$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/iPSkQHrrrdc3JPU-Y0PBbZN43rQ.roa File: iPSkQHrrrdc3JPU-Y0PBbZN43rQ.roa (raw, json) Hash identifier: u9ZykbE9wL3uxGAiguGnoPt6zFcwdzhtzjhryTXdFSY= Subject key identifier: 88:F4:A4:40:7A:EB:AD:D7:37:24:F5:3E:63:43:C1:6D:93:78:DE:B4 Certificate issuer: /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D Certificate serial: 26 Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/iPSkQHrrrdc3JPU-Y0PBbZN43rQ.roa Signing time: Sat 01 Nov 2025 01:33:09 +0000 ROA not before: Sat 01 Nov 2025 01:33:09 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 7511 IP address blocks: 202.79.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D Validity Not Before: Nov 1 01:33:09 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=88F4A4407AEBADD73724F53E6343C16D9378DEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:6f:04:84:75:61:60:32:54:04:82:ca:ec: 7c:c5:4f:86:fd:69:15:21:38:42:0d:32:bc:74:a6: 3d:27:7a:e1:f9:56:2f:38:5a:c0:03:43:2f:52:f0: 9d:e9:89:4b:0c:b3:0e:03:08:55:e2:92:67:74:05: 02:a6:36:e1:19:d3:d4:b8:b8:f8:45:06:63:a1:c1: e4:68:a4:c9:b2:4a:c7:12:63:f0:bc:67:20:c3:ad: a4:74:33:ce:ad:1f:fb:d2:76:73:b2:3d:ed:ed:60: 1c:39:29:ff:0e:cc:f6:67:b0:c5:30:4d:36:b7:31: cd:a7:e0:76:f8:55:70:fc:77:6c:5d:b5:87:85:b0: f0:f5:bc:b9:28:98:f0:79:ce:6d:14:f1:cf:18:1f: d1:63:8d:f4:e9:32:f4:23:49:40:ed:6f:de:8d:1c: 31:43:46:6f:29:ee:22:a6:0d:4c:f7:e1:34:86:62: c1:3d:2e:93:02:67:e0:96:75:38:66:9c:c6:53:85: 38:69:4c:55:07:1c:9a:de:73:77:74:9f:c8:07:6f: 92:6c:99:cb:45:32:d5:4d:03:3e:cb:1f:24:96:b0: e1:d2:b4:33:6b:f5:de:d7:5c:0d:b2:f0:a8:51:45: ba:46:07:9f:f9:fd:88:b9:db:d8:d1:7c:4e:a1:6d: da:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F4:A4:40:7A:EB:AD:D7:37:24:F5:3E:63:43:C1:6D:93:78:DE:B4 X509v3 Authority Key Identifier: keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/iPSkQHrrrdc3JPU-Y0PBbZN43rQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.79.0.0/22 Signature Algorithm: sha256WithRSAEncryption d1:1d:1a:ac:56:7b:1a:e5:88:40:13:a8:bc:ff:c6:cd:49:b1: 65:a2:67:34:61:71:18:53:0f:ae:1d:a0:2c:0c:c4:88:83:13: 5b:c0:28:21:d1:57:db:da:1f:93:f1:65:36:d1:db:2c:dd:d4: e1:b3:8a:9a:ce:60:36:a4:bd:a0:56:e0:18:a8:78:02:78:d1: 19:68:98:8d:67:a6:1f:3e:06:0c:c6:04:ff:46:a9:fe:f3:ac: be:58:3c:fc:e3:08:c8:e6:35:19:de:e4:36:19:2d:a1:eb:7e: 0b:63:52:c9:50:99:61:e7:12:8d:ae:9d:da:39:1d:76:2b:6b: 24:0f:d7:9c:71:85:1d:8c:e4:e5:cd:5c:9c:69:0e:7e:97:c5: c6:ac:88:54:b0:99:0a:52:60:76:bd:b5:60:d5:96:2e:c9:fe: 36:90:4c:60:76:d4:17:f4:4a:4e:91:e1:3a:82:77:0a:bc:f3: ac:53:4d:a4:af:3e:ea:b4:74:ef:91:b9:a7:d1:45:2e:a6:ab: 74:b5:9b:75:f0:c0:93:d6:ba:74:72:2f:ee:6b:ed:0a:2f:28: cd:34:2c:0b:55:1b:70:21:7e:17:9d:a6:0e:74:39:d3:05:e4: 55:d9:b4:ae:51:50:aa:03:ef:e0:6a:a3:89:3e:f6:c1:c1:6c: 95:aa:81:1a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyREQz RkQ2OEJENzc0Q0Y5QzJCOTlENjcwQURBOUNBRDlGOTYzQTVEMB4XDTI1MTEwMTAx MzMwOVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODhGNEE0NDA3QUVCQURE NzM3MjRGNTNFNjM0M0MxNkQ5Mzc4REVCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALMVbwSEdWFgMlQEgsrsfMVPhv1pFSE4Qg0yvHSmPSd64flWLzha wANDL1LwnemJSwyzDgMIVeKSZ3QFAqY24RnT1Li4+EUGY6HB5GikybJKxxJj8Lxn IMOtpHQzzq0f+9J2c7I97e1gHDkp/w7M9mewxTBNNrcxzafgdvhVcPx3bF21h4Ww 8PW8uSiY8HnObRTxzxgf0WON9Oky9CNJQO1v3o0cMUNGbynuIqYNTPfhNIZiwT0u kwJn4JZ1OGacxlOFOGlMVQccmt5zd3SfyAdvkmyZy0Uy1U0DPssfJJaw4dK0M2v1 3tdcDbLwqFFFukYHn/n9iLnb2NF8TqFt2rcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSI9KRAeuut1zck9T5jQ8Ftk3jetDAfBgNVHSMEGDAWgBQt0/1ovXdM+cK5nWcK 2pytn5Y6XTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjk0L0xkUDlhTDEzVFBuQ3VaMW5DdHFjclotV09sMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0xkUDlhTDEzVFBuQ3VaMW5DdHFjclot V09sMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82OTQvaVBTa1FIcnJyZGMzSlBVLVkwUEJiWk40M3JRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAspPADANBgkqhkiG9w0BAQsFAAOCAQEA0R0arFZ7GuWIQBOovP/GzUmxZaJn NGFxGFMPrh2gLAzEiIMTW8AoIdFX29ofk/FlNtHbLN3U4bOKms5gNqS9oFbgGKh4 AnjRGWiYjWemHz4GDMYE/0ap/vOsvlg8/OMIyOY1Gd7kNhktoet+C2NSyVCZYecS ja6d2jkdditrJA/XnHGFHYzk5c1cnGkOfpfFxqyIVLCZClJgdr21YNWWLsn+NpBM YHbUF/RKTpHhOoJ3CrzzrFNNpK8+6rR075G5p9FFLqardLWbdfDAk9a6dHIv7mvt Ci8ozTQsC1UbcCF+F52mDnQ50wXkVdm0rlFQqgPv4GqjiT72wcFslaqBGg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:58:12 2025 by rpki-client