$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/mft2Vacq22QUqFaHaWemlsmAuaY.roa File: mft2Vacq22QUqFaHaWemlsmAuaY.roa (raw, json) Hash identifier: zR5nTlTQui15miCw6nuWmhKVjaNBlcI8FdGYuDXdDUY= Subject key identifier: 99:FB:76:55:A7:2A:DB:64:14:A8:56:87:69:67:A6:96:C9:80:B9:A6 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: 0118 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/mft2Vacq22QUqFaHaWemlsmAuaY.roa Signing time: Sat 01 Nov 2025 01:33:55 +0000 ROA not before: Sat 01 Nov 2025 01:33:55 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2914 IP address blocks: 202.47.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:33:55 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=99FB7655A72ADB6414A856876967A696C980B9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:ff:f7:1a:76:fa:82:75:5e:32:4e:d3:3d: 2a:39:f1:8a:e6:22:8f:2f:a5:db:fe:0c:d2:74:0e: 79:93:07:a8:5d:31:ce:b3:8b:29:f7:e4:13:c0:8b: d3:05:21:24:42:c3:29:d0:8f:84:44:e9:3c:32:46: 36:c8:e1:5f:03:54:82:d1:eb:e9:b7:e2:ab:35:7e: 36:c3:9c:6d:1a:70:d6:03:de:ed:57:48:07:ee:50: 1e:12:b2:b2:13:32:c2:f8:c7:1f:64:da:9d:f2:9a: 2f:29:d9:f9:23:4c:4a:f2:98:d1:22:6c:bf:0e:02: 71:0b:b1:68:85:aa:9b:cb:42:fc:cc:67:b5:9b:3d: bd:22:c4:a2:a9:f6:77:ce:95:e2:93:de:fc:e7:76: e8:51:f5:8e:d8:1a:68:6d:08:d4:09:b9:f6:cc:32: 9d:3c:af:9e:67:bd:19:ca:57:8e:7c:91:e9:11:3e: 21:44:df:a9:32:b4:74:e0:70:44:9b:df:38:24:a8: d1:46:7d:66:0f:36:b0:a5:07:0b:a2:da:c6:d6:e4: 62:e4:a6:44:df:78:e7:8f:8f:c6:77:15:49:51:47: 65:db:32:e8:ea:0d:d9:e4:ee:59:47:87:e8:63:fb: f0:0a:8f:9e:f1:44:83:3c:e2:11:b4:b8:15:78:cc: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FB:76:55:A7:2A:DB:64:14:A8:56:87:69:67:A6:96:C9:80:B9:A6 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/mft2Vacq22QUqFaHaWemlsmAuaY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.16.0/20 Signature Algorithm: sha256WithRSAEncryption 48:a0:b6:90:27:0c:c5:ef:f1:c4:91:9b:7c:de:8b:ae:70:63: ce:47:33:8c:f2:96:35:14:00:e2:c5:cd:2a:aa:1e:e7:f1:20: 7d:db:25:e9:d4:8e:0b:cf:03:fb:c6:45:b9:8a:38:7c:ec:83: 26:60:bc:95:80:93:2a:7e:e8:30:f3:ab:8e:68:3c:2c:9f:92: 53:87:c9:34:ba:06:88:89:b1:43:f1:8a:d7:fe:e8:5d:8e:33: eb:73:af:0d:fa:67:a1:72:ab:2f:17:e0:35:53:1c:99:16:e8: f2:2d:9e:48:41:2f:85:63:6b:02:c7:8b:3a:dd:cd:e4:d0:25: 53:c9:a6:e4:37:14:37:d1:f2:17:c8:5b:81:e0:18:a5:c5:bd: 36:d5:e2:2e:38:19:e2:df:68:8a:1c:b7:3e:dc:e0:ac:ee:a6: 02:11:77:49:41:55:e6:75:5e:4a:e7:0c:25:40:b9:95:a3:b0: 81:bc:c3:9f:89:19:41:2a:63:54:41:dd:79:6c:fc:61:b5:a3: 33:26:05:69:ea:0b:a7:de:81:be:2b:23:51:5f:20:1d:e7:56: 8f:73:8a:7d:81:e0:8d:df:82:67:3d:9e:cf:8b:49:77:31:c2: 79:6f:f9:95:52:7e:b6:3a:47:6a:93:d4:57:d5:cf:00:9b:d3: 45:ec:32:bc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICARgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTMzNTVaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk5RkI3NjU1QTcyQURC NjQxNEE4NTY4NzY5NjdBNjk2Qzk4MEI5QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkSP/3Gnb6gnVeMk7TPSo58YrmIo8vpdv+DNJ0DnmTB6hdMc6z iyn35BPAi9MFISRCwynQj4RE6TwyRjbI4V8DVILR6+m34qs1fjbDnG0acNYD3u1X SAfuUB4SsrITMsL4xx9k2p3ymi8p2fkjTErymNEibL8OAnELsWiFqpvLQvzMZ7Wb Pb0ixKKp9nfOleKT3vznduhR9Y7YGmhtCNQJufbMMp08r55nvRnKV458kekRPiFE 36kytHTgcESb3zgkqNFGfWYPNrClBwui2sbW5GLkpkTfeOePj8Z3FUlRR2XbMujq Ddnk7llHh+hj+/AKj57xRIM84hG0uBV4zIIDAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUmft2Vacq22QUqFaHaWemlsmAuaYwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9tZnQyVmFjcTIyUVVxRmFIYVdlbWxzbUF1YVku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEyi8QMA0GCSqGSIb3DQEBCwUAA4IBAQBIoLaQJwzF7/HEkZt83ouu cGPORzOM8pY1FADixc0qqh7n8SB92yXp1I4LzwP7xkW5ijh87IMmYLyVgJMqfugw 86uOaDwsn5JTh8k0ugaIibFD8YrX/uhdjjPrc68N+mehcqsvF+A1UxyZFujyLZ5I QS+FY2sCx4s63c3k0CVTyabkNxQ30fIXyFuB4Bilxb021eIuOBni32iKHLc+3OCs 7qYCEXdJQVXmdV5K5wwlQLmVo7CBvMOfiRlBKmNUQd15bPxhtaMzJgVp6gun3oG+ KyNRXyAd51aPc4p9geCN34JnPZ7Pi0l3McJ5b/mVUn62Okdqk9RX1c8Am9NF7DK8 -----END CERTIFICATE-----Generated at Tue Nov 4 22:34:56 2025 by rpki-client