$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2280/QEJ41-sloGbR2TuoZedkr0mEq-s.roa File: QEJ41-sloGbR2TuoZedkr0mEq-s.roa (raw, json) Hash identifier: I5v/ELCQJBMkcle6RIDLOl+FhLqyD1rdT5Eqf8TOc50= Subject key identifier: 40:42:78:D7:EB:25:A0:66:D1:D9:3B:A8:65:E7:64:AF:49:84:AB:EB Certificate issuer: /CN=2D71B4B03866B2E07383E001ED7E4D35B8A321CA Certificate serial: 02 Authority key identifier: 2D:71:B4:B0:38:66:B2:E0:73:83:E0:01:ED:7E:4D:35:B8:A3:21:CA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LXG0sDhmsuBzg-AB7X5NNbijIco.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2280/QEJ41-sloGbR2TuoZedkr0mEq-s.roa Signing time: Tue 26 Aug 2025 07:09:54 +0000 ROA not before: Tue 26 Aug 2025 07:09:54 +0000 ROA not after: Wed 26 Aug 2026 05:58:56 +0000 asID: 131159 IP address blocks: 133.24.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2280/LXG0sDhmsuBzg-AB7X5NNbijIco.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2280/LXG0sDhmsuBzg-AB7X5NNbijIco.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LXG0sDhmsuBzg-AB7X5NNbijIco.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 17:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D71B4B03866B2E07383E001ED7E4D35B8A321CA Validity Not Before: Aug 26 07:09:54 2025 GMT Not After : Aug 26 05:58:56 2026 GMT Subject: CN=404278D7EB25A066D1D93BA865E764AF4984ABEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:87:17:02:79:63:e0:0d:98:51:5e:38:bf:ea: c0:76:91:36:6f:06:a0:f4:1c:ff:3d:36:1a:90:bd: f9:85:1a:5a:eb:df:5b:32:67:36:98:a5:90:db:15: e7:22:60:b7:dc:32:d5:78:e8:b8:8c:0f:13:e2:98: 9d:79:a9:56:97:ee:9f:05:bb:66:92:a4:52:48:d0: f3:00:97:d1:0f:55:c4:90:fa:d5:af:4c:f0:50:12: 93:49:46:e1:11:0e:90:57:19:43:66:36:3b:b5:82: 94:df:a9:6d:b1:a0:c8:3b:85:da:25:f2:27:8e:ac: 70:ef:05:1d:1b:5e:40:3b:92:03:a0:25:18:ed:5b: 25:ff:97:4b:9c:28:8b:38:d1:3f:d1:5a:f2:f2:3f: 15:24:f2:24:31:99:7e:08:a5:4e:4b:1f:7f:d1:51: 50:91:c1:0e:be:2b:13:22:8a:f7:47:e9:a2:ea:9d: 7c:c7:ff:db:6f:8d:f6:6d:32:ea:d3:cc:6b:1c:d9: a5:51:b2:02:c1:6d:39:5d:63:79:9f:e3:c6:7f:b2: e1:c3:7a:52:3d:02:45:07:16:da:89:ec:6f:87:92: 27:1a:79:71:64:d2:c7:69:7f:89:42:73:a8:80:f4: c3:fe:13:de:5c:ad:e1:31:ea:c7:30:34:9f:36:a2: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:42:78:D7:EB:25:A0:66:D1:D9:3B:A8:65:E7:64:AF:49:84:AB:EB X509v3 Authority Key Identifier: keyid:2D:71:B4:B0:38:66:B2:E0:73:83:E0:01:ED:7E:4D:35:B8:A3:21:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2280/LXG0sDhmsuBzg-AB7X5NNbijIco.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LXG0sDhmsuBzg-AB7X5NNbijIco.