e:08:1b:f9:6b:91: bc:47:e1:a6:d7:b0:84:53:ee:16:f0:48:31:25:84:01:d0:b3: a0:20:c1:e9:9d:62:1c:59:7d:bd:13:b2:e4:9d:2f:4d:95:2d: 88:5d:d4:93:85:28:09:f4:bc:69:17:75:af:7d:75:05:c5:c7: b9:1b:0b:d0:e1:6d:bb:89:e9:d9:a9:30:98:70:7e:19:26:4e: 1d:5b:e6:d9:25:48:65:ed:b3:7d:0d:ff:0b:ac:c9:a3:ca:7d: d5:ec:c9:99:37:f5:9f:6c:24:c9:52:a2:0b:34:6f:ec:98:0d: f4:b3:8f:0c:82:a5:e5:eb:0d:f8:f6:60:b2:26:0b:a5:96:db: 7d:02:dd:e7:d1:3d:0a:3b:9c:b4:9a:b2:ad:fc:35:9c:b1:81: f7:52:79:87 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTMzNDlaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkyMTNDQjg4MjJFRjRG MDgxRjdGRUYyQTk0MzU3N0E2MjczOEZGNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP7/Enl8iNzuYBZYwMrkhWHf4kWbpZYTvcY+Ni/6U8orCxdfwz A74DAB6bFmrijPcMwwnN3I5NUCz9B4ivp+2oNIKP0nk2490CZDsca1qknRWW8DsQ k+yl0nQpdSHGZItyA+2lUEmuWYzmRw+cL0ZyqPHXAOTkd27RaGVTTL5EhrHd8PvY vlhbN5xBo+q2icjk5FREGJ69waJsfkjUpbQMNfDogWUOb1scUncJnTwpbkZHpVz3 PY9YLGuIgfx7GayxXeBmsWvqZ37MLZPooW/SRdlX9RWeDv2QeD0nP5esqRDR80w4 yGkZXa/jZ01xJFtbAuPeksrg1i1XJaOfhLTrAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUkhPLiCLvTwgff+8qlDV3pic4/1cwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9raFBMaUNMdlR3Z2ZmLThxbERWM3BpYzRfMWMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFfCggMA0GCSqGSIb3DQEBCwUAA4IBAQBxswof6K5zqCn5uwKf+P7S 7RTQWgobNA1JGq9zmweCjOQ3CiCTtpqcWV+ACbcLu2sGlHg8uq3srGxbqAu6ie/n 71Uu0BJaoJugRWjaPMoY4ZPRMQKziuvtDrwLZnfELCqRfyxX3kVeCBv5a5G8R+Gm 17CEU+4W8EgxJYQB0LOgIMHpnWIcWX29E7LknS9NlS2IXdSThSgJ9LxpF3WvfXUF xce5GwvQ4W27ienZqTCYcH4ZJk4dW+bZJUhl7bN9Df8LrMmjyn3V7MmZN/WfbCTJ UqILNG/smA30s48MgqXl6w349mCyJgulltt9At3n0T0KO5y0mrKt/DWcsYH3UnmH -----END CERTIFICATE-----Generated at Tue Nov 4 22:35:13 2025 by rpki-client