$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/lQe4k2rziCWx6I2VSs3Up8aosAU.roa File: lQe4k2rziCWx6I2VSs3Up8aosAU.roa (raw, json) Hash identifier: gCjh6faDqUDo5liyyoN1M1ATnF014NMG9jYDOJ7+tKo= Subject key identifier: 95:07:B8:93:6A:F3:88:25:B1:E8:8D:95:4A:CD:D4:A7:C6:A8:B0:05 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 021E Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/lQe4k2rziCWx6I2VSs3Up8aosAU.roa Signing time: Thu 01 May 2025 01:31:35 +0000 ROA not before: Thu 01 May 2025 01:31:35 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 202.234.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 12:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:35 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9507B8936AF38825B1E88D954ACDD4A7C6A8B005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:84:44:07:8e:6c:fc:7d:38:3e:a0:7f:15: 90:f2:c5:b5:d3:cf:6a:a6:3f:d1:18:00:82:5d:58: 30:ee:a6:d8:f0:a2:45:9c:d9:8d:0e:0a:a5:30:ca: fb:76:f7:a7:1c:61:27:80:18:42:e4:ba:f5:23:d1: a6:01:d2:5e:81:5a:f3:89:a1:31:80:23:15:ac:dd: d9:7c:db:49:e3:ba:86:b6:5e:e6:ed:d7:6d:0e:fe: 52:7f:fe:27:de:79:7d:b2:c4:63:b8:73:ff:60:b5: f4:0e:0b:42:fe:1c:8b:05:96:b0:d5:ae:df:12:18: 96:00:4f:fc:63:b1:e6:b7:e2:a5:6f:42:4e:b8:51: 5d:33:af:fd:bd:17:0d:09:4d:a1:3f:79:ff:df:41: 0e:6c:43:e9:71:16:96:f1:fd:94:de:14:40:7c:8a: 1a:a1:80:7a:17:f2:9d:6b:48:3f:b3:99:e6:e2:41: aa:c5:ee:50:12:64:0d:86:a8:c1:f1:4b:7d:20:e3: 6d:eb:20:8b:8e:2d:79:21:f0:b8:c5:78:a6:86:67: 5c:62:cb:c0:f1:e2:ed:fe:3d:57:9e:ac:47:a3:fc: 78:1a:1b:33:4a:f6:6a:6d:ee:03:96:b8:d3:ac:6b: ed:5f:71:82:3e:d1:f6:23:1d:49:46:91:ba:64:cd: 9c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:07:B8:93:6A:F3:88:25:B1:E8:8D:95:4A:CD:D4:A7:C6:A8:B0:05 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/lQe4k2rziCWx6I2VSs3Up8aosAU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.234.192.0/18 Signature Algorithm: sha256WithRSAEncryption b2:8f:e2:ad:64:be:49:1e:ee:10:3a:75:f3:26:c4:71:5c:f5: d0:cf:f3:c0:e2:66:99:bf:de:02:48:92:9d:97:f8:9e:aa:3d: f3:15:aa:bb:d5:fe:33:9e:87:19:bc:d8:0a:4d:67:8e:ae:0f: dd:b1:e5:fe:2d:60:92:62:b1:ef:04:8f:5e:ad:24:fe:9b:d3: ad:72:a0:a8:96:46:b7:7f:3c:2d:52:1c:93:38:fe:25:88:07: d5:ea:ae:70:74:ee:38:59:b1:7f:71:0e:b0:46:c6:bb:c0:e9: d3:fa:36:fe:c3:a7:98:16:f4:7b:be:2c:66:c8:09:20:d3:71: c1:ca:3e:90:c5:28:4d:54:23:7a:ae:53:3e:d3:70:cc:bf:98: cc:ef:78:2d:6d:24:d1:4f:d1:40:e4:2a:29:e0:75:92:f3:7f: 19:60:fe:2b:d4:5b:a0:21:78:ac:05:7f:11:8c:f5:a1:d8:99: 0e:c0:9c:59:a2:b3:5e:32:08:10:cf:44:10:3d:98:86:64:b1: b6:06:8b:e3:36:86:82:5a:d6:76:71:78:8d:3a:08:de:17:83: 53:b6:21:d4:3a:e7:f4:7e:84:1b:17:82:16:ae:37:25:ca:33: 2c:01:88:68:f3:e5:6a:e3:8e:b0:c8:9c:0c:5a:3e:81:ae:1e: 39:71:d0:c3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxMzVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk1MDdCODkzNkFGMzg4 MjVCMUU4OEQ5NTRBQ0RENEE3QzZBOEIwMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9vYREB45s/H04PqB/FZDyxbXTz2qmP9EYAIJdWDDuptjwokWc 2Y0OCqUwyvt296ccYSeAGELkuvUj0aYB0l6BWvOJoTGAIxWs3dl820njuoa2Xubt 120O/lJ//ifeeX2yxGO4c/9gtfQOC0L+HIsFlrDVrt8SGJYAT/xjsea34qVvQk64 UV0zr/29Fw0JTaE/ef/fQQ5sQ+lxFpbx/ZTeFEB8ihqhgHoX8p1rSD+zmebiQarF 7lASZA2GqMHxS30g423rIIuOLXkh8LjFeKaGZ1xiy8Dx4u3+PVeerEej/HgaGzNK 9mpt7gOWuNOsa+1fcYI+0fYjHUlGkbpkzZxrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlQe4k2rziCWx6I2VSs3Up8aosAUwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL2xRZTRrMnJ6aUNXeDZJMlZTczNVcDhhb3NBVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbK6sAwDQYJKoZIhvcNAQELBQADggEBALKP4q1kvkke7hA6dfMmxHFc9dDP 88DiZpm/3gJIkp2X+J6qPfMVqrvV/jOehxm82ApNZ46uD92x5f4tYJJise8Ej16t JP6b061yoKiWRrd/PC1SHJM4/iWIB9XqrnB07jhZsX9xDrBGxrvA6dP6Nv7Dp5gW 9Hu+LGbICSDTccHKPpDFKE1UI3quUz7TcMy/mMzveC1tJNFP0UDkKingdZLzfxlg /ivUW6AheKwFfxGM9aHYmQ7AnFmis14yCBDPRBA9mIZksbYGi+M2hoJa1nZxeI06 CN4Xg1O2IdQ65/R+hBsXghauNyXKMywBiGjz5WrjjrDInAxaPoGuHjlx0MM= -----END CERTIFICATE-----Generated at Mon Oct 27 14:36:59 2025 by rpki-client