$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/zKr7E12n2KBsDg0nhx787RhG1AA.roa File: zKr7E12n2KBsDg0nhx787RhG1AA.roa (raw, json) Hash identifier: 0Smj0Iiflfe8LKLBQ9/mm/EPksx3cHRuxlzFasQCles= Subject key identifier: CC:AA:FB:13:5D:A7:D8:A0:6C:0E:0D:27:87:1E:FC:ED:18:46:D4:00 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: D2 Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/zKr7E12n2KBsDg0nhx787RhG1AA.roa Signing time: Sat 01 Nov 2025 01:38:07 +0000 ROA not before: Sat 01 Nov 2025 01:38:07 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Nov 1 01:38:07 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=CCAAFB135DA7D8A06C0E0D27871EFCED1846D400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:19:ba:41:62:f3:ab:4e:7e:a2:88:88:34: fe:cd:4a:ca:05:80:3c:90:24:3e:91:48:9d:79:dd: 6c:a0:53:a8:d1:69:02:1d:cd:64:10:ee:54:95:78: 3d:a1:c1:82:d0:4f:12:71:fd:69:27:0f:1b:2f:f7: 70:b8:2a:7f:fc:63:d7:5f:74:e6:29:7c:2f:88:de: 1f:1c:a3:17:ca:d8:b8:57:b0:90:ac:5d:66:eb:75: ec:f5:06:f1:7b:c0:00:c5:41:11:7c:85:f6:ba:e4: a0:d8:2f:73:b3:10:cf:3b:14:b4:1a:44:10:41:ef: a6:19:88:9f:73:37:e2:de:0b:c2:b3:52:b6:da:6b: 06:74:49:92:e7:44:e8:58:7d:99:c4:da:91:7d:04: 0c:05:fe:10:6a:e9:a8:01:7c:f7:54:1b:0b:2e:0a: 5f:45:94:4b:dc:1d:a3:a6:d6:c9:36:d3:b7:7a:ae: 57:c5:80:5a:45:3a:c9:09:97:65:84:70:ff:5a:b0: dd:63:51:cb:58:4c:2f:41:0d:51:9a:5b:6c:b3:03: 50:a0:54:9a:38:ca:cf:ae:0f:c0:26:87:8e:53:d7: ed:60:99:e5:b8:27:b2:ca:44:b0:cd:ee:c5:14:fd: 69:ca:1d:94:87:5c:03:b5:0f:6b:1e:d1:c6:3c:71: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AA:FB:13:5D:A7:D8:A0:6C:0E:0D:27:87:1E:FC:ED:18:46:D4:00 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/zKr7E12n2KBsDg0nhx787RhG1AA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.96.0/19 Signature Algorithm: sha256WithRSAEncryption 9e:2a:65:b8:28:f3:f3:a2:35:9e:9d:2c:e9:f7:4d:8a:fb:be: a3:28:58:1a:d1:a1:94:57:b6:c4:17:8f:7f:ed:42:6f:c4:f1: bf:93:fd:dc:b6:1f:a1:0b:81:b8:1f:6c:17:3f:c8:13:02:b0: 7a:d6:3e:32:59:34:df:2d:bc:76:25:62:48:d2:c4:71:c0:b2: 16:4e:d9:9e:cf:e6:43:37:1f:5f:21:94:69:29:51:44:35:44: 65:db:15:19:0c:60:c1:57:79:8c:d5:6f:90:43:50:3b:a9:e2: 1e:1d:f1:63:79:27:75:a7:fa:b2:f8:4e:d7:75:93:fb:2a:b4: 36:f0:9c:25:5f:74:ff:9d:30:1c:8e:fc:b2:ed:a4:c1:0a:61: e6:61:f4:78:84:2a:63:d9:6f:2d:72:a9:b1:c3:98:78:bd:55: 1b:3a:45:fe:ab:d8:1b:10:a9:d1:aa:01:71:4f:7b:8e:f3:48: 0b:dd:62:75:ba:37:c7:bf:bf:0e:9f:83:24:5b:9b:37:cc:2b: e7:76:75:6b:06:fc:cb:bf:42:1b:11:b9:33:4f:60:1e:5e:f6: 9c:78:93:3f:90:18:e0:28:fe:c8:41:fb:2e:4e:4e:c2:3b:90: 4e:2a:c1:c6:e3:38:72:96:5a:9a:e3:8b:da:f3:ed:4b:12:dc: 2c:7d:4c:6c -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICANIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNTExMDEw MTM4MDdaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENDQUFGQjEzNURBN0Q4 QTA2QzBFMEQyNzg3MUVGQ0VEMTg0NkQ0MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfWxm6QWLzq05+ooiINP7NSsoFgDyQJD6RSJ153WygU6jRaQId zWQQ7lSVeD2hwYLQTxJx/WknDxsv93C4Kn/8Y9dfdOYpfC+I3h8coxfK2LhXsJCs XWbrdez1BvF7wADFQRF8hfa65KDYL3OzEM87FLQaRBBB76YZiJ9zN+LeC8KzUrba awZ0SZLnROhYfZnE2pF9BAwF/hBq6agBfPdUGwsuCl9FlEvcHaOm1sk207d6rlfF gFpFOskJl2WEcP9asN1jUctYTC9BDVGaW2yzA1CgVJo4ys+uD8Amh45T1+1gmeW4 J7LKRLDN7sUU/WnKHZSHXAO1D2se0cY8cYvTAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUzKr7E12n2KBsDg0nhx787RhG1AAwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yOS96S3I3RTEybjJLQnNEZzBuaHg3ODdSaEcxQUEucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFoPhgMA0GCSqGSIb3DQEBCwUAA4IBAQCeKmW4KPPzojWenSzp902K+76jKFga 0aGUV7bEF49/7UJvxPG/k/3cth+hC4G4H2wXP8gTArB61j4yWTTfLbx2JWJI0sRx wLIWTtmez+ZDNx9fIZRpKVFENURl2xUZDGDBV3mM1W+QQ1A7qeIeHfFjeSd1p/qy +E7XdZP7KrQ28JwlX3T/nTAcjvyy7aTBCmHmYfR4hCpj2W8tcqmxw5h4vVUbOkX+ q9gbEKnRqgFxT3uO80gL3WJ1ujfHv78On4MkW5s3zCvndnVrBvzLv0IbEbkzT2Ae XvaceJM/kBjgKP7IQfsuTk7CO5BOKsHG4zhyllqa44va8+1LEtwsfUxs -----END CERTIFICATE-----Generated at Wed Nov 5 19:09:10 2025 by rpki-client