$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/jk5rP9RHw7czhgnFbhZ1Gdo1mNA.roa File: jk5rP9RHw7czhgnFbhZ1Gdo1mNA.roa (raw, json) Hash identifier: 7uGX7eadlNNcBK4EZuEa/0b58ad0P5vdKxO69DdLHNM= Subject key identifier: 8E:4E:6B:3F:D4:47:C3:B7:33:86:09:C5:6E:16:75:19:DA:35:98:D0 Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 7F Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/jk5rP9RHw7czhgnFbhZ1Gdo1mNA.roa Signing time: Sat 01 Nov 2025 01:28:27 +0000 ROA not before: Sat 01 Nov 2025 01:28:27 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 10019 IP address blocks: 218.185.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Nov 1 01:28:27 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=8E4E6B3FD447C3B7338609C56E167519DA3598D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:b1:28:c0:cf:eb:67:4e:4f:fd:56:43:ab: 8c:70:66:7b:0f:87:84:0a:3e:64:57:9f:1b:3c:4c: fc:cf:2c:9c:7a:e2:5e:2c:0f:35:77:dc:af:01:35: c6:da:50:bf:c9:ee:f2:62:f2:4f:8c:eb:c2:3e:21: 02:ad:02:b7:a4:a3:5a:c1:f1:f2:b8:94:e1:00:e5: 29:f2:a2:37:72:f4:f0:a8:53:4a:9a:8d:9c:f2:44: e1:23:9d:58:16:f2:39:cd:88:93:b9:ae:c7:26:e1: 0e:d8:e3:cc:22:34:5d:08:94:f1:5d:e1:fc:41:b2: 42:be:5a:fd:c6:1f:28:a9:e6:b7:1c:60:ca:e5:d9: 64:fb:a3:3a:06:1f:a2:0d:92:35:95:b2:13:6e:c9: 44:fb:94:4f:00:31:a8:13:6d:e4:ca:72:93:5b:e4: 6c:76:cd:28:0b:ef:3c:1f:4b:5d:15:e0:0e:da:7f: 58:49:c2:64:ed:03:63:38:85:92:ff:f4:77:f4:5f: 76:06:2d:3a:a4:cd:f4:a1:c6:0a:bb:d6:49:9f:da: f9:51:8c:03:ec:7e:e7:5b:fd:6e:07:f2:af:bb:cc: c1:c3:9c:19:4a:73:a0:06:6e:34:d3:2c:23:e5:a4: 99:31:7b:91:c9:8d:2a:ee:79:25:88:5a:da:72:5c: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4E:6B:3F:D4:47:C3:B7:33:86:09:C5:6E:16:75:19:DA:35:98:D0 X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/jk5rP9RHw7czhgnFbhZ1Gdo1mNA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.185.160.0/19 Signature Algorithm: sha256WithRSAEncryption 26:ed:1e:9a:99:8a:c3:2a:df:8e:03:c6:27:48:88:10:7d:d7: 79:1d:13:32:a1:a5:7c:04:bc:bf:bf:de:15:31:8e:93:aa:6b: f5:73:9b:3f:4f:82:84:4b:76:cb:e3:ae:72:bc:dd:37:d0:4a: c0:d3:93:54:94:ce:e9:76:fe:d9:6a:4a:a4:a9:fb:8b:35:0d: 49:4b:a9:c0:ef:b3:9f:84:ae:3e:6f:f6:52:df:20:3d:d7:2c: a2:6d:a8:a8:2b:9d:74:e0:77:43:94:fe:e4:77:36:9e:dc:16: 3e:84:b5:11:7f:2f:88:bb:09:a9:70:31:c2:1b:d2:5d:eb:98: 72:94:46:ee:8a:7e:2b:e8:d0:ef:c6:51:8c:09:bb:a1:6d:28: 61:12:6b:88:06:7b:ca:59:5c:cb:b3:1f:00:6c:ad:02:66:ba: 5a:2f:2b:d3:5a:30:09:c8:15:e3:d5:13:03:61:75:83:df:9a: fe:63:45:a9:df:32:00:71:23:91:ad:13:b4:d6:d5:01:c0:c3: a3:6d:e2:ab:97:4d:c9:9a:0d:10:1e:70:6f:f7:b3:d6:db:36: 8d:b1:13:32:4f:1d:a5:ab:cb:ae:12:9d:86:ca:cd:28:1f:6f: 0c:a0:57:ad:ce:c3:e6:ab:76:ee:d7:48:cd:15:eb:4b:c5:fa: cc:4b:d6:fd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzkx N0IyMzA3NDUyNEU5RTZFQThFNDBGQTRBMDY3MkM5NjIwMzE4MB4XDTI1MTEwMTAx MjgyN1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoOEU0RTZCM0ZENDQ3QzNC NzMzODYwOUM1NkUxNjc1MTlEQTM1OThEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALzlsSjAz+tnTk/9VkOrjHBmew+HhAo+ZFefGzxM/M8snHriXiwP NXfcrwE1xtpQv8nu8mLyT4zrwj4hAq0Ct6SjWsHx8riU4QDlKfKiN3L08KhTSpqN nPJE4SOdWBbyOc2Ik7muxybhDtjjzCI0XQiU8V3h/EGyQr5a/cYfKKnmtxxgyuXZ ZPujOgYfog2SNZWyE27JRPuUTwAxqBNt5Mpyk1vkbHbNKAvvPB9LXRXgDtp/WEnC ZO0DYziFkv/0d/RfdgYtOqTN9KHGCrvWSZ/a+VGMA+x+51v9bgfyr7vMwcOcGUpz oAZuNNMsI+WkmTF7kcmNKu55JYha2nJcJ/UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSOTms/1EfDtzOGCcVuFnUZ2jWY0DAfBgNVHSMEGDAWgBRDkXsjB0Uk6ebqjkD6 SgZyyWIDGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDYyL1E1RjdJd2RGSk9ubTZvNUEta29HY3NsaUF4Zy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1E1RjdJd2RGSk9ubTZvNUEta29HY3Ns aUF4Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjIvams1clA5Ukh3N2N6aGduRmJoWjFHZG8xbU5BLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdq5oDANBgkqhkiG9w0BAQsFAAOCAQEAJu0empmKwyrfjgPGJ0iIEH3XeR0T MqGlfAS8v7/eFTGOk6pr9XObP0+ChEt2y+OucrzdN9BKwNOTVJTO6Xb+2WpKpKn7 izUNSUupwO+zn4SuPm/2Ut8gPdcsom2oqCuddOB3Q5T+5Hc2ntwWPoS1EX8viLsJ qXAxwhvSXeuYcpRG7op+K+jQ78ZRjAm7oW0oYRJriAZ7yllcy7MfAGytAma6Wi8r 01owCcgV49UTA2F1g9+a/mNFqd8yAHEjka0TtNbVAcDDo23iq5dNyZoNEB5wb/ez 1ts2jbETMk8dpavLrhKdhsrNKB9vDKBXrc7D5qt27tdIzRXrS8X6zEvW/Q== -----END CERTIFICATE-----Generated at Wed Nov 5 19:59:36 2025 by rpki-client