$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/e9fBI4sZKx3-1CgLnBf4v_Y7ZiA.roa File: e9fBI4sZKx3-1CgLnBf4v_Y7ZiA.roa (raw, json) Hash identifier: HnfEfNV2avZCeToQ/zRWq7i474/LTpdzgfwLKhvtrr0= Subject key identifier: 7B:D7:C1:23:8B:19:2B:1D:FE:D4:28:0B:9C:17:F8:BF:F6:3B:66:20 Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Certificate serial: 3F Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/e9fBI4sZKx3-1CgLnBf4v_Y7ZiA.roa Signing time: Mon 01 Sep 2025 01:30:19 +0000 ROA not before: Mon 01 Sep 2025 01:30:19 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 18068 IP address blocks: 133.88.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 15:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Validity Not Before: Sep 1 01:30:19 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=7BD7C1238B192B1DFED4280B9C17F8BFF63B6620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:8b:96:39:0b:2f:f6:b4:1f:09:f0:e8:a0: 55:80:23:a9:e8:24:89:c4:fb:4e:0b:17:ca:a2:9c: 35:1a:53:84:d7:9a:74:dc:c8:89:d3:6f:3f:01:41: 34:ac:d3:d4:3e:ac:e1:93:7e:81:25:a4:91:f2:41: 63:f7:36:13:a3:19:42:9f:ea:81:95:b6:73:bb:17: 22:d1:5b:39:94:d3:50:7f:08:7c:b5:9b:1f:35:53: d9:2c:1d:16:03:e1:ee:93:06:15:32:8a:c0:be:c8: bf:95:3f:79:a0:ba:12:3d:cf:a9:c5:7b:2d:ad:41: 4a:ee:fe:a5:e9:c3:9e:a9:45:43:88:d8:27:e9:62: a5:b5:4e:fe:87:35:f2:10:e9:e5:48:8a:4e:58:76: 27:c5:e3:04:a4:cf:92:30:ea:a7:60:90:e8:07:39: 6f:2a:47:ff:5a:5a:ab:b5:1d:43:bb:71:11:b7:86: 2b:ab:b8:56:46:0e:f0:3a:b3:79:96:11:2c:b1:c6: a9:32:67:18:01:3a:97:03:51:41:45:9a:aa:69:f9: d0:c5:fc:14:5a:4e:68:7a:44:ea:71:e4:3a:74:40: 95:63:72:56:bb:11:07:4c:db:a0:72:3d:cf:90:1c: bf:d6:ab:65:8d:75:63:dc:8c:a5:46:1a:dd:4d:2c: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D7:C1:23:8B:19:2B:1D:FE:D4:28:0B:9C:17:F8:BF:F6:3B:66:20 X509v3 Authority Key Identifier: keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/e9fBI4sZKx3-1CgLnBf4v_Y7ZiA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.12.0/22 Signature Algorithm: sha256WithRSAEncryption 30:00:03:d5:99:3d:7f:35:d6:c7:56:f5:0b:f8:ff:ed:20:15: 6c:ff:6d:bd:f3:77:00:0a:cc:2e:e8:5f:1e:4b:76:58:c8:3b: a2:18:ef:54:3c:d2:9a:53:9b:51:ec:f4:c0:ee:08:f9:af:12: 3a:0b:32:ff:53:a9:5f:40:0e:19:d5:2a:f1:4f:f8:de:3c:9a: a4:76:bb:fe:36:0b:0c:d8:02:82:20:ad:13:85:40:19:03:8d: 3b:41:24:08:fe:56:98:3a:a5:10:95:61:e5:bc:46:18:1a:cb: b5:b0:5e:02:1a:20:68:ab:75:e8:16:8b:88:22:99:23:77:6c: 1a:b1:a7:59:08:94:33:b1:6b:7f:c9:ed:ae:ca:9f:d6:1b:f8: 27:4e:fe:f5:b8:bc:a0:fe:a9:43:3a:ea:88:b6:8a:59:c3:09: e3:d7:78:dd:ef:c3:70:b6:3d:d7:cd:ae:18:89:ec:f0:cc:b2: f0:76:58:1a:c3:7e:fa:eb:e9:f6:a3:da:97:b8:0b:3d:6e:65: b1:f3:5d:81:1b:59:19:a7:eb:1a:2e:73:c9:62:44:7d:b4:c1: c5:60:80:d6:b9:b4:b5:b6:ff:73:84:9d:60:41:2b:17:1b:0e: 69:9f:dd:e3:f0:5e:7e:9c:4e:17:17:c2:fe:6e:59:69:e1:f8: b3:ed:9e:c9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI1MDkwMTAx MzAxOVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoN0JEN0MxMjM4QjE5MkIx REZFRDQyODBCOUMxN0Y4QkZGNjNCNjYyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMjTi5Y5Cy/2tB8J8OigVYAjqegkicT7TgsXyqKcNRpThNeadNzI idNvPwFBNKzT1D6s4ZN+gSWkkfJBY/c2E6MZQp/qgZW2c7sXItFbOZTTUH8IfLWb HzVT2SwdFgPh7pMGFTKKwL7Iv5U/eaC6Ej3PqcV7La1BSu7+penDnqlFQ4jYJ+li pbVO/oc18hDp5UiKTlh2J8XjBKTPkjDqp2CQ6Ac5bypH/1paq7UdQ7txEbeGK6u4 VkYO8DqzeZYRLLHGqTJnGAE6lwNRQUWaqmn50MX8FFpOaHpE6nHkOnRAlWNyVrsR B0zboHI9z5Acv9arZY11Y9yMpUYa3U0sqeMCAwEAAaOCAigwggIkMB0GA1UdDgQW BBR718EjixkrHf7UKAucF/i/9jtmIDAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0 fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc1L2U5ZkJJNHNaS3gzLTFDZ0xuQmY0dl9ZN1ppQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKFWAwwDQYJKoZIhvcNAQELBQADggEBADAAA9WZPX811sdW9Qv4/+0g FWz/bb3zdwAKzC7oXx5LdljIO6IY71Q80ppTm1Hs9MDuCPmvEjoLMv9TqV9ADhnV KvFP+N48mqR2u/42CwzYAoIgrROFQBkDjTtBJAj+Vpg6pRCVYeW8Rhgay7WwXgIa IGirdegWi4gimSN3bBqxp1kIlDOxa3/J7a7Kn9Yb+CdO/vW4vKD+qUM66oi2ilnD CePXeN3vw3C2PdfNrhiJ7PDMsvB2WBrDfvrr6faj2pe4Cz1uZbHzXYEbWRmn6xou c8liRH20wcVggNa5tLW2/3OEnWBBKxcbDmmf3ePwXn6cThcXwv5uWWnh+LPtnsk= -----END CERTIFICATE-----Generated at Wed Oct 8 17:31:33 2025 by rpki-client