$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/ff8ac2XzBBiqHZumsPvA1OW9uro.roa File: ff8ac2XzBBiqHZumsPvA1OW9uro.roa (raw, json) Hash identifier: omsLZEnD7HMJGoieFW5Q65QvQMJBlN+HugX9CnXCPMY= Subject key identifier: 7D:FF:1A:73:65:F3:04:18:AA:1D:9B:A6:B0:FB:C0:D4:E5:BD:BA:BA Certificate issuer: /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063 Certificate serial: 19 Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/ff8ac2XzBBiqHZumsPvA1OW9uro.roa Signing time: Wed 07 May 2025 06:22:33 +0000 ROA not before: Wed 07 May 2025 06:22:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131960 IP address blocks: 122.102.56.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063 Validity Not Before: May 7 06:22:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=7DFF1A7365F30418AA1D9BA6B0FBC0D4E5BDBABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:9b:51:f7:03:0a:20:69:13:e8:d7:7d:51: fd:31:86:89:1d:82:37:5d:90:3b:06:fa:46:6a:1b: b0:22:28:5d:4d:a8:98:5a:47:22:16:0e:e0:0c:82: a2:5c:a6:68:6b:36:c6:d2:44:97:55:6e:d9:f8:81: 7d:3c:92:2b:7e:a3:bb:b7:b7:45:3c:46:c2:85:88: a6:9c:4c:a8:fc:6e:20:b6:27:02:af:91:99:03:03: f0:5c:24:71:2f:ff:f7:17:12:30:9e:b4:d4:a0:de: 0a:5a:fa:f1:d9:3a:11:97:65:a1:38:4c:d8:6d:07: f7:65:f6:ca:c8:51:1e:a1:1a:cb:35:c7:ad:75:12: 68:ac:77:32:9c:9f:e0:b4:ed:65:ba:e5:9e:05:ad: a1:92:cb:31:f4:36:2e:d8:d6:a8:72:dc:0c:3a:4e: 1e:f7:42:b0:a6:d6:2d:24:b7:fd:fb:51:43:a5:f9: dd:67:80:11:8d:1b:64:60:6d:f0:a2:77:76:f8:bb: cc:36:4c:d6:0f:47:0b:6b:dc:7d:3b:f2:bc:d8:81: eb:70:43:fe:49:a9:a8:9b:81:53:97:64:68:b5:46: 74:4e:29:30:d5:f1:c2:76:f5:5a:36:b2:ea:41:ae: 72:8b:64:5a:3b:f3:08:b9:48:b7:bf:3f:98:b3:b6: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FF:1A:73:65:F3:04:18:AA:1D:9B:A6:B0:FB:C0:D4:E5:BD:BA:BA X509v3 Authority Key Identifier: keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/ff8ac2XzBBiqHZumsPvA1OW9uro.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.102.56.0/21 Signature Algorithm: sha256WithRSAEncryption cd:24:79:b1:2a:eb:59:61:ce:4e:47:5e:0d:e6:01:93:2a:61: 3c:aa:7d:37:e2:c9:ac:46:12:6c:85:02:dd:87:0e:6d:2b:06: 34:ef:4c:ee:5d:97:b6:e7:d6:d4:65:dc:a7:32:88:15:2c:d0: e4:58:35:8d:bc:8c:ca:fb:78:69:13:c9:11:23:f4:46:00:fa: 7d:e1:0c:dc:bf:09:36:5c:71:43:80:e4:a5:2a:7f:c7:2e:56: 94:a1:11:0f:90:4c:b3:92:d2:3d:0a:8c:50:54:f6:8d:c2:e9: 9b:9c:09:4e:29:85:5a:fb:48:31:3b:95:3b:94:f8:e2:03:60: 7e:1c:1d:d2:2b:a8:7e:79:31:b1:c9:0d:0f:ff:e5:7e:a2:4c: 9b:dd:44:c7:d1:c0:ac:18:17:54:1c:0a:1f:4f:02:c0:4d:f3: 26:d3:c5:83:ce:3b:77:38:dc:62:c7:6b:94:7e:a2:59:af:b2: 42:93:b8:10:2e:be:eb:25:78:9a:07:af:a5:b3:18:8a:b5:2c: 23:af:06:79:60:60:9d:b0:d6:74:d3:05:d2:5a:84:c7:52:37: a0:61:be:32:07:dc:ce:cd:28:7e:8d:ff:ec:4a:35:95:a1:24: 70:84:00:bb:fd:32:b3:d2:d5:8f:d6:d6:4b:ae:77:0d:f1:5b: 75:02:81:60 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDJB OUE2NTJCODdDOTY5NTdDOURBRkQ2RkZBRTcyNDQxODhFMDYzMB4XDTI1MDUwNzA2 MjIzM1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoN0RGRjFBNzM2NUYzMDQx OEFBMUQ5QkE2QjBGQkMwRDRFNUJEQkFCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMVMm1H3AwogaRPo131R/TGGiR2CN12QOwb6RmobsCIoXU2omFpH IhYO4AyColymaGs2xtJEl1Vu2fiBfTySK36ju7e3RTxGwoWIppxMqPxuILYnAq+R mQMD8FwkcS//9xcSMJ601KDeClr68dk6EZdloThM2G0H92X2yshRHqEayzXHrXUS aKx3Mpyf4LTtZbrlngWtoZLLMfQ2LtjWqHLcDDpOHvdCsKbWLSS3/ftRQ6X53WeA EY0bZGBt8KJ3dvi7zDZM1g9HC2vcfTvyvNiB63BD/kmpqJuBU5dkaLVGdE4pMNXx wnb1Wjay6kGucotkWjvzCLlIt78/mLO2IbsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBR9/xpzZfMEGKodm6aw+8DU5b26ujAfBgNVHSMEGDAWgBTQKpplK4fJaVfJ2v1v +uckQYjgYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMzQvMENxYVpTdUh5V2xYeWRyOWJfcm5KRUdJNEdNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMENxYVpTdUh5V2xYeWRyOWJfcm5K RUdJNEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTM0L2ZmOGFjMlh6QkJpcUhadW1zUHZBMU9XOXVyby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAN6ZjgwDQYJKoZIhvcNAQELBQADggEBAM0kebEq61lhzk5HXg3mAZMq YTyqfTfiyaxGEmyFAt2HDm0rBjTvTO5dl7bn1tRl3KcyiBUs0ORYNY28jMr7eGkT yREj9EYA+n3hDNy/CTZccUOA5KUqf8cuVpShEQ+QTLOS0j0KjFBU9o3C6ZucCU4p hVr7SDE7lTuU+OIDYH4cHdIrqH55MbHJDQ//5X6iTJvdRMfRwKwYF1QcCh9PAsBN 8ybTxYPOO3c43GLHa5R+olmvskKTuBAuvusleJoHr6WzGIq1LCOvBnlgYJ2w1nTT BdJahMdSN6BhvjIH3M7NKH6N/+xKNZWhJHCEALv9MrPS1Y/W1kuudw3xW3UCgWA= -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:50 2025 by rpki-client