$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/sQk4jm_9hwC8VLKzUYrAyNfy4wQ.roa File: sQk4jm_9hwC8VLKzUYrAyNfy4wQ.roa (raw, json) Hash identifier: VCzvw4q3hnpoEHVQw+7A+oxqn3qyrEcKyEPFbXeaHvw= Subject key identifier: B1:09:38:8E:6F:FD:87:00:BC:54:B2:B3:51:8A:C0:C8:D7:F2:E3:04 Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Certificate serial: D6 Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/sQk4jm_9hwC8VLKzUYrAyNfy4wQ.roa Signing time: Sat 01 Nov 2025 01:29:15 +0000 ROA not before: Sat 01 Nov 2025 01:29:15 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 9351 IP address blocks: 203.133.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2 Validity Not Before: Nov 1 01:29:15 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=B109388E6FFD8700BC54B2B3518AC0C8D7F2E304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:41:53:55:11:db:d5:9b:01:a3:f8:d5:d1:8d: f0:6f:b4:12:00:07:b7:9d:78:9a:bf:63:2f:96:01: 81:c6:5b:e9:b8:38:46:15:ca:a1:16:35:a1:51:1d: a5:d9:07:25:af:3b:d4:aa:d3:b4:ae:e4:06:70:b5: b8:97:a6:96:14:af:eb:3b:fc:29:80:d3:0f:b2:55: 90:1f:bf:ef:33:f0:e2:7c:e2:79:3d:12:a8:b2:0e: 29:75:01:76:66:62:ff:80:fe:54:74:e9:0a:3d:52: ec:5d:5b:7c:ca:3c:60:ba:99:95:c9:e0:e9:0e:d2: 3a:cb:78:e8:d6:b0:f6:6f:92:67:50:b7:e3:a3:77: 68:15:91:21:56:32:44:44:74:97:d9:4e:a6:82:eb: 86:6a:93:c4:3d:28:2d:c5:28:9b:ac:21:9a:5f:f2: 4f:05:5d:f1:df:c8:a6:b2:b2:a9:9f:37:3f:d9:ee: 38:34:22:4e:29:09:64:a4:60:99:17:ef:26:12:32: d6:9f:0e:58:43:ce:8d:5d:2c:f3:77:41:ba:92:ea: 12:e3:eb:31:ef:d7:82:d2:b1:d9:b1:72:a0:c9:a7: 10:1a:70:d7:78:47:fc:7c:5c:2d:2f:6d:be:64:07: ca:3d:5b:07:de:59:29:3b:98:4d:70:20:8a:0a:b5: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:09:38:8E:6F:FD:87:00:BC:54:B2:B3:51:8A:C0:C8:D7:F2:E3:04 X509v3 Authority Key Identifier: keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/sQk4jm_9hwC8VLKzUYrAyNfy4wQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.133.128.0/19 Signature Algorithm: sha256WithRSAEncryption 86:2b:42:b1:c9:23:c8:eb:0d:4b:a0:88:d4:fd:26:a9:31:ac: e6:e2:44:de:ca:bc:f4:4a:4a:02:ac:1e:18:eb:0b:94:9e:82: 3c:df:a6:43:d0:37:55:40:b0:7c:3a:47:63:21:d6:df:74:f4: b1:62:9d:d4:e5:6e:07:57:16:95:86:18:cb:56:cd:24:a5:7f: 01:4b:13:72:22:86:1b:51:05:b8:22:6e:5e:a5:40:7c:6e:14: 50:2b:9f:d3:58:fa:b7:2c:f7:27:28:6d:99:ef:66:96:3b:1a: 30:03:f0:89:b6:1f:69:58:16:98:bf:bb:c4:e2:a8:0e:00:5a: ae:bb:f0:83:2a:ee:e5:0b:25:5c:4f:eb:d0:2b:74:e4:db:83: 6f:90:f1:cc:ef:be:64:b6:37:4d:19:9b:7c:ab:66:2e:89:3e: 7d:6f:f4:0d:ab:ab:a4:69:ed:ee:f4:16:ca:28:ae:7c:50:db: 80:a1:f6:32:50:f0:74:81:ed:1f:30:d6:31:4c:c1:4f:18:bb: 01:51:a1:ac:40:e0:e4:af:49:d3:24:21:dc:d1:a7:0d:ff:1a: 08:e7:7b:27:db:12:53:86:b0:22:3f:ad:f9:5a:f3:50:d5:80: 70:4b:06:94:55:72:0e:ba:a3:85:7b:1b:e6:6c:02:a1:09:cb: cf:26:c0:dd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNTExMDEw MTI5MTVaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxMDkzODhFNkZGRDg3 MDBCQzU0QjJCMzUxOEFDMEM4RDdGMkUzMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrQVNVEdvVmwGj+NXRjfBvtBIAB7edeJq/Yy+WAYHGW+m4OEYV yqEWNaFRHaXZByWvO9Sq07Su5AZwtbiXppYUr+s7/CmA0w+yVZAfv+8z8OJ84nk9 EqiyDil1AXZmYv+A/lR06Qo9UuxdW3zKPGC6mZXJ4OkO0jrLeOjWsPZvkmdQt+Oj d2gVkSFWMkREdJfZTqaC64Zqk8Q9KC3FKJusIZpf8k8FXfHfyKaysqmfNz/Z7jg0 Ik4pCWSkYJkX7yYSMtafDlhDzo1dLPN3QbqS6hLj6zHv14LSsdmxcqDJpxAacNd4 R/x8XC0vbb5kB8o9WwfeWSk7mE1wIIoKtRULAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsQk4jm/9hwC8VLKzUYrAyNfy4wQwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM0L3NRazRqbV85aHdDOFZMS3pVWXJBeU5meTR3US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXLhYAwDQYJKoZIhvcNAQELBQADggEBAIYrQrHJI8jrDUugiNT9JqkxrObi RN7KvPRKSgKsHhjrC5SegjzfpkPQN1VAsHw6R2Mh1t909LFindTlbgdXFpWGGMtW zSSlfwFLE3IihhtRBbgibl6lQHxuFFArn9NY+rcs9ycobZnvZpY7GjAD8Im2H2lY Fpi/u8TiqA4AWq678IMq7uULJVxP69ArdOTbg2+Q8czvvmS2N00Zm3yrZi6JPn1v 9A2rq6Rp7e70FsoornxQ24Ch9jJQ8HSB7R8w1jFMwU8YuwFRoaxA4OSvSdMkIdzR pw3/GgjneyfbElOGsCI/rfla81DVgHBLBpRVcg66o4V7G+ZsAqEJy88mwN0= -----END CERTIFICATE-----Generated at Wed Nov 5 19:58:09 2025 by rpki-client