$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/JMuqh2IBcR7tVQ1vtXjYPwMAdf0.roa File: JMuqh2IBcR7tVQ1vtXjYPwMAdf0.roa (raw, json) Hash identifier: 20guCv9vqrr7lEIdHK1FFEApv1S1aDL8YQXGyz+6fyU= Subject key identifier: 24:CB:AA:87:62:01:71:1E:ED:55:0D:6F:B5:78:D8:3F:03:00:75:FD Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0230 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JMuqh2IBcR7tVQ1vtXjYPwMAdf0.roa Signing time: Thu 01 May 2025 01:31:44 +0000 ROA not before: Thu 01 May 2025 01:31:44 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 211.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 12:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:44 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=24CBAA876201711EED550D6FB578D83F030075FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:98:ac:30:74:38:fb:ce:ac:89:e4:1c:c2: bb:a5:31:1d:f0:90:64:f8:d1:4d:55:4d:eb:ae:28: 02:34:26:d0:47:95:0f:e3:fb:6e:b0:9e:07:63:03: 22:49:6c:d4:da:37:54:20:01:6d:b9:43:11:44:0a: 2c:67:28:7f:7e:0d:37:68:1d:80:c8:25:af:44:98: 95:58:60:11:4e:ac:c0:ec:0b:2c:18:b0:04:45:e2: 29:9e:a7:bc:35:92:86:c2:03:29:d1:67:77:cf:55: 49:d9:93:03:6e:4a:53:fa:ca:f9:9a:b9:e5:db:eb: 93:46:a3:f4:ae:53:4e:da:e3:6a:b0:52:98:d7:ca: 9a:7b:ca:da:11:93:94:fb:26:b4:47:5d:8d:16:3c: 2b:4a:7e:05:55:85:95:94:19:cd:da:1f:79:14:2c: 24:f9:ce:e2:31:2f:b6:b3:83:8c:c2:c8:69:91:fb: f6:14:13:94:7c:66:4f:5b:87:a3:27:ef:04:87:01: 27:e6:77:17:ac:27:28:c9:88:e0:90:6e:d6:3f:db: c0:ff:55:8f:8a:25:b2:96:cb:78:95:c7:30:d4:d1: d6:e6:1c:bd:b2:c5:3a:ba:f8:9a:64:3c:aa:21:6a: 11:53:84:cd:af:53:f6:f4:7c:3f:2a:34:97:30:48: 46:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CB:AA:87:62:01:71:1E:ED:55:0D:6F:B5:78:D8:3F:03:00:75:FD X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JMuqh2IBcR7tVQ1vtXjYPwMAdf0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9e:5d:b3:8c:a1:7e:5a:8d:89:26:74:1d:0f:a7:3f:82:f1:db: bc:c2:44:37:4d:76:2f:69:3b:d3:5f:32:72:ff:b6:3c:c1:df: ca:90:f9:9d:64:ac:a5:6a:2b:74:93:b3:7d:34:27:28:6c:f0: 45:8a:bb:a9:a9:44:46:a1:f3:e2:df:8f:2f:aa:92:e0:42:5a: 19:a3:71:bd:75:75:cb:2d:4d:a3:28:9f:6d:8b:84:a0:c5:e0: 6e:1e:ae:8a:11:2e:fb:9d:3a:a8:24:ea:50:3b:51:6b:58:1f: 73:09:18:ab:f3:d4:e9:a1:42:ea:7c:cc:ff:f0:ae:c9:db:bd: 39:27:6f:fb:79:c9:0b:b1:b5:82:3b:8b:61:e5:74:d9:0f:01: 82:1a:f9:09:eb:40:9f:42:8d:8c:d7:50:ec:0b:60:88:d5:75: 30:cc:1e:60:31:59:09:2c:4e:45:23:43:7f:f3:01:c2:e1:32: 93:68:36:9f:15:a2:b0:4a:7b:00:14:10:f2:09:42:7d:04:6e: 27:9d:73:e6:99:00:6e:df:8e:f7:7a:49:46:3b:22:64:a5:0a: 46:c1:94:1e:13:ca:a5:c2:42:e3:33:8b:c7:f6:8b:30:68:b8: 49:1b:f7:ab:51:5b:3e:00:52:71:80:e7:9d:12:ac:ad:65:e8: dc:f3:e0:2a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxNDRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI0Q0JBQTg3NjIwMTcx MUVFRDU1MEQ2RkI1NzhEODNGMDMwMDc1RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrwpisMHQ4+86sieQcwrulMR3wkGT40U1VTeuuKAI0JtBHlQ/j +26wngdjAyJJbNTaN1QgAW25QxFECixnKH9+DTdoHYDIJa9EmJVYYBFOrMDsCywY sARF4imep7w1kobCAynRZ3fPVUnZkwNuSlP6yvmaueXb65NGo/SuU07a42qwUpjX ypp7ytoRk5T7JrRHXY0WPCtKfgVVhZWUGc3aH3kULCT5zuIxL7azg4zCyGmR+/YU E5R8Zk9bh6Mn7wSHASfmdxesJyjJiOCQbtY/28D/VY+KJbKWy3iVxzDU0dbmHL2y xTq6+JpkPKohahFThM2vU/b0fD8qNJcwSEYVAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUJMuqh2IBcR7tVQ1vtXjYPwMAdf0wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL0pNdXFoMklCY1I3dFZRMXZ0WGpZUHdNQWRmMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDTgTANBgkqhkiG9w0BAQsFAAOCAQEAnl2zjKF+Wo2JJnQdD6c/gvHbvMJE N012L2k7018ycv+2PMHfypD5nWSspWordJOzfTQnKGzwRYq7qalERqHz4t+PL6qS 4EJaGaNxvXV1yy1NoyifbYuEoMXgbh6uihEu+506qCTqUDtRa1gfcwkYq/PU6aFC 6nzM//Cuydu9OSdv+3nJC7G1gjuLYeV02Q8Bghr5CetAn0KNjNdQ7AtgiNV1MMwe YDFZCSxORSNDf/MBwuEyk2g2nxWisEp7ABQQ8glCfQRuJ51z5pkAbt+O93pJRjsi ZKUKRsGUHhPKpcJC4zOLx/aLMGi4SRv3q1FbPgBScYDnnRKsrWXo3PPgKg== -----END CERTIFICATE-----Generated at Mon Oct 27 14:33:11 2025 by rpki-client