$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/JnpEVEi0gLKkV1tCPiGPFMtH0rc.roa File: JnpEVEi0gLKkV1tCPiGPFMtH0rc.roa (raw, json) Hash identifier: 8+vo5IF7IAJcBRRMfobsE1oIyMdnOG6lysoJuzNrA4I= Subject key identifier: 26:7A:44:54:48:B4:80:B2:A4:57:5B:42:3E:21:8F:14:CB:47:D2:B7 Certificate issuer: /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52 Certificate serial: 44 Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/JnpEVEi0gLKkV1tCPiGPFMtH0rc.roa Signing time: Wed 01 Oct 2025 01:28:20 +0000 ROA not before: Wed 01 Oct 2025 01:28:20 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 55385 IP address blocks: 133.247.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52 Validity Not Before: Oct 1 01:28:20 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=267A445448B480B2A4575B423E218F14CB47D2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:ac:7a:ce:fe:58:78:2e:de:f0:ce:c4:74: 67:58:50:0d:17:80:22:f0:10:c2:34:61:e1:07:43: 1f:31:b2:2d:73:41:6b:94:8d:bc:1b:f2:33:7b:bd: 27:9c:74:d5:dc:2a:57:94:d1:72:b3:74:a1:c1:83: a8:9a:11:b1:d1:d9:21:f2:eb:50:42:25:84:1d:ae: 9e:b3:62:9e:8b:5f:d5:8b:71:f2:01:b2:ec:18:5d: 7a:ec:aa:72:38:73:f6:e4:8e:d2:69:37:86:84:83: 72:32:9d:8b:bc:de:3e:e9:aa:44:24:5a:1d:f3:0e: 09:47:25:5c:01:08:fc:e3:ea:11:51:08:a9:28:25: dc:60:3d:ad:d4:a1:94:c1:1a:5a:79:7b:99:9c:26: b9:7a:ee:13:7a:cc:0e:d0:f8:6d:da:a0:61:ee:51: 74:39:8e:b6:e7:a7:82:7c:ab:9d:5c:56:ca:ed:84: f9:3b:fc:a6:d8:dc:5f:97:22:19:2e:a4:93:94:cc: 5a:99:68:3b:8d:91:2b:c3:29:09:dc:65:55:e3:3a: 82:d7:0a:1e:98:89:04:1d:bf:45:20:4d:39:43:ad: 46:4a:79:44:41:5a:7a:bc:51:5e:6c:ff:fc:66:33: 74:df:83:b1:c7:8d:82:f5:7e:df:0a:12:b6:99:7c: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7A:44:54:48:B4:80:B2:A4:57:5B:42:3E:21:8F:14:CB:47:D2:B7 X509v3 Authority Key Identifier: keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/JnpEVEi0gLKkV1tCPiGPFMtH0rc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.247.92.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:99:ea:ea:4d:a9:e1:6b:ec:24:5c:fe:86:e3:3a:cf:d8:af: 91:6c:88:c2:b7:fd:d5:a2:db:47:30:4b:86:7b:00:3b:b7:b6: 05:7a:c4:eb:c6:e0:1b:50:fd:09:50:23:24:42:cd:ab:16:eb: 50:39:0b:98:2d:95:bc:78:e3:59:03:bf:51:5d:4e:41:e1:aa: b3:a3:2b:7f:24:ee:f5:d3:66:a9:14:ef:5b:cb:eb:89:9d:00: 8a:41:9c:be:3c:50:45:c6:2d:a2:33:d3:98:75:c1:ff:18:f5: e9:88:7d:ff:ab:a6:bc:c9:17:63:24:2a:65:81:db:d6:17:94: d0:09:d7:51:a1:f0:0f:40:b1:cf:31:ec:13:6c:54:ad:b7:ec: 30:9a:60:54:0c:89:66:39:d8:95:2c:89:29:03:36:3d:cb:43: c3:86:62:3f:db:26:04:6e:79:63:9e:17:94:48:44:46:c0:0d: 9e:94:9f:81:37:93:15:00:af:2b:69:86:80:ea:23:97:fe:a6: 82:0d:3d:7a:36:fd:c3:bd:ed:ff:c3:c6:25:ab:50:d3:d9:f8: 42:fa:11:09:e6:3a:21:f3:3b:94:a9:42:aa:4a:28:58:42:c1: b5:5f:2a:a0:e4:86:0d:53:c0:79:d0:18:89:ca:f6:61:98:4a: aa:e7:cd:22 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQkJD QTkwRENCODBENjIyQjE4ODg0RUExRTBCM0I3RDQwQzYxQzUyMB4XDTI1MTAwMTAx MjgyMFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMjY3QTQ0NTQ0OEI0ODBC MkE0NTc1QjQyM0UyMThGMTRDQjQ3RDJCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALRErHrO/lh4Lt7wzsR0Z1hQDReAIvAQwjRh4QdDHzGyLXNBa5SN vBvyM3u9J5x01dwqV5TRcrN0ocGDqJoRsdHZIfLrUEIlhB2unrNinotf1Ytx8gGy 7Bhdeuyqcjhz9uSO0mk3hoSDcjKdi7zePumqRCRaHfMOCUclXAEI/OPqEVEIqSgl 3GA9rdShlMEaWnl7mZwmuXruE3rMDtD4bdqgYe5RdDmOtuengnyrnVxWyu2E+Tv8 ptjcX5ciGS6kk5TMWploO42RK8MpCdxlVeM6gtcKHpiJBB2/RSBNOUOtRkp5REFa erxRXmz//GYzdN+DsceNgvV+3woStpl8zfECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQmekRUSLSAsqRXW0I+IY8Uy0fStzAfBgNVHSMEGDAWgBQLvKkNy4DWIrGIhOoe Czt9QMYcUjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTU1L0M3eXBEY3VBMWlLeGlJVHFIZ3M3ZlVER0hGSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0M3eXBEY3VBMWlLeGlJVHFIZ3M3ZlVE R0hGSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NTUvSm5wRVZFaTBnTEtrVjF0Q1BpR1BGTXRIMHJjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAoX3XDANBgkqhkiG9w0BAQsFAAOCAQEAL5nq6k2p4WvsJFz+huM6z9ivkWyI wrf91aLbRzBLhnsAO7e2BXrE68bgG1D9CVAjJELNqxbrUDkLmC2VvHjjWQO/UV1O QeGqs6MrfyTu9dNmqRTvW8vriZ0AikGcvjxQRcYtojPTmHXB/xj16Yh9/6umvMkX YyQqZYHb1heU0AnXUaHwD0CxzzHsE2xUrbfsMJpgVAyJZjnYlSyJKQM2PctDw4Zi P9smBG55Y54XlEhERsANnpSfgTeTFQCvK2mGgOojl/6mgg09ejb9w73t/8PGJatQ 09n4QvoRCeY6IfM7lKlCqkooWELBtV8qoOSGDVPAedAYicr2YZhKqufNIg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:30:13 2025 by rpki-client