$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/UlBpTwLMgDWZCZ8TAMVGXAmuw1E.roa File: UlBpTwLMgDWZCZ8TAMVGXAmuw1E.roa (raw, json) Hash identifier: JIJ0nCwlEkxGMWht7YOo4JvcgN+eK7FFKM3SLlm6qtc= Subject key identifier: 52:50:69:4F:02:CC:80:35:99:09:9F:13:00:C5:46:5C:09:AE:C3:51 Certificate issuer: /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Certificate serial: 1B Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/UlBpTwLMgDWZCZ8TAMVGXAmuw1E.roa Signing time: Wed 01 Oct 2025 01:29:08 +0000 ROA not before: Wed 01 Oct 2025 01:29:08 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 9593 IP address blocks: 138.101.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Validity Not Before: Oct 1 01:29:08 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=5250694F02CC803599099F1300C5465C09AEC351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:73:a3:4d:79:98:a6:af:1d:19:ca:a8:58: 4f:c0:23:cd:c7:83:2c:be:61:4a:34:78:0a:25:69: ed:44:4e:3a:d0:6a:4c:41:dd:f0:aa:d4:f8:89:e1: aa:5e:51:ef:7b:8a:20:d5:3c:ef:87:9f:1c:49:01: ac:4e:e3:13:2d:37:e2:7f:26:5b:a6:31:e2:51:f8: ec:e7:e1:ca:4a:8a:a2:ca:4a:a9:63:33:4d:55:f1: 3c:48:ac:cb:06:98:5f:99:1c:bc:e2:8c:b4:ce:a9: 3c:38:ed:3b:5b:ae:cf:65:b1:af:fa:de:bf:f2:68: d2:51:1f:91:82:0f:4e:26:d1:df:d9:b4:fa:76:3e: d4:98:99:05:7a:43:ac:a4:06:72:43:10:c2:03:80: fd:b8:ec:fb:e5:36:b2:7d:e9:2d:4b:53:4d:05:d2: 6c:35:ac:e8:c7:03:65:3e:24:b8:e0:18:e1:42:47: d2:12:3f:4c:db:50:25:5f:6e:e1:3d:e5:1f:33:81: 87:f6:cd:ce:72:f1:f3:08:b3:c0:aa:a8:77:65:4f: b2:e5:f4:0e:d3:e1:c6:00:0e:da:0d:25:0f:95:3a: 9b:13:8a:c4:fe:db:46:06:c7:0b:2e:d3:bb:d9:6b: 09:fe:82:ea:18:66:0c:c0:b4:7c:f4:e4:a2:87:27: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:50:69:4F:02:CC:80:35:99:09:9F:13:00:C5:46:5C:09:AE:C3:51 X509v3 Authority Key Identifier: keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/UlBpTwLMgDWZCZ8TAMVGXAmuw1E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.101.0.0/16 Signature Algorithm: sha256WithRSAEncryption 08:a1:52:de:97:2c:87:3a:e8:3c:b3:e4:b7:f3:88:b1:8b:37: 56:8c:26:d1:70:f6:5f:ec:2a:9c:1e:dd:ed:70:21:d7:f0:f0: f8:b6:6d:41:82:77:88:58:8f:0c:1c:ee:df:d2:af:d0:14:87: 62:8a:f5:77:3a:51:5f:3b:24:af:09:9e:9f:81:66:85:31:8a: 7b:ce:07:5b:59:b3:59:15:2e:c5:39:da:fc:9a:f3:78:e3:dd: 5a:9c:8b:e6:b2:4e:6b:78:ce:f6:30:a6:fb:7f:d0:39:cd:1b: 1a:ca:a4:63:6b:89:7e:da:43:64:29:8c:5c:f2:f2:be:80:68: c0:6f:fd:f6:2e:a2:a1:1d:3f:29:4d:9c:c4:ed:1c:30:cc:59: aa:d9:46:30:f5:87:c9:8f:95:19:c2:5f:8f:40:2b:95:f3:84: 90:79:8f:0c:b4:0b:b1:55:27:2a:82:74:9d:83:29:85:49:fa: 23:01:b2:9a:0f:64:2b:b4:73:a6:55:7a:56:a6:8d:ac:7d:cf: 99:d4:a6:b0:09:7a:8c:22:69:f5:12:c4:00:01:1d:0e:a7:16: b7:50:94:c3:5a:6e:23:4d:b5:c4:ed:dd:89:2f:85:6d:61:96: 03:23:63:e7:a9:94:b2:79:28:b6:b7:b3:28:9f:86:a5:dc:a1: 5a:02:36:24 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Qzg2 RTMyRUNFOUEzQzg1MEZFQkVBNjk2NDFGMzU0NDI3M0Q1MzcxMB4XDTI1MTAwMTAx MjkwOFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNTI1MDY5NEYwMkNDODAz NTk5MDk5RjEzMDBDNTQ2NUMwOUFFQzM1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMuLc6NNeZimrx0ZyqhYT8AjzceDLL5hSjR4CiVp7UROOtBqTEHd 8KrU+Inhql5R73uKINU874efHEkBrE7jEy034n8mW6Yx4lH47OfhykqKospKqWMz TVXxPEisywaYX5kcvOKMtM6pPDjtO1uuz2Wxr/rev/Jo0lEfkYIPTibR39m0+nY+ 1JiZBXpDrKQGckMQwgOA/bjs++U2sn3pLUtTTQXSbDWs6McDZT4kuOAY4UJH0hI/ TNtQJV9u4T3lHzOBh/bNznLx8wizwKqod2VPsuX0DtPhxgAO2g0lD5U6mxOKxP7b RgbHCy7Tu9lrCf6C6hhmDMC0fPTkoocndh0CAwEAAaOCAiUwggIhMB0GA1UdDgQW BBRSUGlPAsyANZkJnxMAxUZcCa7DUTAfBgNVHSMEGDAWgBSMhuMuzpo8hQ/r6mlk HzVEJz1TcTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qSWJqTHM2YVBJVVA2LXBwWkI4MVJD YzlVM0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTA5MS9VbEJwVHdMTWdEV1pDWjhUQU1WR1hBbXV3MUUucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAimUwDQYJKoZIhvcNAQELBQADggEBAAihUt6XLIc66Dyz5LfziLGLN1aM JtFw9l/sKpwe3e1wIdfw8Pi2bUGCd4hYjwwc7t/Sr9AUh2KK9Xc6UV87JK8Jnp+B ZoUxinvOB1tZs1kVLsU52vya83jj3Vqci+ayTmt4zvYwpvt/0DnNGxrKpGNriX7a Q2QpjFzy8r6AaMBv/fYuoqEdPylNnMTtHDDMWarZRjD1h8mPlRnCX49AK5XzhJB5 jwy0C7FVJyqCdJ2DKYVJ+iMBspoPZCu0c6ZVelamjax9z5nUprAJeowiafUSxAAB HQ6nFrdQlMNabiNNtcTt3YkvhW1hlgMjY+eplLJ5KLa3syifhqXcoVoCNiQ= -----END CERTIFICATE-----Generated at Wed Oct 22 20:38:19 2025 by rpki-client