$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20272/hgsEAABflMswgRDkB8IALAt47rw.roa File: hgsEAABflMswgRDkB8IALAt47rw.roa (raw, json) Hash identifier: GkG7JclL40OpNQmRu9XgC8zL97JQ64dBEILPibOxhSQ= Subject key identifier: 86:0B:04:00:00:5F:94:CB:30:81:10:E4:07:C2:00:2C:0B:78:EE:BC Certificate issuer: /CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7 Certificate serial: 14 Authority key identifier: AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/hgsEAABflMswgRDkB8IALAt47rw.roa Signing time: Sat 01 Nov 2025 01:35:57 +0000 ROA not before: Sat 01 Nov 2025 01:35:57 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 45681 IP address blocks: 160.191.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7 Validity Not Before: Nov 1 01:35:57 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=860B0400005F94CB308110E407C2002C0B78EEBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:8e:e1:9a:92:23:fc:55:ae:ca:9a:3b:c0: 3d:83:5f:5d:33:6f:f2:6a:3e:cc:76:e4:4a:44:32: 6d:8e:58:e4:fd:05:27:94:9d:a9:9e:fb:6b:60:1b: ad:d3:49:4c:f9:2f:f3:26:49:c1:b8:89:78:ab:07: c2:c3:b1:e2:ad:26:12:dd:ef:c8:40:00:23:dd:2f: 45:a4:93:64:34:70:68:fb:c8:79:e9:4d:63:c0:80: ed:6b:8f:80:e0:58:3a:8d:49:e3:1c:75:fb:fb:97: a1:0e:b6:e8:6b:99:49:9f:3e:7b:e1:26:00:0b:6e: e8:fe:58:1e:3d:b3:d2:09:04:73:6f:3e:36:2c:61: 47:f1:88:59:b1:a2:dd:4f:dc:e3:ad:47:d0:1f:7e: 62:cf:fa:f6:f6:4d:00:b4:d3:4a:d6:0d:1f:cc:fc: 29:6c:3b:bf:f2:47:bb:13:cf:1e:5b:6d:fc:e9:2b: c1:44:34:17:86:42:a2:7f:b6:17:04:bb:8d:d2:07: fd:15:70:1b:28:9c:b2:15:35:78:30:c4:31:58:56: 5a:49:0c:d9:b8:04:5a:28:11:8c:21:ae:93:21:ec: 75:86:19:c5:aa:27:c9:3e:8b:f0:18:25:e4:a8:e1: a0:cb:32:79:e0:3f:db:dd:18:d4:9d:16:07:31:e3: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0B:04:00:00:5F:94:CB:30:81:10:E4:07:C2:00:2C:0B:78:EE:BC X509v3 Authority Key Identifier: keyid:AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/hgsEAABflMswgRDkB8IALAt47rw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.142.0/23 Signature Algorithm: sha256WithRSAEncryption aa:95:a6:92:70:32:62:c3:c4:86:43:02:81:8e:e4:0c:05:72: d2:d0:1d:48:72:81:96:d9:09:b5:ec:97:44:d3:09:e8:10:a6: 97:ba:3f:38:00:7d:6c:e2:b8:7b:a8:a2:a2:28:d1:7e:15:21: a4:21:8f:df:7d:c9:b6:d6:a4:af:92:c8:ab:aa:c0:e9:a9:e8: 8d:03:57:a0:f3:55:d5:f2:cb:8e:c2:a2:6b:b4:66:a3:7c:77: 32:bb:54:03:52:17:cd:be:06:6e:d1:8b:fd:c2:a1:42:36:97: 8d:27:41:e2:cc:66:9b:2a:4e:5a:62:92:81:04:c7:0f:0c:43: 90:4e:37:1b:3a:f2:9d:5d:34:3d:db:16:44:38:9b:ad:70:5d: 9d:12:2b:d7:16:69:a9:c7:68:83:9a:32:db:23:64:32:a4:30: 27:b9:12:02:2d:2c:f0:40:dd:f7:59:c8:40:12:2c:db:18:88: 74:8f:a0:b5:74:48:3f:c6:27:dd:9f:68:ef:c6:e9:ed:1d:be: 38:37:8b:20:e0:1a:1a:e7:5a:ac:35:03:8f:82:57:c1:eb:fa: db:7b:7c:2a:d3:3e:f6:5c:f2:e9:e5:ee:55:7c:0d:f5:17:20: ad:ec:9c:ef:83:64:56:d2:cc:84:bb:00:04:f7:ac:c5:c3:25: 37:40:be:8e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQ0Qz NkU0OTY5OTM1Qzc0QzZGNjk1MjE1ODg4MTZDMkYzRDVGNEI3MB4XDTI1MTEwMTAx MzU1N1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODYwQjA0MDAwMDVGOTRD QjMwODExMEU0MDdDMjAwMkMwQjc4RUVCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMiqjuGakiP8Va7KmjvAPYNfXTNv8mo+zHbkSkQybY5Y5P0FJ5Sd qZ77a2AbrdNJTPkv8yZJwbiJeKsHwsOx4q0mEt3vyEAAI90vRaSTZDRwaPvIeelN Y8CA7WuPgOBYOo1J4xx1+/uXoQ626GuZSZ8+e+EmAAtu6P5YHj2z0gkEc28+Nixh R/GIWbGi3U/c461H0B9+Ys/69vZNALTTStYNH8z8KWw7v/JHuxPPHltt/OkrwUQ0 F4ZCon+2FwS7jdIH/RVwGyicshU1eDDEMVhWWkkM2bgEWigRjCGukyHsdYYZxaon yT6L8Bgl5KjhoMsyeeA/290Y1J0WBzHj0F0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBSGCwQAAF+UyzCBEOQHwgAsC3juvDAfBgNVHSMEGDAWgBSs025JaZNcdMb2lSFY iBbC89X0tzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNzIvck5OdVNXbVRYSFRHOXBVaFdJZ1d3dlBWOUxjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvck5OdVNXbVRYSFRHOXBVaFdJZ1d3 dlBWOUxjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjcyL2hnc0VBQUJmbE1zd2dSRGtCOElBTEF0NDdydy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGgv44wDQYJKoZIhvcNAQELBQADggEBAKqVppJwMmLDxIZDAoGO5AwF ctLQHUhygZbZCbXsl0TTCegQppe6PzgAfWziuHuooqIo0X4VIaQhj999ybbWpK+S yKuqwOmp6I0DV6DzVdXyy47Comu0ZqN8dzK7VANSF82+Bm7Ri/3CoUI2l40nQeLM ZpsqTlpikoEExw8MQ5BONxs68p1dND3bFkQ4m61wXZ0SK9cWaanHaIOaMtsjZDKk MCe5EgItLPBA3fdZyEASLNsYiHSPoLV0SD/GJ92faO/G6e0dvjg3iyDgGhrnWqw1 A4+CV8Hr+tt7fCrTPvZc8unl7lV8DfUXIK3snO+DZFbSzIS7AAT3rMXDJTdAvo4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:06:46 2025 by rpki-client