$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/lJST8ZBKBMzbGggKkR6UZDXVX-A.roa File: lJST8ZBKBMzbGggKkR6UZDXVX-A.roa (raw, json) Hash identifier: mNq1AXOcSkLSEPcLBlhDkqccyXkZFgCQfhvG3bGtRak= Subject key identifier: 94:94:93:F1:90:4A:04:CC:DB:1A:08:0A:91:1E:94:64:35:D5:5F:E0 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0107 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/lJST8ZBKBMzbGggKkR6UZDXVX-A.roa Signing time: Sat 01 Nov 2025 01:28:44 +0000 ROA not before: Sat 01 Nov 2025 01:28:44 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 61.200.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:44 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=949493F1904A04CCDB1A080A911E946435D55FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d7:2b:d8:a7:1f:a0:1f:32:39:22:36:3e:61: 5b:e4:3e:d9:ac:ce:b6:28:83:0b:fc:84:aa:6f:36: 62:f1:ff:70:a3:bc:a7:8d:86:ee:5f:71:ff:e7:d5: 34:29:8e:b1:22:01:25:fd:e5:fe:7a:c7:f6:32:e1: 28:59:cb:32:0e:fb:97:54:a4:2b:19:d9:2d:fe:f5: 51:5e:e8:51:b4:c3:8d:00:8f:3b:31:6b:a9:e8:6b: 6d:8d:f9:28:fd:b7:ed:bb:61:55:db:7e:39:c2:8c: bd:a4:bb:08:6b:88:1a:ad:94:fe:ec:89:4b:3e:e2: 1a:07:f7:dc:62:03:a7:dc:69:67:14:26:4e:8b:cb: 03:d0:8f:41:75:40:35:7d:3e:81:97:f3:dd:44:c9: a6:bd:3f:89:44:ad:ba:30:28:10:be:e0:6c:5d:73: 33:d6:ea:4c:2b:c2:8e:33:d3:06:32:7e:0f:12:02: 5a:68:b8:64:59:44:66:cb:4a:20:48:89:1b:c8:bd: ce:13:a5:1e:60:05:6c:a6:bf:dc:a8:5f:4b:7c:8f: 42:84:ae:cd:79:db:84:61:f6:98:9d:5b:1b:04:b5: dc:bf:71:76:84:51:c4:68:e1:ad:0b:31:fa:d8:f9: 65:b8:05:32:3e:53:c8:10:9d:95:d5:b8:90:3a:fb: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:94:93:F1:90:4A:04:CC:DB:1A:08:0A:91:1E:94:64:35:D5:5F:E0 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/lJST8ZBKBMzbGggKkR6UZDXVX-A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.200.80.0/20 Signature Algorithm: sha256WithRSAEncryption 26:3e:26:1c:77:84:17:22:00:69:ce:97:d6:c9:db:4f:d8:a2: 64:2b:16:f8:f2:85:32:e8:95:d7:15:b9:04:b2:e2:b8:90:2d: dc:32:09:54:30:4f:04:7e:ac:29:78:0a:95:3e:2f:62:e8:9b: 37:7a:20:42:b3:a3:63:0c:83:67:2c:90:1b:f2:b6:a9:ef:5b: af:ac:a6:c0:ed:11:47:6d:bc:63:1d:13:47:ea:80:f8:61:da: f2:bb:ec:4d:76:3c:45:12:22:9b:b8:6a:f3:ed:1d:4d:45:23: 0f:fb:c7:e1:19:4e:24:11:24:2b:5e:05:99:3c:da:05:e2:8c: da:7d:32:58:f0:1d:34:c7:8e:05:80:d0:ba:19:61:83:51:50: 26:b3:4e:6f:f3:65:b3:66:37:16:7b:95:ef:69:12:00:c4:02: be:ab:f9:6c:95:5a:1c:b6:ca:e2:c6:25:bb:a5:f5:14:c2:34: 95:69:6d:52:c4:51:e7:3f:96:d5:ca:2c:a9:84:11:83:9c:84: df:18:48:5b:f4:59:28:7c:23:15:a1:4f:86:1f:a4:7f:49:7e: 99:34:17:dd:aa:5e:63:b0:ac:c2:ea:ce:2d:06:8a:20:41:27: 96:0a:e5:7b:85:53:49:96:17:6a:08:ab:37:90:34:51:be:6b: 32:1c:66:88 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4NDRaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0OTQ5M0YxOTA0QTA0 Q0NEQjFBMDgwQTkxMUU5NDY0MzVENTVGRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDm1yvYpx+gHzI5IjY+YVvkPtmszrYogwv8hKpvNmLx/3CjvKeN hu5fcf/n1TQpjrEiASX95f56x/Yy4ShZyzIO+5dUpCsZ2S3+9VFe6FG0w40Ajzsx a6noa22N+Sj9t+27YVXbfjnCjL2kuwhriBqtlP7siUs+4hoH99xiA6fcaWcUJk6L ywPQj0F1QDV9PoGX891Eyaa9P4lErbowKBC+4GxdczPW6kwrwo4z0wYyfg8SAlpo uGRZRGbLSiBIiRvIvc4TpR5gBWymv9yoX0t8j0KErs1524Rh9pidWxsEtdy/cXaE UcRo4a0LMfrY+WW4BTI+U8gQnZXVuJA6+36zAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUlJST8ZBKBMzbGggKkR6UZDXVX+AwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9sSlNUOFpCS0JNemJHZ2dLa1I2VVpEWFZYLUEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEPchQMA0GCSqGSIb3DQEBCwUAA4IBAQAmPiYcd4QXIgBpzpfWydtP 2KJkKxb48oUy6JXXFbkEsuK4kC3cMglUME8EfqwpeAqVPi9i6Js3eiBCs6NjDINn LJAb8rap71uvrKbA7RFHbbxjHRNH6oD4Ydryu+xNdjxFEiKbuGrz7R1NRSMP+8fh GU4kESQrXgWZPNoF4ozafTJY8B00x44FgNC6GWGDUVAms05v82WzZjcWe5XvaRIA xAK+q/lslVoctsrixiW7pfUUwjSVaW1SxFHnP5bVyiyphBGDnITfGEhb9FkofCMV oU+GH6R/SX6ZNBfdql5jsKzC6s4tBoogQSeWCuV7hVNJlhdqCKs3kDRRvmsyHGaI -----END CERTIFICATE-----Generated at Tue Nov 4 21:00:22 2025 by rpki-client