$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/yM45QwTZqQrGi_lD0Xvtc0oQ5t0.roa File: yM45QwTZqQrGi_lD0Xvtc0oQ5t0.roa (raw, json) Hash identifier: nW40kPzsusBbVZwAXyga6KXe8RZ52ruCC+LOZqiu9rk= Subject key identifier: C8:CE:39:43:04:D9:A9:0A:C6:8B:F9:43:D1:7B:ED:73:4A:10:E6:DD Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: E5 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/yM45QwTZqQrGi_lD0Xvtc0oQ5t0.roa Signing time: Fri 24 Oct 2025 10:27:11 +0000 ROA not before: Fri 24 Oct 2025 10:27:11 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 23918 IP address blocks: 153.254.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Oct 24 10:27:11 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=C8CE394304D9A90AC68BF943D17BED734A10E6DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f5:5d:f3:ad:bc:55:d7:d1:9b:50:10:ee:96: 14:87:81:e9:3c:29:c1:97:c3:40:ba:58:6e:e4:0c: 63:26:ac:9a:1c:f6:5c:5b:22:86:a3:bf:bd:db:d3: c3:ab:3b:f5:88:e8:d2:f2:dd:48:36:5c:f8:da:6d: 83:bf:f6:09:b6:0f:26:3b:d7:ed:21:38:59:4f:9f: 4f:f8:7e:55:f5:57:ef:50:b3:15:9e:21:bf:c0:a2: a8:6d:42:fa:6a:67:2c:b9:48:3c:a9:4a:de:18:5c: da:45:4d:59:42:98:77:53:7f:ad:1d:53:94:90:b9: dd:e2:e3:fe:1b:c7:59:14:7d:08:de:2d:16:3c:8f: b1:1b:fb:68:1c:20:7e:d2:83:59:4f:73:3c:f9:66: 6e:e3:9b:e2:72:26:4c:24:4d:9f:b4:11:40:71:46: 9d:4b:d7:1c:58:0a:f8:ab:b2:41:8b:3a:25:79:c3: ca:72:d0:5c:df:7b:83:b8:1a:21:c3:2b:e7:26:7c: 36:1a:21:50:be:f3:b3:7b:09:e1:7a:ca:3d:2b:41: 54:53:28:48:8c:2a:4b:8c:2d:8c:5c:1b:62:1f:12: db:5e:20:8b:87:eb:05:72:9f:be:ce:a6:1a:73:d7: 00:2b:05:f1:06:63:da:9b:99:71:dc:34:08:17:42: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CE:39:43:04:D9:A9:0A:C6:8B:F9:43:D1:7B:ED:73:4A:10:E6:DD X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/yM45QwTZqQrGi_lD0Xvtc0oQ5t0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.254.95.0/24 Signature Algorithm: sha256WithRSAEncryption 77:96:2f:3d:2f:91:64:15:be:bd:d4:7a:78:1a:71:d7:f5:a6: 79:4a:77:f3:11:68:5e:92:f0:2d:ff:77:e0:d3:90:4b:e0:f4: 22:68:44:89:86:aa:06:4c:33:5f:9d:77:5c:2b:92:47:bc:97: 6d:e7:f1:80:57:9e:c5:b9:4f:61:f7:6f:22:eb:08:f2:5d:f5: c3:86:1b:64:52:d9:16:01:5a:9b:bf:d5:2b:28:5b:f9:a3:06: 2e:d6:e4:46:64:fb:9c:04:fd:ba:0f:32:b7:c8:26:b3:67:c3: 92:66:77:ac:50:08:13:1e:20:e2:a7:b2:2f:9c:78:88:0c:30: 1f:c7:33:57:dd:64:be:e4:05:86:f5:f4:b8:12:9c:a6:bc:60: 54:e5:e7:d2:73:b6:1e:1b:e7:5e:f2:1e:89:d2:0f:16:1a:0b: ad:82:66:28:46:13:49:4f:76:ca:da:95:34:7f:16:7d:b5:50: 5a:1d:12:75:b2:46:73:c6:6e:9e:a2:15:68:1b:4e:30:ec:60: 15:02:1c:30:67:b6:df:77:bb:49:5e:ec:03:d5:57:c5:e1:a6: 64:ee:e8:f5:eb:38:12:41:52:bd:db:ec:ba:2d:ea:30:1b:c9: e8:04:64:0b:f5:fe:46:d4:97:e5:de:94:e3:bd:3f:98:b7:41: 5d:db:a7:b5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTEwMjQx MDI3MTFaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4Q0UzOTQzMDREOUE5 MEFDNjhCRjk0M0QxN0JFRDczNEExMEU2REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP9V3zrbxV19GbUBDulhSHgek8KcGXw0C6WG7kDGMmrJoc9lxb Ioajv73b08OrO/WI6NLy3Ug2XPjabYO/9gm2DyY71+0hOFlPn0/4flX1V+9QsxWe Ib/AoqhtQvpqZyy5SDypSt4YXNpFTVlCmHdTf60dU5SQud3i4/4bx1kUfQjeLRY8 j7Eb+2gcIH7Sg1lPczz5Zm7jm+JyJkwkTZ+0EUBxRp1L1xxYCvirskGLOiV5w8py 0Fzfe4O4GiHDK+cmfDYaIVC+87N7CeF6yj0rQVRTKEiMKkuMLYxcG2IfEtteIIuH 6wVyn77Ophpz1wArBfEGY9qbmXHcNAgXQgd3AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUyM45QwTZqQrGi/lD0Xvtc0oQ5t0wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC95TTQ1UXdUWnFRckdpX2xEMFh2dGMwb1E1dDAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAmf5fMA0GCSqGSIb3DQEBCwUAA4IBAQB3li89L5FkFb691Hp4GnHX 9aZ5SnfzEWhekvAt/3fg05BL4PQiaESJhqoGTDNfnXdcK5JHvJdt5/GAV57FuU9h 928i6wjyXfXDhhtkUtkWAVqbv9UrKFv5owYu1uRGZPucBP26DzK3yCazZ8OSZnes UAgTHiDip7IvnHiIDDAfxzNX3WS+5AWG9fS4EpymvGBU5efSc7YeG+de8h6J0g8W GgutgmYoRhNJT3bK2pU0fxZ9tVBaHRJ1skZzxm6eohVoG04w7GAVAhwwZ7bfd7tJ XuwD1VfF4aZk7uj16zgSQVK92+y6LeowG8noBGQL9f5G1Jfl3pTjvT+Yt0Fd26e1 -----END CERTIFICATE-----Generated at Wed Nov 5 03:46:22 2025 by rpki-client