$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ItIbZfdMz6mZURYPzrx-8ZFn7Z8.roa File: ItIbZfdMz6mZURYPzrx-8ZFn7Z8.roa (raw, json) Hash identifier: XfxTa6sJf8q+zAJRR7Wjr4PHoZvv7wnpAFBY6IuQdII= Subject key identifier: 22:D2:1B:65:F7:4C:CF:A9:99:51:16:0F:CE:BC:7E:F1:91:67:ED:9F Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: BA Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ItIbZfdMz6mZURYPzrx-8ZFn7Z8.roa Signing time: Sat 01 Nov 2025 01:32:32 +0000 ROA not before: Sat 01 Nov 2025 01:32:32 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2514 IP address blocks: 157.120.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 19:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Nov 1 01:32:32 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=22D21B65F74CCFA99951160FCEBC7EF19167ED9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:06:97:71:33:76:cb:14:01:d0:d4:d0:77:de: 22:1b:cf:90:58:4c:98:a7:b4:c9:ad:54:68:e8:a7: 48:1f:ab:f4:a4:07:5e:40:2c:5b:32:3a:ad:fb:4a: 42:a3:f4:93:f1:7f:da:f9:82:54:d0:49:c4:cc:29: 1e:d8:88:a0:ad:87:7a:97:72:89:f9:bd:b6:95:69: d2:4e:03:b4:82:da:34:b0:ce:f8:95:c7:e2:13:b1: 57:2c:a6:45:65:20:a1:2a:01:a3:6c:5a:4d:14:96: fb:1e:ee:15:cb:15:c5:72:29:e6:14:57:9c:3e:78: 7a:e4:7a:4e:53:8b:24:df:70:70:13:0b:3b:0c:6d: d8:e6:ea:25:99:f1:bb:6a:f9:8a:c6:b7:e3:41:1d: ab:52:a4:f0:67:bb:d4:3e:7e:e0:af:0c:d6:82:e4: ab:ea:29:54:8c:7a:6f:32:3f:52:67:71:ff:e0:00: f2:e9:3b:91:d5:62:e6:2f:56:97:b2:3d:bd:aa:ef: f6:07:e4:0a:c5:7f:09:1e:1d:49:1c:e4:56:40:00: 09:d2:1d:b3:8b:be:66:59:05:81:fd:af:17:df:19: 85:39:8b:05:10:de:84:79:1f:0b:cb:28:ec:93:ec: f4:f5:23:0a:0d:3c:18:d1:9a:62:55:13:94:ac:8c: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:1B:65:F7:4C:CF:A9:99:51:16:0F:CE:BC:7E:F1:91:67:ED:9F X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ItIbZfdMz6mZURYPzrx-8ZFn7Z8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.120.0.0/18 Signature Algorithm: sha256WithRSAEncryption 49:42:ce:81:80:4b:56:78:4f:09:7c:51:87:e0:af:04:dc:6a: ee:6b:93:7d:15:59:19:3a:e9:22:f8:31:cf:5c:22:8d:77:d4: 7b:2e:6a:9e:a2:ea:7b:2c:ed:47:3c:a8:7e:7a:9a:3e:33:d6: 2c:89:a2:08:0c:d0:04:8a:35:9b:4a:a5:4c:d7:c8:65:b5:4e: f4:b3:f7:9a:40:a8:ab:f8:71:7c:91:39:78:9f:90:18:e2:02: ab:57:e1:e1:bc:09:fd:00:2e:77:32:41:a8:6f:8a:91:10:44: 95:a4:3c:cc:50:3b:a7:e5:41:25:43:93:83:0f:74:88:19:be: c5:dc:9d:11:12:05:30:94:ca:f3:52:09:22:33:74:a5:ca:3e: 59:03:a7:ec:ea:bc:60:bd:2b:ee:d8:f9:6b:dd:fc:0a:ac:34: 23:bb:c6:61:de:71:ea:99:86:d0:e7:00:c1:c3:6f:63:15:a2: 4c:b5:c2:80:32:3b:f6:37:a7:4b:8a:63:aa:b0:0b:e6:a7:85: 25:2a:8b:61:50:dc:65:36:4c:11:d1:ea:34:c3:ce:8a:97:a6: 26:0f:b9:fa:ea:a4:33:d1:c1:e3:35:0a:ea:9c:ae:40:c0:7f: c7:8f:34:68:25:72:ca:71:b3:69:8b:5f:4c:2c:1f:c1:d7:fa: 4a:61:6c:52 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICALowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTExMDEw MTMyMzJaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyRDIxQjY1Rjc0Q0NG QTk5OTUxMTYwRkNFQkM3RUYxOTE2N0VEOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzBpdxM3bLFAHQ1NB33iIbz5BYTJintMmtVGjop0gfq/SkB15A LFsyOq37SkKj9JPxf9r5glTQScTMKR7YiKCth3qXcon5vbaVadJOA7SC2jSwzviV x+ITsVcspkVlIKEqAaNsWk0Ulvse7hXLFcVyKeYUV5w+eHrkek5TiyTfcHATCzsM bdjm6iWZ8btq+YrGt+NBHatSpPBnu9Q+fuCvDNaC5KvqKVSMem8yP1Jncf/gAPLp O5HVYuYvVpeyPb2q7/YH5ArFfwkeHUkc5FZAAAnSHbOLvmZZBYH9rxffGYU5iwUQ 3oR5HwvLKOyT7PT1IwoNPBjRmmJVE5SsjPlnAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUItIbZfdMz6mZURYPzrx+8ZFn7Z8wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yOS9JdEliWmZkTXo2bVpVUllQenJ4LThaRm43Wjgucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQGnXgAMA0GCSqGSIb3DQEBCwUAA4IBAQBJQs6BgEtWeE8JfFGH4K8E3Grua5N9 FVkZOuki+DHPXCKNd9R7Lmqeoup7LO1HPKh+epo+M9YsiaIIDNAEijWbSqVM18hl tU70s/eaQKir+HF8kTl4n5AY4gKrV+HhvAn9AC53MkGob4qREESVpDzMUDun5UEl Q5ODD3SIGb7F3J0REgUwlMrzUgkiM3Slyj5ZA6fs6rxgvSvu2Plr3fwKrDQju8Zh 3nHqmYbQ5wDBw29jFaJMtcKAMjv2N6dLimOqsAvmp4UlKothUNxlNkwR0eo0w86K l6YmD7n66qQz0cHjNQrqnK5AwH/HjzRoJXLKcbNpi19MLB/B1/pKYWxS -----END CERTIFICATE-----Generated at Wed Nov 5 20:27:08 2025 by rpki-client