$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/vgedVho-Zz_LdlRK6FD-dW5dP3o.roa File: vgedVho-Zz_LdlRK6FD-dW5dP3o.roa (raw, json) Hash identifier: qsMp1tUH6tb4bzv+5+ke1pYC8bZX5KlU64nTNsvAayE= Subject key identifier: BE:07:9D:56:1A:3E:67:3F:CB:76:54:4A:E8:50:FE:75:6E:5D:3F:7A Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: E4 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/vgedVho-Zz_LdlRK6FD-dW5dP3o.roa Signing time: Fri 24 Oct 2025 10:27:10 +0000 ROA not before: Fri 24 Oct 2025 10:27:10 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 23918 IP address blocks: 153.254.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Oct 24 10:27:10 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=BE079D561A3E673FCB76544AE850FE756E5D3F7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:77:ba:eb:f2:bb:3d:c1:0a:8e:b1:83:b7: 3f:70:7a:29:e3:04:61:68:56:24:22:e6:24:8e:a3: 76:a2:38:c1:c1:11:22:32:b1:63:8f:2e:03:46:b2: 58:a9:96:35:fe:59:80:70:53:dc:d1:af:70:01:7d: ae:12:5c:62:d9:d9:ac:22:13:ec:ef:33:96:10:ea: c6:de:6b:18:ab:d1:db:c8:e5:26:ce:4f:96:f7:fc: ae:da:8a:ff:b3:3d:72:5b:28:15:c1:3e:6c:e9:e7: a1:62:50:1a:ad:43:90:e9:05:87:48:f8:f4:49:55: 06:e2:8b:89:d7:65:c3:3b:c5:35:0a:97:88:a8:7f: 99:78:dc:4d:3d:b9:60:e7:ee:bf:fb:16:ef:6c:1f: 2c:af:20:dc:9c:35:70:ea:db:84:06:88:f2:5b:ef: 38:8c:d0:2c:e5:44:6d:56:08:ab:51:d5:cb:68:0d: 69:04:f7:f0:fb:e5:8d:a4:4f:9f:f2:6b:fe:37:73: 4b:b3:0b:bc:96:41:eb:d9:9c:08:8c:f7:18:fe:5c: 1e:e6:77:30:32:48:48:ed:da:76:72:8f:3b:3c:56: c4:f6:4f:bf:ab:93:31:4c:53:2f:f2:86:72:fd:af: a9:c5:80:29:aa:a6:a7:4b:13:c4:13:74:df:98:25: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:07:9D:56:1A:3E:67:3F:CB:76:54:4A:E8:50:FE:75:6E:5D:3F:7A X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/vgedVho-Zz_LdlRK6FD-dW5dP3o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.94.0/24 Signature Algorithm: sha256WithRSAEncryption 06:ab:e3:2c:0f:37:9a:7b:92:54:52:ed:01:29:f6:fb:62:00: e7:4a:df:5e:7a:23:4e:9a:2c:03:1d:98:53:71:84:59:ed:f0: 2b:f8:a2:3e:75:5b:12:c6:84:0e:a0:58:71:75:49:52:d0:44: af:23:93:47:ba:44:7e:f3:89:bd:d8:47:e6:ad:3d:c6:d7:6b: 58:a5:dc:bd:35:64:06:f9:9e:a4:d2:1f:46:ea:d5:04:4a:5e: 8b:be:2b:21:72:01:75:98:b2:de:72:5a:89:59:5a:7b:39:5c: dd:22:72:21:98:46:17:be:25:2d:9a:8f:c4:b8:16:24:f5:c9: 25:22:ca:5b:6e:d9:d0:da:a3:fd:a7:73:5a:61:17:aa:7f:e7: d3:c9:74:4d:e8:93:6b:4a:ef:5e:0f:1f:84:40:ba:9d:88:94: 88:b9:f7:92:9f:b8:6a:b9:2b:3b:ec:67:46:41:12:ce:a2:f0: f5:29:9c:16:4c:7e:4d:64:f8:55:7e:0c:a1:cb:d0:14:dc:f5: c1:2a:d4:63:f5:98:5a:3b:de:93:7c:a5:ff:25:8d:f2:fb:86: f1:63:b0:46:b1:7a:62:ec:92:46:c6:9f:67:57:23:e4:8b:0e: 22:e0:6a:cf:e0:75:56:7f:e8:e5:b3:ae:a7:32:9f:be:0e:b4: af:bf:47:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTEwMjQx MDI3MTBaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJFMDc5RDU2MUEzRTY3 M0ZDQjc2NTQ0QUU4NTBGRTc1NkU1RDNGN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0W3e66/K7PcEKjrGDtz9weinjBGFoViQi5iSOo3aiOMHBESIy sWOPLgNGslipljX+WYBwU9zRr3ABfa4SXGLZ2awiE+zvM5YQ6sbeaxir0dvI5SbO T5b3/K7aiv+zPXJbKBXBPmzp56FiUBqtQ5DpBYdI+PRJVQbii4nXZcM7xTUKl4io f5l43E09uWDn7r/7Fu9sHyyvINycNXDq24QGiPJb7ziM0CzlRG1WCKtR1ctoDWkE 9/D75Y2kT5/ya/43c0uzC7yWQevZnAiM9xj+XB7mdzAySEjt2nZyjzs8VsT2T7+r kzFMUy/yhnL9r6nFgCmqpqdLE8QTdN+YJdN5AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUvgedVho+Zz/LdlRK6FD+dW5dP3owHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC92Z2VkVmhvLVp6X0xkbFJLNkZELWRXNWRQM28u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAmf5eMA0GCSqGSIb3DQEBCwUAA4IBAQAGq+MsDzeae5JUUu0BKfb7 YgDnSt9eeiNOmiwDHZhTcYRZ7fAr+KI+dVsSxoQOoFhxdUlS0ESvI5NHukR+84m9 2EfmrT3G12tYpdy9NWQG+Z6k0h9G6tUESl6LvishcgF1mLLeclqJWVp7OVzdInIh mEYXviUtmo/EuBYk9cklIspbbtnQ2qP9p3NaYReqf+fTyXRN6JNrSu9eDx+EQLqd iJSIufeSn7hquSs77GdGQRLOovD1KZwWTH5NZPhVfgyhy9AU3PXBKtRj9ZhaO96T fKX/JY3y+4bxY7BGsXpi7JJGxp9nVyPkiw4i4GrP4HVWf+jls66nMp++DrSvv0cb -----END CERTIFICATE-----Generated at Wed Nov 5 03:46:27 2025 by rpki-client