$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/yzT6m1cjmzTCNEyi3KNVwHrja1E.roa File: yzT6m1cjmzTCNEyi3KNVwHrja1E.roa (raw, json) Hash identifier: /tIxvsUuHAhlxnE9nM/t/wsdFkma6Iz8QPxEIMc7FRU= Subject key identifier: CB:34:FA:9B:57:23:9B:34:C2:34:4C:A2:DC:A3:55:C0:7A:E3:6B:51 Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Certificate serial: 40 Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/yzT6m1cjmzTCNEyi3KNVwHrja1E.roa Signing time: Fri 31 Jan 2025 01:29:13 +0000 ROA not before: Fri 31 Jan 2025 01:29:13 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 37908 IP address blocks: 122.128.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578 Validity Not Before: Jan 31 01:29:13 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=CB34FA9B57239B34C2344CA2DCA355C07AE36B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:13:75:3b:3b:f4:4a:0b:ab:01:ec:c1:4e: eb:07:2f:ef:14:76:89:41:35:b2:8c:bd:07:c1:01: f4:56:95:f6:5e:4b:e6:7f:15:67:9b:2c:1a:d5:53: 00:95:68:dd:a4:38:73:19:dc:95:77:f5:01:7f:20: 10:9a:06:bb:52:68:33:76:eb:13:20:75:47:a9:df: f9:3d:eb:71:66:19:03:ef:e4:70:08:2b:e2:8d:02: 4c:3f:ba:7d:c3:10:24:99:d2:5f:68:cd:09:22:f4: 44:fd:74:a2:d3:db:97:21:fe:8c:5c:fc:50:3d:0c: 6b:ff:64:3d:7d:ee:a2:98:8c:27:71:78:de:2d:d3: 19:7a:55:4c:a3:b1:12:5d:49:d5:04:68:3f:08:a0: ec:2c:4e:6a:ce:88:2c:9d:5a:98:eb:fc:02:52:00: 74:0b:63:6a:a2:70:d7:57:8c:80:58:fa:48:9d:18: 8f:63:a5:49:0f:2b:57:38:d9:c6:3c:7d:18:48:cc: fa:69:4a:b2:ea:c5:b6:17:ed:44:bf:c4:af:7d:51: b9:55:d6:a2:18:75:bb:6f:bb:2e:99:ec:0f:ca:d2: 79:05:94:36:ed:3b:91:b2:0d:cf:77:03:ba:cf:0a: 17:e6:8a:0a:d0:84:dd:41:54:f4:c2:7b:de:d1:80: 7e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:34:FA:9B:57:23:9B:34:C2:34:4C:A2:DC:A3:55:C0:7A:E3:6B:51 X509v3 Authority Key Identifier: keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/yzT6m1cjmzTCNEyi3KNVwHrja1E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.128.0.0/20 Signature Algorithm: sha256WithRSAEncryption b2:f3:bf:0e:f2:f8:8c:3e:e9:62:ce:23:99:5e:56:57:de:9a: c6:aa:c2:ca:0f:0e:9e:20:1f:11:b2:ee:33:e6:36:4d:46:02: 75:26:42:7e:c9:59:3b:6a:f0:7c:f1:b8:04:93:9f:0d:40:60: 90:8c:39:b6:9b:b2:42:c1:9d:e3:82:cf:6f:15:32:4a:bf:d8: 43:64:86:f3:b2:dd:e5:f5:53:23:42:ea:e8:8a:37:e7:ea:4d: 7b:29:39:04:a6:a1:6f:6a:9c:e4:fa:d9:e1:84:db:91:90:95: 73:dd:35:a2:b6:19:2d:08:6c:39:d9:b4:2e:02:fe:46:03:00: 0f:1e:0c:2c:0f:2b:98:04:2c:b3:98:df:52:64:76:ef:c2:ea: 7c:30:c0:80:b7:ae:5c:b2:90:d5:ed:ad:8c:bf:46:92:9f:da: 72:2f:1f:e6:06:92:c0:dc:11:94:23:3e:d5:bc:3d:4d:cc:68: 5a:f4:1e:d4:1d:be:3d:a3:ac:28:db:cc:e8:c5:6e:b0:fe:c5: 6d:c2:fb:39:46:63:ca:04:ba:26:e5:30:2f:f1:45:b5:4d:d2: 52:5f:87:72:19:f9:c3:17:bf:fe:44:fb:1c:93:83:36:a6:e7: 8a:4c:3a:13:cb:94:31:f9:20:a9:b1:92:40:62:a0:e1:0c:6a: 84:56:55:a3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTFF NzI1MTc2QkZEOUFCREE1Q0NCN0IyMUExMEI4RjhEQjdENTc4MB4XDTI1MDEzMTAx MjkxM1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQ0IzNEZBOUI1NzIzOUIz NEMyMzQ0Q0EyRENBMzU1QzA3QUUzNkI1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANLQE3U7O/RKC6sB7MFO6wcv7xR2iUE1soy9B8EB9FaV9l5L5n8V Z5ssGtVTAJVo3aQ4cxnclXf1AX8gEJoGu1JoM3brEyB1R6nf+T3rcWYZA+/kcAgr 4o0CTD+6fcMQJJnSX2jNCSL0RP10otPblyH+jFz8UD0Ma/9kPX3uopiMJ3F43i3T GXpVTKOxEl1J1QRoPwig7CxOas6ILJ1amOv8AlIAdAtjaqJw11eMgFj6SJ0Yj2Ol SQ8rVzjZxjx9GEjM+mlKsurFthftRL/Er31RuVXWohh1u2+7LpnsD8rSeQWUNu07 kbINz3cDus8KF+aKCtCE3UFU9MJ73tGAfg0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTLNPqbVyObNMI0TKLco1XAeuNrUTAfBgNVHSMEGDAWgBSKHnJRdr/Zq9pcy3sh oQuPjbfVeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQyL2loNXlVWGFfMmF2YVhNdDdJYUVMajQyMzFYZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2loNXlVWGFfMmF2YVhNdDdJYUVMajQy MzFYZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDIveXpUNm0xY2ptelRDTkV5aTNLTlZ3SHJqYTFFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHqAADANBgkqhkiG9w0BAQsFAAOCAQEAsvO/DvL4jD7pYs4jmV5WV96axqrC yg8OniAfEbLuM+Y2TUYCdSZCfslZO2rwfPG4BJOfDUBgkIw5tpuyQsGd44LPbxUy Sr/YQ2SG87Ld5fVTI0Lq6Io35+pNeyk5BKahb2qc5PrZ4YTbkZCVc901orYZLQhs Odm0LgL+RgMADx4MLA8rmAQss5jfUmR278LqfDDAgLeuXLKQ1e2tjL9Gkp/aci8f 5gaSwNwRlCM+1bw9TcxoWvQe1B2+PaOsKNvM6MVusP7FbcL7OUZjygS6JuUwL/FF tU3SUl+Hchn5wxe//kT7HJODNqbnikw6E8uUMfkgqbGSQGKg4QxqhFZVow== -----END CERTIFICATE-----Generated at Wed Nov 5 18:51:55 2025 by rpki-client