$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/rLBquink9VsRT-uwa7QWwjPvPls.roa File: rLBquink9VsRT-uwa7QWwjPvPls.roa (raw, json) Hash identifier: plzJf/NOqQwLejq3UcQGiy72dV58pWHI/vyDhiAWDSw= Subject key identifier: AC:B0:6A:BA:29:E4:F5:5B:11:4F:EB:B0:6B:B4:16:C2:33:EF:3E:5B Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 3F Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/rLBquink9VsRT-uwa7QWwjPvPls.roa Signing time: Tue 01 Jul 2025 01:31:49 +0000 ROA not before: Tue 01 Jul 2025 01:31:49 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 24259 IP address blocks: 124.110.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Jul 1 01:31:49 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=ACB06ABA29E4F55B114FEBB06BB416C233EF3E5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:51:c9:23:cc:6a:d3:64:fd:93:1e:a4:58: dc:be:db:fb:1b:8a:ea:0e:27:9f:2a:7e:4d:4f:6a: 2e:eb:06:a9:11:69:0a:63:b2:ea:a9:89:14:af:6c: 83:3c:99:44:f4:93:ec:a0:b5:f9:8b:94:81:33:e0: 54:35:cb:df:b6:fa:65:c9:40:f5:ba:95:09:05:0c: 61:aa:d8:6f:7e:79:02:34:f2:a9:d6:5d:d2:90:d8: db:25:a9:ab:e6:36:ad:77:fb:e3:c6:99:0c:ba:73: f3:25:a9:e1:df:20:ef:bd:22:1b:95:46:83:2b:42: 25:1d:5b:70:ec:d9:57:28:c6:44:b6:c5:14:ea:d9: 10:e6:4a:9b:b5:6a:46:0d:5a:dc:43:1d:2b:62:27: 08:7a:b9:86:64:3a:59:67:3c:12:04:8e:84:49:5e: 91:b5:d1:51:06:fd:53:9d:1a:9e:5a:b1:27:46:bc: 8f:87:44:6e:ae:92:8a:98:1e:15:57:7a:58:85:e0: ac:f6:38:e7:9c:b5:3c:4f:ea:ec:f1:79:52:8d:f5: 8e:d4:6e:e4:0e:bc:14:ea:44:4c:b0:e9:64:30:da: 4f:3c:b0:d3:1e:cb:a3:a0:af:ad:68:02:e6:fe:6f: b5:da:08:03:2b:d7:d4:6c:10:af:7c:d2:9a:63:ba: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B0:6A:BA:29:E4:F5:5B:11:4F:EB:B0:6B:B4:16:C2:33:EF:3E:5B X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/rLBquink9VsRT-uwa7QWwjPvPls.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.110.192.0/21 Signature Algorithm: sha256WithRSAEncryption 98:0c:08:ff:9f:6e:a7:f4:33:00:c2:ef:9d:79:b3:d3:e2:dc: 26:4d:75:26:a3:24:8c:c9:77:a9:60:07:cd:da:b9:77:dc:bb: c0:82:8a:62:c1:78:df:f1:90:f3:74:a3:65:b3:cc:d4:19:f6: f3:aa:b9:fb:d8:d1:36:1e:5d:b7:4d:c6:25:d1:09:46:79:7f: 97:ea:3e:d6:73:a2:7d:11:24:5a:72:dd:02:25:f9:57:29:ae: 40:dd:37:23:f8:8d:19:bb:90:4c:e0:55:12:ca:c9:7a:7d:0a: 3f:0f:ec:4b:95:20:ed:8f:a8:bc:92:72:4e:e5:b6:2f:5f:a4: f7:f8:8b:e0:24:d7:7e:34:d7:ff:5b:82:05:08:f8:e5:66:87: b0:76:3e:7e:e3:61:26:29:aa:a7:2a:4b:f7:95:1b:76:da:91: b4:77:50:5b:58:41:9c:32:02:a7:d3:5b:5e:e2:42:6f:32:9a: a7:b1:36:81:2f:c0:aa:d3:4c:5d:13:6e:4d:8e:c4:9e:4d:22: de:69:33:94:50:9a:69:8b:26:7e:1b:7e:df:de:57:ee:bb:fc: 75:50:65:83:1f:f5:7a:f7:fb:9b:1f:c6:12:55:e2:c2:e6:01: 7b:e3:d6:52:dc:02:c0:12:a5:2e:42:d2:da:f5:6b:f2:05:85: 60:30:c1:57 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI1MDcwMTAx MzE0OVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQUNCMDZBQkEyOUU0RjU1 QjExNEZFQkIwNkJCNDE2QzIzM0VGM0U1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMK6UckjzGrTZP2THqRY3L7b+xuK6g4nnyp+TU9qLusGqRFpCmOy 6qmJFK9sgzyZRPST7KC1+YuUgTPgVDXL37b6ZclA9bqVCQUMYarYb355AjTyqdZd 0pDY2yWpq+Y2rXf748aZDLpz8yWp4d8g770iG5VGgytCJR1bcOzZVyjGRLbFFOrZ EOZKm7VqRg1a3EMdK2InCHq5hmQ6WWc8EgSOhElekbXRUQb9U50anlqxJ0a8j4dE bq6SipgeFVd6WIXgrPY455y1PE/q7PF5Uo31jtRu5A68FOpETLDpZDDaTzyw0x7L o6CvrWgC5v5vtdoIAyvX1GwQr3zSmmO6v+8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSssGq6KeT1WxFP67BrtBbCM+8+WzAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvckxCcXVpbms5VnNSVC11d2E3UVd3alB2UGxzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3xuwDANBgkqhkiG9w0BAQsFAAOCAQEAmAwI/59up/QzAMLvnXmz0+LcJk11 JqMkjMl3qWAHzdq5d9y7wIKKYsF43/GQ83SjZbPM1Bn286q5+9jRNh5dt03GJdEJ Rnl/l+o+1nOifREkWnLdAiX5VymuQN03I/iNGbuQTOBVEsrJen0KPw/sS5Ug7Y+o vJJyTuW2L1+k9/iL4CTXfjTX/1uCBQj45WaHsHY+fuNhJimqpypL95UbdtqRtHdQ W1hBnDICp9NbXuJCbzKap7E2gS/AqtNMXRNuTY7Enk0i3mkzlFCaaYsmfht+395X 7rv8dVBlgx/1evf7mx/GElXiwuYBe+PWUtwCwBKlLkLS2vVr8gWFYDDBVw== -----END CERTIFICATE-----Generated at Thu Nov 6 02:57:26 2025 by rpki-client