$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Xi8f1Vce8PGDeb4RHJ5zjIoCUQA.roa File: Xi8f1Vce8PGDeb4RHJ5zjIoCUQA.roa (raw, json) Hash identifier: EJWnqXHB3q49f7Tf1APCArpAbBSmANwbmPOwrarVOJI= Subject key identifier: 5E:2F:1F:D5:57:1E:F0:F1:83:79:BE:11:1C:9E:73:8C:8A:02:51:00 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 020B Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Xi8f1Vce8PGDeb4RHJ5zjIoCUQA.roa Signing time: Sat 01 Mar 2025 01:31:07 +0000 ROA not before: Sat 01 Mar 2025 01:31:07 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 4713 IP address blocks: 122.16.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 12:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 1 01:31:07 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=5E2F1FD5571EF0F18379BE111C9E738C8A025100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:10:52:77:a9:f2:b3:79:4f:62:2b:ee:90: 51:63:15:31:d7:f7:fc:50:89:3c:91:0e:43:ca:20: 19:04:89:3f:7f:55:61:d3:27:1f:44:5d:56:66:0a: 49:49:08:8a:87:3a:e3:6a:be:c3:15:06:3c:93:a0: 5a:51:41:40:a7:e8:7b:fc:f2:22:54:cf:cb:64:d0: 90:3c:cc:1b:24:29:da:71:b8:da:5d:2b:02:d8:e7: 82:fe:24:79:96:62:1f:b1:b6:6e:ab:b7:9b:99:3b: d9:24:41:cf:f8:bd:1d:42:c6:e2:ae:81:c2:04:94: ff:b3:51:e6:fd:8f:b3:93:bd:d3:a3:77:3b:0b:9b: a2:4f:90:f6:13:b1:b5:d8:a7:8f:b0:2b:c1:f2:9d: 50:a8:14:22:7c:b6:c6:f2:92:a2:33:f6:f7:d4:ab: be:54:1f:2f:35:d8:a5:7d:b9:96:9e:97:de:c0:78: de:df:8d:0a:28:cb:fb:60:3e:b3:c7:7d:98:37:74: 18:30:cf:c6:7d:d3:62:f7:1e:f4:37:95:22:4b:b6: 94:ee:22:af:a1:aa:05:21:ba:34:0b:96:7d:50:68: 9d:1c:d5:55:53:f6:12:b6:14:30:7f:2a:32:5a:ee: fb:32:05:80:6c:6c:7c:04:85:96:bd:d8:fa:fd:3f: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2F:1F:D5:57:1E:F0:F1:83:79:BE:11:1C:9E:73:8C:8A:02:51:00 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Xi8f1Vce8PGDeb4RHJ5zjIoCUQA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.16.0.0/12 Signature Algorithm: sha256WithRSAEncryption 6f:98:1d:30:f9:a7:63:e7:5f:5e:52:c6:e6:55:69:e8:9e:fd: 09:bd:49:e2:35:b2:77:f0:87:0c:3c:98:5a:20:75:a8:b6:70: f6:68:51:f1:90:bd:f2:9c:4a:9f:aa:21:b2:e5:76:c8:32:0b: 0c:6c:2e:23:15:e9:63:03:f8:2e:66:f4:59:24:fd:e0:0f:09: e4:bf:37:ec:68:19:f1:f5:7f:d2:ca:31:59:48:51:fc:fa:db: 21:bb:10:78:05:1b:71:91:93:c4:42:fb:bb:6a:74:bf:be:01: ba:7f:26:c6:8b:a7:ea:b5:0c:f4:6d:52:1b:81:e2:96:58:fd: 1b:f5:25:86:ae:3c:bb:3a:20:5d:c8:ad:58:94:24:87:12:76: df:ce:0f:3d:65:66:76:11:8b:de:9d:c7:f8:10:9a:89:ae:46: 4d:1f:6b:97:a5:f7:00:0c:60:92:06:11:dc:0d:40:22:2c:f3: 32:70:db:5e:95:7a:6c:47:6b:00:1c:45:29:b9:32:15:17:1b: 8f:57:ce:c3:66:35:48:6d:87:74:f7:f7:30:4d:10:7e:e7:75: 32:19:18:5f:26:3e:45:fc:ea:23:7b:01:c9:9a:ba:52:8a:a7: 34:01:16:83:60:2a:8f:a5:f4:9c:2b:e5:24:f4:40:37:88:8c: d2:3e:97:e8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw MTMxMDdaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVFMkYxRkQ1NTcxRUYw RjE4Mzc5QkUxMTFDOUU3MzhDOEEwMjUxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxkBBSd6nys3lPYivukFFjFTHX9/xQiTyRDkPKIBkEiT9/VWHT Jx9EXVZmCklJCIqHOuNqvsMVBjyToFpRQUCn6Hv88iJUz8tk0JA8zBskKdpxuNpd KwLY54L+JHmWYh+xtm6rt5uZO9kkQc/4vR1CxuKugcIElP+zUeb9j7OTvdOjdzsL m6JPkPYTsbXYp4+wK8HynVCoFCJ8tsbykqIz9vfUq75UHy812KV9uZael97AeN7f jQooy/tgPrPHfZg3dBgwz8Z902L3HvQ3lSJLtpTuIq+hqgUhujQLln1QaJ0c1VVT 9hK2FDB/KjJa7vsyBYBsbHwEhZa92Pr9P0lZAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUXi8f1Vce8PGDeb4RHJ5zjIoCUQAwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL1hpOGYxVmNlOFBHRGViNFJISjV6aklvQ1VRQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwR6EDANBgkqhkiG9w0BAQsFAAOCAQEAb5gdMPmnY+dfXlLG5lVp6J79Cb1J 4jWyd/CHDDyYWiB1qLZw9mhR8ZC98pxKn6ohsuV2yDILDGwuIxXpYwP4Lmb0WST9 4A8J5L837GgZ8fV/0soxWUhR/PrbIbsQeAUbcZGTxEL7u2p0v74Bun8mxoun6rUM 9G1SG4Hillj9G/Ulhq48uzogXcitWJQkhxJ2384PPWVmdhGL3p3H+BCaia5GTR9r l6X3AAxgkgYR3A1AIizzMnDbXpV6bEdrABxFKbkyFRcbj1fOw2Y1SG2HdPf3ME0Q fud1MhkYXyY+RfzqI3sByZq6UoqnNAEWg2Aqj6X0nCvlJPRAN4iM0j6X6A== -----END CERTIFICATE-----Generated at Mon Oct 27 14:33:10 2025 by rpki-client