$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/H8YgCvbGkrdKTPbJXWvgiDbgTKM.roa File: H8YgCvbGkrdKTPbJXWvgiDbgTKM.roa (raw, json) Hash identifier: aEJJ1goGrRRdKLHq7x6JhLhGW7vAPFwlVgUkS9FXEL8= Subject key identifier: 1F:C6:20:0A:F6:C6:92:B7:4A:4C:F6:C9:5D:6B:E0:88:36:E0:4C:A3 Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F Certificate serial: 53 Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/H8YgCvbGkrdKTPbJXWvgiDbgTKM.roa Signing time: Sat 01 Mar 2025 01:30:50 +0000 ROA not before: Sat 01 Mar 2025 01:30:50 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 23818 IP address blocks: 122.200.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F Validity Not Before: Mar 1 01:30:50 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=1FC6200AF6C692B74A4CF6C95D6BE08836E04CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:55:97:fc:1f:f3:ae:67:d3:f8:e8:94:50: 12:ab:90:67:56:5c:37:1e:1b:d9:16:ca:21:1a:3c: 58:a5:ea:b3:a5:fe:b5:1f:5d:78:d9:00:80:b0:62: 1a:34:29:b0:e1:75:17:35:47:fa:b4:4a:ad:02:40: 85:d0:64:aa:1b:e6:b5:10:9f:ec:12:d6:37:79:ab: 35:98:b1:60:70:8b:95:69:87:f8:26:dc:b9:91:29: d6:8f:44:7e:46:c1:30:57:ff:09:6c:23:d2:8b:91: c5:5e:1a:45:89:02:7e:28:53:cb:50:c2:be:74:c9: 0d:79:27:07:72:65:e9:13:68:68:04:ca:b6:25:1e: a3:a5:e3:42:a0:9a:fb:47:ad:36:ad:e5:40:1b:d2: 91:6a:80:60:c6:5e:22:cd:ed:e6:1a:f1:0e:dc:f6: 27:46:98:68:ea:ff:3c:a1:a3:3d:a5:75:f6:c6:df: cb:ef:fa:04:7e:b3:80:79:a0:51:82:2a:a7:6e:11: a5:55:37:89:06:59:36:36:09:d3:b2:c1:cf:f7:c6: 18:03:50:d5:f5:a9:95:d6:19:ea:90:61:f2:0c:fa: 3b:a1:aa:e4:a6:67:b1:8b:79:c7:2a:81:a4:53:8d: 5c:90:e7:22:6a:d0:a2:b4:64:17:9b:cb:33:42:3c: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C6:20:0A:F6:C6:92:B7:4A:4C:F6:C9:5D:6B:E0:88:36:E0:4C:A3 X509v3 Authority Key Identifier: keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/H8YgCvbGkrdKTPbJXWvgiDbgTKM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.200.128.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:1e:7b:93:5d:a1:43:bf:fd:e2:c7:3c:e8:53:9b:c6:cf:19: 8d:e9:96:67:b1:42:a8:68:6a:a5:90:05:07:01:bd:09:71:9d: 8c:87:d8:b0:26:46:dc:42:0b:23:b4:54:c1:47:6a:22:32:b6: a7:f7:97:12:dd:1d:84:f3:75:47:3b:0c:d3:e9:13:88:97:63: f8:c9:f9:26:25:7a:16:d1:bb:ee:3d:36:1b:48:6e:40:6e:7d: 4f:63:bd:54:5e:7b:f8:76:c9:92:1d:1f:72:d6:cf:d8:c0:c8: 18:1b:83:4a:a6:75:e5:fe:a5:af:81:42:87:87:ce:b0:a6:17: fa:11:b6:f4:09:fc:cf:b7:e4:15:52:d5:75:b4:3c:fe:b5:c9: 6b:0b:ca:d9:6a:5f:a3:ac:a2:91:c3:ca:23:89:df:04:7d:79: 6b:66:16:01:65:8e:01:9e:f1:fb:d3:42:10:f4:e3:31:ad:c5: 1c:87:96:be:8d:e3:16:9a:2d:c9:16:62:ce:28:36:90:fa:1e: 12:6f:1b:63:9f:09:e6:fe:99:95:4c:da:7a:3d:3f:1b:0e:81: 7c:6b:7f:bc:9e:92:66:ae:c9:25:1d:ac:e9:a9:9a:4a:20:e2: 9a:15:d0:96:4b:8b:65:04:21:e9:c6:aa:ab:bf:cc:92:60:a4: 01:e1:72:65 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI1MDMwMTAx MzA1MFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMUZDNjIwMEFGNkM2OTJC NzRBNENGNkM5NUQ2QkUwODgzNkUwNENBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK2tVZf8H/OuZ9P46JRQEquQZ1ZcNx4b2RbKIRo8WKXqs6X+tR9d eNkAgLBiGjQpsOF1FzVH+rRKrQJAhdBkqhvmtRCf7BLWN3mrNZixYHCLlWmH+Cbc uZEp1o9EfkbBMFf/CWwj0ouRxV4aRYkCfihTy1DCvnTJDXknB3Jl6RNoaATKtiUe o6XjQqCa+0etNq3lQBvSkWqAYMZeIs3t5hrxDtz2J0aYaOr/PKGjPaV19sbfy+/6 BH6zgHmgUYIqp24RpVU3iQZZNjYJ07LBz/fGGANQ1fWpldYZ6pBh8gz6O6Gq5KZn sYt5xyqBpFONXJDnImrQorRkF5vLM0I8740CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQfxiAK9saSt0pM9slda+CINuBMozAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODMvSDhZZ0N2YkdrcmRLVFBiSlhXdmdpRGJnVEtNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnrIgDANBgkqhkiG9w0BAQsFAAOCAQEAah57k12hQ7/94sc86FObxs8ZjemW Z7FCqGhqpZAFBwG9CXGdjIfYsCZG3EILI7RUwUdqIjK2p/eXEt0dhPN1RzsM0+kT iJdj+Mn5JiV6FtG77j02G0huQG59T2O9VF57+HbJkh0fctbP2MDIGBuDSqZ15f6l r4FCh4fOsKYX+hG29An8z7fkFVLVdbQ8/rXJawvK2Wpfo6yikcPKI4nfBH15a2YW AWWOAZ7x+9NCEPTjMa3FHIeWvo3jFpotyRZizig2kPoeEm8bY58J5v6ZlUzaej0/ Gw6BfGt/vJ6SZq7JJR2s6amaSiDimhXQlkuLZQQh6caqq7/MkmCkAeFyZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:52:21 2025 by rpki-client