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2280/QEJ41-sloGbR2TuoZedkr0mEq-s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.24.0.0/16 Signature Algorithm: sha256WithRSAEncryption 86:24:5e:63:f9:b7:42:1d:41:c9:74:52:ac:92:74:6a:81:50: 82:21:a6:df:b7:91:19:8e:fa:55:7f:8b:9b:07:c2:a1:d7:72: a1:fc:e3:cb:38:bd:08:8e:bd:88:4c:e8:4e:9c:c4:19:93:4d: 58:19:ec:b0:ad:0a:14:1a:b9:fe:09:9f:be:e3:ec:21:dd:05: 38:d4:a5:6b:dc:59:38:3e:5d:dc:67:85:27:91:88:2b:d7:4d: 40:07:83:1c:0a:5b:05:e2:75:b4:1a:55:13:18:4a:09:36:14: b5:2f:3b:aa:b0:5e:36:63:5e:ed:fa:95:35:55:ef:39:3a:c4: fc:a4:b3:c1:be:91:b1:94:90:3e:24:59:cd:4c:21:91:a6:34: 7a:87:c3:66:cb:c8:ed:02:45:ef:23:2f:b6:92:39:98:7b:42: e7:62:50:42:a2:92:cd:d7:15:e2:25:60:7d:64:dd:70:67:6a: dd:65:42:a4:a8:72:06:78:de:2e:31:1c:5b:33:ac:6c:de:c6: 72:b4:04:4a:90:8e:df:93:0d:83:56:f2:7d:92:b9:e0:b6:6d: a1:a5:72:6d:26:6f:b4:d5:9d:d2:be:44:18:25:eb:dd:1e:b8: e0:a6:bc:c2:be:0c:86:33:53:f2:19:e0:bd:16:07:cb:46:9a: 05:c0:54:7d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRDcx QjRCMDM4NjZCMkUwNzM4M0UwMDFFRDdFNEQzNUI4QTMyMUNBMB4XDTI1MDgyNjA3 MDk1NFoXDTI2MDgyNjA1NTg1NlowMzExMC8GA1UEAxMoNDA0Mjc4RDdFQjI1QTA2 NkQxRDkzQkE4NjVFNzY0QUY0OTg0QUJFQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALqHFwJ5Y+ANmFFeOL/qwHaRNm8GoPQc/z02GpC9+YUaWuvfWzJn NpilkNsV5yJgt9wy1XjouIwPE+KYnXmpVpfunwW7ZpKkUkjQ8wCX0Q9VxJD61a9M 8FASk0lG4REOkFcZQ2Y2O7WClN+pbbGgyDuF2iXyJ46scO8FHRteQDuSA6AlGO1b Jf+XS5woizjRP9Fa8vI/FSTyJDGZfgilTksff9FRUJHBDr4rEyKK90fpouqdfMf/ 22+N9m0y6tPMaxzZpVGyAsFtOV1jeZ/jxn+y4cN6Uj0CRQcW2onsb4eSJxp5cWTS x2l/iUJzqID0w/4T3lyt4THqxzA0nzai/dsCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBRAQnjX6yWgZtHZO6hl52SvSYSr6zAfBgNVHSMEGDAWgBQtcbSwOGay4HOD4AHt fk01uKMhyjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjI4MC9MWEcwc0RobXN1QnpnLUFCN1g1Tk5iaWpJY28uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MWEcwc0RobXN1QnpnLUFCN1g1Tk5i aWpJY28uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjI4MC9RRUo0MS1zbG9HYlIyVHVvWmVka3IwbUVxLXMucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAhRgwDQYJKoZIhvcNAQELBQADggEBAIYkXmP5t0IdQcl0UqySdGqBUIIh pt+3kRmO+lV/i5sHwqHXcqH848s4vQiOvYhM6E6cxBmTTVgZ7LCtChQauf4Jn77j 7CHdBTjUpWvcWTg+XdxnhSeRiCvXTUAHgxwKWwXidbQaVRMYSgk2FLUvO6qwXjZj Xu36lTVV7zk6xPyks8G+kbGUkD4kWc1MIZGmNHqHw2bLyO0CRe8jL7aSOZh7Qudi UEKiks3XFeIlYH1k3XBnat1lQqSocgZ43i4xHFszrGzexnK0BEqQjt+TDYNW8n2S ueC2baGlcm0mb7TVndK+RBgl690euOCmvMK+DIYzU/IZ4L0WB8tGmgXAVH0= -----END CERTIFICATE-----Generated at Wed Oct 8 19:18:54 2025 by rpki-client