$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/lFqkr-KsL8ToAl81nDfwsLS6UHo.roa File: lFqkr-KsL8ToAl81nDfwsLS6UHo.roa (raw, json) Hash identifier: H4r2VGC6BwL2TrkdMN5abePqyILOa4jedeKgXKtQeFA= Subject key identifier: 94:5A:A4:AF:E2:AC:2F:C4:E8:02:5F:35:9C:37:F0:B0:B4:BA:50:7A Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: D4 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/lFqkr-KsL8ToAl81nDfwsLS6UHo.roa Signing time: Sat 01 Nov 2025 01:38:08 +0000 ROA not before: Sat 01 Nov 2025 01:38:08 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 19:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Nov 1 01:38:08 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=945AA4AFE2AC2FC4E8025F359C37F0B0B4BA507A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:b9:c1:3d:d4:8d:d4:10:f1:75:54:9e:41: 23:a8:a9:07:d6:bf:3b:c0:24:fb:d0:04:90:e2:ad: 64:91:da:64:19:eb:c4:86:3e:25:4f:56:4a:20:da: f8:20:4f:10:74:3a:d4:87:4e:3d:07:d1:8e:3a:00: dc:df:74:a1:22:4b:ac:ae:08:52:d6:da:31:62:c7: e7:01:92:92:58:eb:4c:e4:cc:b1:52:01:27:ac:a3: b0:d0:36:2f:c5:0c:9e:ed:5c:6a:f9:61:21:b2:1f: 4d:6c:d7:49:27:c8:dd:f6:a5:99:ec:4a:73:47:28: 1f:83:f1:6b:26:1d:4c:33:94:35:48:01:9c:9b:8c: 0f:bd:c1:3b:8b:1a:0d:76:14:69:51:8b:cb:27:71: f2:60:a5:8f:c3:0a:63:ec:0d:2e:27:ed:f4:61:67: 8f:30:cf:0d:72:ec:9c:6d:65:76:39:5a:72:92:97: 88:13:d0:51:53:7b:ec:a3:81:e2:99:68:67:05:b6: 5c:c8:70:58:e3:9b:76:45:7d:9b:77:c6:7d:bd:35: 1c:88:d6:ed:3d:1f:c7:82:d5:46:9e:a4:d6:fb:6e: b2:2c:c0:6a:fd:aa:ea:b7:a4:b2:29:19:ca:af:b2: 0b:1a:ed:a1:73:3e:26:59:7f:de:0c:5c:eb:f5:3a: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5A:A4:AF:E2:AC:2F:C4:E8:02:5F:35:9C:37:F0:B0:B4:BA:50:7A X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/lFqkr-KsL8ToAl81nDfwsLS6UHo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.160.0/20 Signature Algorithm: sha256WithRSAEncryption 0f:8a:1a:08:34:ff:8b:c6:77:35:0c:9b:41:19:af:44:17:16: 1f:fc:d1:ea:6e:97:3d:a9:70:bf:bd:c3:95:40:81:37:7a:5f: 61:d8:dc:57:76:a9:87:0c:e5:34:1b:d1:1a:e4:1b:18:c4:c1: 6c:a2:35:01:6e:b8:6a:89:fe:52:9a:03:56:49:20:1c:14:ec: db:ea:8a:4a:b5:34:f1:0f:93:ac:f1:0d:77:70:7c:09:34:cf: 7d:73:35:eb:f0:8c:78:08:11:67:b5:70:52:5c:56:43:f5:fe: 04:1a:ec:48:aa:0b:69:62:86:fe:73:e8:1f:5a:af:d7:86:10: d9:24:1e:2e:23:83:67:0d:9e:7c:73:37:a0:46:4d:25:29:f5: b0:30:04:3f:c6:d1:ed:59:dd:ac:da:d7:9d:59:2f:be:81:83: c8:a2:63:7d:5d:0e:78:e2:ed:10:4c:43:bb:fa:c1:aa:94:be: 03:71:e9:7b:37:38:6e:fe:81:1b:53:23:39:56:66:64:8c:5c: 46:2d:2d:10:6d:39:3c:a0:2f:de:9d:4a:7c:55:f4:cb:54:56: 35:c0:4a:1a:0d:5d:b8:fa:30:3f:3d:2a:46:b8:0b:2b:fa:82: 1d:00:e7:bd:d8:6e:fb:70:62:b9:89:55:17:3e:67:2c:33:ac: 00:88:d2:dc -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICANQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTExMDEw MTM4MDhaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0NUFBNEFGRTJBQzJG QzRFODAyNUYzNTlDMzdGMEIwQjRCQTUwN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOwbnBPdSN1BDxdVSeQSOoqQfWvzvAJPvQBJDirWSR2mQZ68SG PiVPVkog2vggTxB0OtSHTj0H0Y46ANzfdKEiS6yuCFLW2jFix+cBkpJY60zkzLFS ASeso7DQNi/FDJ7tXGr5YSGyH01s10knyN32pZnsSnNHKB+D8WsmHUwzlDVIAZyb jA+9wTuLGg12FGlRi8sncfJgpY/DCmPsDS4n7fRhZ48wzw1y7JxtZXY5WnKSl4gT 0FFTe+yjgeKZaGcFtlzIcFjjm3ZFfZt3xn29NRyI1u09H8eC1UaepNb7brIswGr9 quq3pLIpGcqvsgsa7aFzPiZZf94MXOv1OlkFAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUlFqkr+KsL8ToAl81nDfwsLS6UHowHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yOS9sRnFrci1Lc0w4VG9BbDgxbkRmd3NMUzZVSG8ucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQEoPigMA0GCSqGSIb3DQEBCwUAA4IBAQAPihoINP+Lxnc1DJtBGa9EFxYf/NHq bpc9qXC/vcOVQIE3el9h2NxXdqmHDOU0G9Ea5BsYxMFsojUBbrhqif5SmgNWSSAc FOzb6opKtTTxD5Os8Q13cHwJNM99czXr8Ix4CBFntXBSXFZD9f4EGuxIqgtpYob+ c+gfWq/XhhDZJB4uI4NnDZ58czegRk0lKfWwMAQ/xtHtWd2s2tedWS++gYPIomN9 XQ544u0QTEO7+sGqlL4Dcel7Nzhu/oEbUyM5VmZkjFxGLS0QbTk8oC/enUp8VfTL VFY1wEoaDV24+jA/PSpGuAsr+oIdAOe92G77cGK5iVUXPmcsM6wAiNLc -----END CERTIFICATE-----Generated at Wed Nov 5 21:47:58 2025 by rpki-client