$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/-QVqp3M6EtDVUC-eq4_DkRlP4bY.roa File: -QVqp3M6EtDVUC-eq4_DkRlP4bY.roa (raw, json) Hash identifier: Hy6DFCvhOza/9RQYS+P6kjjaPSIM+dpIqNNm70MUbFA= Subject key identifier: F9:05:6A:A7:73:3A:12:D0:D5:50:2F:9E:AB:8F:C3:91:19:4F:E1:B6 Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554 Certificate serial: 4B Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/-QVqp3M6EtDVUC-eq4_DkRlP4bY.roa Signing time: Thu 01 May 2025 01:32:51 +0000 ROA not before: Thu 01 May 2025 01:32:51 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131934 IP address blocks: 118.27.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D79B3890C2DA3795148976B954C2024056797554 Validity Not Before: May 1 01:32:51 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=F9056AA7733A12D0D5502F9EAB8FC391194FE1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:e8:09:23:78:64:8c:04:0f:bc:3e:58:05: 52:69:5e:d4:be:a4:73:64:d0:33:e8:16:ea:c1:b4: bf:72:aa:f2:04:59:2a:94:3e:85:fd:a4:5b:d8:d2: d5:d2:ce:91:d4:56:b4:e4:47:8a:15:dd:d5:01:40: 8b:94:61:ce:db:3d:f0:4a:5a:f0:ce:dd:32:c4:ee: 9b:e9:3d:3d:e5:f2:51:f0:64:bd:3f:8e:2c:73:e7: c3:fd:86:8a:ca:a7:33:5f:5e:1f:d6:cf:ea:d6:89: 64:ec:db:6d:c8:ec:5a:ad:f4:9f:d6:1c:97:a7:12: 02:de:cd:a4:68:36:07:30:98:20:61:33:0b:08:82: cd:6c:47:30:8e:fc:1d:55:21:53:ff:05:f2:af:c9: 64:2e:d5:1d:2c:0b:ea:50:a8:97:e5:2e:10:a9:ae: c7:24:b6:d1:87:7c:a2:78:f1:be:be:d7:62:f4:9d: bf:52:9c:f1:9f:27:be:1d:cb:7d:90:e0:94:26:36: fc:14:89:d1:03:45:59:43:c0:90:dc:7b:c0:a2:57: e4:39:67:5b:50:c7:28:33:93:6c:d1:b4:fd:ef:a4: 12:ef:e4:42:0c:56:99:9b:38:9a:19:09:d4:aa:67: 15:34:90:9c:9a:e2:14:7d:00:ed:e8:f5:12:54:73: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:05:6A:A7:73:3A:12:D0:D5:50:2F:9E:AB:8F:C3:91:19:4F:E1:B6 X509v3 Authority Key Identifier: keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/-QVqp3M6EtDVUC-eq4_DkRlP4bY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.27.240.0/20 Signature Algorithm: sha256WithRSAEncryption 12:71:ca:ff:37:5e:6f:10:70:ab:79:ff:b5:10:89:e8:bc:b2: ca:ba:df:c7:99:2c:68:0f:7d:4f:76:bc:d1:f6:85:f8:bb:05: 61:4a:aa:84:31:0c:47:f9:ea:d4:4c:87:63:e7:b3:b6:06:93: e9:2a:df:c1:96:51:02:26:74:87:a0:4f:d7:05:88:da:b1:62: 91:ff:f5:46:c4:49:40:35:f3:f8:a9:db:4b:08:fd:62:76:ed: 02:c6:6d:4c:17:2e:1a:3c:4f:4f:92:0f:be:83:31:ed:33:e6: 8f:8d:df:48:e9:0d:bb:18:3e:bc:20:4d:c1:3e:f6:06:1d:5c: dc:f7:8f:c2:ec:4f:d5:16:4d:03:23:2b:c1:67:3f:9f:ed:b7: 6a:cd:5e:18:26:5c:ad:02:76:e9:d3:7c:70:8e:b2:bf:24:67: cc:93:9f:cf:7e:e2:01:f0:79:ed:fb:93:c9:23:15:81:40:fd: c2:74:c6:60:be:04:2b:7d:98:b0:f3:55:fe:2f:ee:cf:e4:9b: 15:6e:fd:e3:85:81:07:89:a2:a5:9a:c7:27:15:6a:e6:9d:9d: d6:b0:62:62:9d:4c:ce:70:8f:61:ca:79:1a:8a:cc:d5:28:3b: ac:7b:b6:81:a7:47:ff:45:ee:e8:96:65:fb:ab:4c:b0:b6:04: e8:ee:f1:26 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTI1MDUwMTAx MzI1MVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRjkwNTZBQTc3MzNBMTJE MEQ1NTAyRjlFQUI4RkMzOTExOTRGRTFCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+96AkjeGSMBA+8PlgFUmle1L6kc2TQM+gW6sG0v3Kq8gRZKpQ+ hf2kW9jS1dLOkdRWtORHihXd1QFAi5Rhzts98Epa8M7dMsTum+k9PeXyUfBkvT+O LHPnw/2GisqnM19eH9bP6taJZOzbbcjsWq30n9Ycl6cSAt7NpGg2BzCYIGEzCwiC zWxHMI78HVUhU/8F8q/JZC7VHSwL6lCol+UuEKmuxyS20Yd8onjxvr7XYvSdv1Kc 8Z8nvh3LfZDglCY2/BSJ0QNFWUPAkNx7wKJX5DlnW1DHKDOTbNG0/e+kEu/kQgxW mZs4mhkJ1KpnFTSQnJriFH0A7ej1ElRzSzECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBT5BWqnczoS0NVQL56rj8ORGU/htjAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NDAvLVFWcXAzTTZFdERWVUMtZXE0X0RrUmxQNGJZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHYb8DANBgkqhkiG9w0BAQsFAAOCAQEAEnHK/zdebxBwq3n/tRCJ6Lyyyrrf x5ksaA99T3a80faF+LsFYUqqhDEMR/nq1EyHY+eztgaT6SrfwZZRAiZ0h6BP1wWI 2rFikf/1RsRJQDXz+KnbSwj9YnbtAsZtTBcuGjxPT5IPvoMx7TPmj43fSOkNuxg+ vCBNwT72Bh1c3PePwuxP1RZNAyMrwWc/n+23as1eGCZcrQJ26dN8cI6yvyRnzJOf z37iAfB57fuTySMVgUD9wnTGYL4EK32YsPNV/i/uz+SbFW7944WBB4mipZrHJxVq 5p2d1rBiYp1MznCPYcp5GorM1Sg7rHu2gadH/0Xu6JZl+6tMsLYE6O7xJg== -----END CERTIFICATE-----Generated at Wed Nov 5 18:38:17 2025 by rpki-client