$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tZChLpysY07n_Wx4LZ0709-4cNg.roa File: tZChLpysY07n_Wx4LZ0709-4cNg.roa (raw, json) Hash identifier: SjynbPuuOD/yi9t7EBRs4HPqZ3AprcGMUf/p+3Relrs= Subject key identifier: B5:90:A1:2E:9C:AC:63:4E:E7:FD:6C:78:2D:9D:3B:D3:DF:B8:70:D8 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: FC Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tZChLpysY07n_Wx4LZ0709-4cNg.roa Signing time: Sat 01 Nov 2025 01:28:39 +0000 ROA not before: Sat 01 Nov 2025 01:28:39 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 30103 IP address blocks: 120.29.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:39 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=B590A12E9CAC634EE7FD6C782D9D3BD3DFB870D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:f5:9b:cc:35:41:e5:3a:bd:13:82:4d:c7: 83:3c:ff:ad:50:e9:1a:bb:4b:e6:c5:39:e6:8b:05: 2b:1e:4e:c5:ec:64:74:ab:07:24:c5:ff:3d:ea:fe: 0e:05:32:0a:fc:47:71:4e:d9:b4:bd:df:27:4c:93: 0b:49:e9:99:64:b1:3f:df:a1:fe:c1:6b:0b:70:4e: 9b:19:e9:68:da:0b:d1:27:90:93:a6:70:ce:20:b6: 19:1b:94:38:bc:6b:6f:25:60:4f:71:b9:17:6d:95: ae:bb:c0:a3:f9:7d:ad:d9:90:1d:a2:c2:b5:5a:85: e7:ec:92:c6:78:57:ae:fe:56:99:cb:6c:e4:46:63: 82:2e:82:13:e1:c4:39:63:d5:11:38:11:08:d9:68: f0:28:7a:16:79:42:9f:c4:04:fe:09:1c:40:9d:ec: 52:85:98:35:7c:a0:46:27:07:d4:a7:30:ae:2a:91: 87:7e:50:38:2d:81:36:ce:d2:7e:0e:f9:fa:51:54: 95:62:0e:4e:3a:72:8a:6b:39:67:4c:ac:b6:a9:01: 8a:d8:88:ec:22:55:12:d0:9a:27:0a:91:17:2e:6b: db:ec:72:41:55:a3:26:18:19:2d:7e:d8:6d:31:8d: 57:21:62:cb:55:08:02:1a:e2:10:6e:ba:ec:f4:b2: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:90:A1:2E:9C:AC:63:4E:E7:FD:6C:78:2D:9D:3B:D3:DF:B8:70:D8 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/tZChLpysY07n_Wx4LZ0709-4cNg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.148.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:1d:6f:38:e5:ac:e5:c8:31:13:af:54:a8:27:2c:1d:f0:e0: b3:46:b9:ba:2f:3a:7e:5e:af:8c:b6:bd:b2:df:c5:76:7b:29: 1b:92:ca:36:f3:b1:a7:36:e2:2f:18:bb:c0:1f:dc:81:61:4d: 40:33:dd:3b:a6:5c:69:df:82:63:12:5d:e8:d5:be:19:eb:1b: ef:73:da:aa:21:e9:f5:f8:0e:04:50:91:e0:48:7c:0b:79:51: 60:b7:ce:fc:5a:b0:82:d6:2f:cc:52:e1:a6:9e:6d:69:1f:4e: 11:a1:02:f9:70:5c:9a:b7:53:3d:88:dc:bd:af:a8:60:7b:1e: 6b:b7:36:57:13:b6:06:81:99:62:63:cb:83:32:b0:a3:20:e6: db:f5:a5:af:99:43:c1:d0:ba:4d:ec:17:75:c9:e1:24:bb:6a: 76:0f:d6:de:b0:10:34:55:f8:0d:20:4d:96:b6:51:c5:f6:fa: b5:6f:b1:34:56:fc:88:0d:b6:91:e9:e3:a5:0a:ee:c7:be:ab: 91:a6:7c:30:32:cd:f9:7a:c8:59:33:df:ee:97:88:24:c2:91: ce:5b:8e:5d:67:6a:1a:f9:b0:dc:e4:e0:a2:4a:23:ed:90:69: f2:ff:81:0f:3a:3e:76:1b:1b:25:52:e5:66:cf:92:61:df:39: fc:89:e2:78 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4MzlaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI1OTBBMTJFOUNBQzYz NEVFN0ZENkM3ODJEOUQzQkQzREZCODcwRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3SPWbzDVB5Tq9E4JNx4M8/61Q6Rq7S+bFOeaLBSseTsXsZHSr ByTF/z3q/g4FMgr8R3FO2bS93ydMkwtJ6ZlksT/fof7BawtwTpsZ6WjaC9EnkJOm cM4gthkblDi8a28lYE9xuRdtla67wKP5fa3ZkB2iwrVahefsksZ4V67+VpnLbORG Y4IughPhxDlj1RE4EQjZaPAoehZ5Qp/EBP4JHECd7FKFmDV8oEYnB9SnMK4qkYd+ UDgtgTbO0n4O+fpRVJViDk46coprOWdMrLapAYrYiOwiVRLQmicKkRcua9vsckFV oyYYGS1+2G0xjVchYstVCAIa4hBuuuz0slFnAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUtZChLpysY07n/Wx4LZ0709+4cNgwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC90WkNoTHB5c1kwN25fV3g0TFowNzA5LTRjTmcu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAeB2UMA0GCSqGSIb3DQEBCwUAA4IBAQAvHW845azlyDETr1SoJywd 8OCzRrm6Lzp+Xq+Mtr2y38V2eykbkso287GnNuIvGLvAH9yBYU1AM907plxp34Jj El3o1b4Z6xvvc9qqIen1+A4EUJHgSHwLeVFgt878WrCC1i/MUuGmnm1pH04RoQL5 cFyat1M9iNy9r6hgex5rtzZXE7YGgZliY8uDMrCjIObb9aWvmUPB0LpN7Bd1yeEk u2p2D9besBA0VfgNIE2WtlHF9vq1b7E0VvyIDbaR6eOlCu7HvquRpnwwMs35eshZ M9/ul4gkwpHOW45dZ2oa+bDc5OCiSiPtkGny/4EPOj52GxslUuVmz5Jh3zn8ieJ4 -----END CERTIFICATE-----Generated at Wed Nov 5 08:04:27 2025 by rpki-client