$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/LNOWXCdVdifMkSqS7s7W03CCqWs.roa File: LNOWXCdVdifMkSqS7s7W03CCqWs.roa (raw, json) Hash identifier: +kyd1EuPstHjftiaEYqtWOs2b03VXPqZ2dXYvd0ybj4= Subject key identifier: 2C:D3:96:5C:27:55:76:27:CC:91:2A:92:EE:CE:D6:D3:70:82:A9:6B Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Certificate serial: 3B Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/LNOWXCdVdifMkSqS7s7W03CCqWs.roa Signing time: Mon 01 Sep 2025 01:30:16 +0000 ROA not before: Mon 01 Sep 2025 01:30:16 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 0 IP address blocks: 133.88.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 12:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Validity Not Before: Sep 1 01:30:16 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=2CD3965C27557627CC912A92EECED6D37082A96B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:71:43:ca:79:4e:cc:1f:11:05:da:d4:7a: 3c:b9:55:19:02:2b:f3:90:d1:29:60:85:58:37:8c: 17:16:69:b0:fa:34:30:2a:99:00:88:43:de:fe:30: 62:70:5c:be:68:f1:6d:b2:14:22:73:f5:9c:2c:39: 81:01:6f:d3:0a:fa:6d:03:a0:88:fd:1d:dd:88:10: 81:64:ee:aa:ea:ea:df:bf:da:e8:17:5f:e2:01:9f: 10:65:8a:a2:3a:a8:18:64:7c:f5:d9:1d:f1:2f:29: 15:91:3a:ca:94:80:82:52:72:3b:4c:a3:54:0f:ee: 2c:fe:e6:5a:9f:b8:fe:39:9c:6a:8d:b3:c7:83:95: c1:0c:86:38:d8:ea:c1:39:82:b7:4f:4d:3a:b2:b1: a1:26:63:2a:1b:8a:ac:66:a9:63:6b:ce:bf:58:78: 29:d6:fa:d2:ba:c0:95:94:63:ca:0d:20:d5:7e:a8: 6a:17:12:c9:98:03:2f:69:3f:6a:2b:2b:44:fd:24: cc:a5:05:ac:fa:57:86:a9:38:30:e9:e5:fe:0c:d8: 29:c1:43:9a:46:b0:64:39:c7:e6:c3:dc:ef:e4:57: 8b:6f:47:fa:e6:5f:f9:c4:e5:dc:b4:67:59:a7:fc: 51:9a:ab:20:0e:86:42:b3:ae:7e:63:9e:10:d8:6b: bb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D3:96:5C:27:55:76:27:CC:91:2A:92:EE:CE:D6:D3:70:82:A9:6B X509v3 Authority Key Identifier: keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/LNOWXCdVdifMkSqS7s7W03CCqWs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.30.0/24 Signature Algorithm: sha256WithRSAEncryption a8:b9:ce:1b:16:56:5f:55:e2:c5:3e:37:2e:1d:be:8f:21:79: 80:57:79:84:70:61:41:53:da:4d:e7:fc:53:99:3c:ff:5a:78: c3:04:1f:ae:5a:52:00:21:43:ce:de:58:39:f5:75:92:56:98: 9d:c4:68:d9:75:4a:40:29:d8:93:a6:41:35:9d:8f:b1:63:aa: 8a:ab:fe:50:e6:84:8d:a9:98:87:b1:1a:66:a0:ee:42:f3:c1: 2b:36:fa:a8:81:91:4d:8a:0a:0b:2b:d4:d0:d3:34:23:3d:c7: 88:45:5a:51:f6:2b:98:d7:b4:fd:53:f7:94:38:6e:c1:be:fc: ee:02:a4:ca:59:e6:e1:f3:ae:7c:c5:0c:ff:5c:0a:35:0c:2d: 13:03:ed:89:ce:73:dc:a9:63:d0:32:4b:15:ba:40:b6:69:7b: 42:ce:8e:6e:ac:06:44:06:23:d4:1a:ec:ff:75:9c:2d:c1:c4: 33:71:e2:1a:7f:51:30:c2:ca:e9:1b:ba:bd:5e:7c:85:70:c1: 7e:c1:ff:e6:42:ca:ca:c5:fa:40:fe:a1:c5:7c:e3:47:bf:41: 3d:20:87:f5:4e:8a:77:f7:9b:23:0b:e8:14:bd:cc:3d:1a:28: e9:66:0d:74:fe:54:1e:c7:44:e5:3f:ad:7b:07:5d:bd:4f:77: 7b:88:b4:2f -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI1MDkwMTAx MzAxNloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMkNEMzk2NUMyNzU1NzYy N0NDOTEyQTkyRUVDRUQ2RDM3MDgyQTk2QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKLxcUPKeU7MHxEF2tR6PLlVGQIr85DRKWCFWDeMFxZpsPo0MCqZ AIhD3v4wYnBcvmjxbbIUInP1nCw5gQFv0wr6bQOgiP0d3YgQgWTuqurq37/a6Bdf 4gGfEGWKojqoGGR89dkd8S8pFZE6ypSAglJyO0yjVA/uLP7mWp+4/jmcao2zx4OV wQyGONjqwTmCt09NOrKxoSZjKhuKrGapY2vOv1h4Kdb60rrAlZRjyg0g1X6oahcS yZgDL2k/aisrRP0kzKUFrPpXhqk4MOnl/gzYKcFDmkawZDnH5sPc7+RXi29H+uZf +cTl3LRnWaf8UZqrIA6GQrOufmOeENhru78CAwEAAaOCAigwggIkMB0GA1UdDgQW BBQs05ZcJ1V2J8yRKpLuztbTcIKpazAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0 fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc1L0xOT1dYQ2RWZGlmTWtTcVM3czdXMDNDQ3FXcy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACFWB4wDQYJKoZIhvcNAQELBQADggEBAKi5zhsWVl9V4sU+Ny4dvo8h eYBXeYRwYUFT2k3n/FOZPP9aeMMEH65aUgAhQ87eWDn1dZJWmJ3EaNl1SkAp2JOm QTWdj7Fjqoqr/lDmhI2pmIexGmag7kLzwSs2+qiBkU2KCgsr1NDTNCM9x4hFWlH2 K5jXtP1T95Q4bsG+/O4CpMpZ5uHzrnzFDP9cCjUMLRMD7YnOc9ypY9AySxW6QLZp e0LOjm6sBkQGI9Qa7P91nC3BxDNx4hp/UTDCyukbur1efIVwwX7B/+ZCysrF+kD+ ocV840e/QT0gh/VOinf3myML6BS9zD0aKOlmDXT+VB7HROU/rXsHXb1Pd3uItC8= -----END CERTIFICATE-----Generated at Wed Oct 8 14:01:43 2025 by rpki-client