$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/VQsqUyPfiE0m0vG5D5Ufp3v6Sec.roa File: VQsqUyPfiE0m0vG5D5Ufp3v6Sec.roa (raw, json) Hash identifier: mCmDTuLmVzQ6QEm6K/TNPSUl+lK4D/CBoSPNENaRrm8= Subject key identifier: 55:0B:2A:53:23:DF:88:4D:26:D2:F1:B9:0F:95:1F:A7:7B:FA:49:E7 Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Certificate serial: D4 Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/VQsqUyPfiE0m0vG5D5Ufp3v6Sec.roa Signing time: Sat 01 Nov 2025 01:32:56 +0000 ROA not before: Sat 01 Nov 2025 01:32:56 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 4685 IP address blocks: 202.213.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Validity Not Before: Nov 1 01:32:56 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=550B2A5323DF884D26D2F1B90F951FA77BFA49E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:05:7b:1f:09:9e:9e:93:8d:75:52:a5:4d: be:f2:57:e2:d5:8b:33:a8:01:65:5b:61:ea:0f:2f: 4b:92:5e:0f:de:72:fc:07:bc:d8:f5:64:a5:7b:cc: 3c:82:2d:64:e7:f3:31:38:1f:4b:84:7f:4a:c8:a6: 1f:94:93:69:83:41:a1:72:c8:57:92:ff:86:d4:4f: 9a:5b:5c:61:ff:11:d9:4b:bc:56:3b:1d:de:00:d4: 7f:10:8f:3a:a1:ae:81:c5:38:84:63:a4:90:19:28: 23:8d:bc:46:bd:3e:85:4e:85:da:43:62:b8:09:34: 96:c8:3a:f0:d2:f2:59:d5:24:92:f4:c3:ca:8b:9d: be:b3:52:31:e1:90:94:3b:ac:b0:23:4e:69:83:7f: 39:42:2a:28:a5:0d:f6:4f:4e:d5:55:1f:a1:2e:f6: e9:fa:f5:09:89:61:5d:a9:0f:86:41:4b:d1:5c:94: 92:47:a7:1d:ea:4e:50:14:2f:aa:1c:c5:70:60:fc: ea:69:a6:5b:f7:21:7d:59:80:4e:00:08:80:ea:ba: 2a:e2:42:73:5f:2e:9a:72:d5:d0:6f:45:e7:5f:2c: ee:d6:fa:42:01:62:57:fd:bc:15:87:63:f4:06:c3: 51:f1:3d:1c:94:51:37:4b:0e:7f:8f:a5:04:73:4a: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0B:2A:53:23:DF:88:4D:26:D2:F1:B9:0F:95:1F:A7:7B:FA:49:E7 X509v3 Authority Key Identifier: keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/VQsqUyPfiE0m0vG5D5Ufp3v6Sec.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.213.128.0/19 Signature Algorithm: sha256WithRSAEncryption 37:0d:b2:e4:66:95:1d:42:55:eb:fe:34:0c:db:3d:6d:49:6f: de:26:d7:d6:07:df:c4:1d:3e:b6:22:45:36:ea:16:0c:87:f9: 84:02:49:9d:a0:8a:e5:83:fa:43:bf:f3:ae:7d:fb:50:5d:35: a3:84:92:48:9c:3a:4b:5b:37:a3:24:c8:63:4e:67:39:9b:4f: ba:8a:cd:15:4e:0a:4b:96:df:4e:5a:d8:c4:e0:27:08:a6:42: 31:16:c4:34:fb:04:f2:1e:09:72:58:a2:1d:59:33:bf:fc:ab: 35:d9:e1:23:6b:88:f2:06:63:24:ee:07:cb:43:f9:1d:57:67: b0:9b:e4:1c:68:39:d6:43:92:f8:5d:02:ab:bf:e2:bd:9a:a9: 90:a7:30:b3:22:a1:7c:ff:33:ce:34:e4:1c:50:91:de:97:53: 80:f9:e5:ad:bc:3a:e2:ab:f7:db:fc:b2:4c:d5:6b:64:dd:c4: 20:77:6c:e6:5c:1c:a7:d7:4c:4f:5f:5d:3b:cf:5f:3c:8e:95: b3:4c:26:ff:7a:3b:ec:96:c3:c7:c5:ae:7d:20:0c:3f:f5:61: 20:f8:7b:fa:9d:99:d8:e2:e3:14:67:cc:d0:79:ca:4f:5b:16: 9a:7c:f8:00:38:dd:21:41:39:07:75:8f:fd:32:73:27:4b:26: ff:5f:ca:14 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICANQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTExMDEw MTMyNTZaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU1MEIyQTUzMjNERjg4 NEQyNkQyRjFCOTBGOTUxRkE3N0JGQTQ5RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBvAV7HwmenpONdVKlTb7yV+LVizOoAWVbYeoPL0uSXg/ecvwH vNj1ZKV7zDyCLWTn8zE4H0uEf0rIph+Uk2mDQaFyyFeS/4bUT5pbXGH/EdlLvFY7 Hd4A1H8QjzqhroHFOIRjpJAZKCONvEa9PoVOhdpDYrgJNJbIOvDS8lnVJJL0w8qL nb6zUjHhkJQ7rLAjTmmDfzlCKiilDfZPTtVVH6Eu9un69QmJYV2pD4ZBS9FclJJH px3qTlAUL6ocxXBg/Oppplv3IX1ZgE4ACIDquiriQnNfLppy1dBvRedfLO7W+kIB Ylf9vBWHY/QGw1HxPRyUUTdLDn+PpQRzSjEpAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUVQsqUyPfiE0m0vG5D5Ufp3v6SecwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51 FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MC9WUXNxVXlQZmlFMG0wdkc1RDVVZnAzdjZTZWMucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFytWAMA0GCSqGSIb3DQEBCwUAA4IBAQA3DbLkZpUdQlXr/jQM2z1tSW/eJtfW B9/EHT62IkU26hYMh/mEAkmdoIrlg/pDv/OufftQXTWjhJJInDpLWzejJMhjTmc5 m0+6is0VTgpLlt9OWtjE4CcIpkIxFsQ0+wTyHglyWKIdWTO//Ks12eEja4jyBmMk 7gfLQ/kdV2ewm+QcaDnWQ5L4XQKrv+K9mqmQpzCzIqF8/zPONOQcUJHel1OA+eWt vDriq/fb/LJM1Wtk3cQgd2zmXByn10xPX107z188jpWzTCb/ejvslsPHxa59IAw/ 9WEg+Hv6nZnY4uMUZ8zQecpPWxaafPgAON0hQTkHdY/9MnMnSyb/X8oU -----END CERTIFICATE-----Generated at Wed Nov 5 23:54:48 2025 by rpki-client