$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/iWJMMBtJSjNBUMghQRQrad1nP6w.roa File: iWJMMBtJSjNBUMghQRQrad1nP6w.roa (raw, json) Hash identifier: 7tbPNDDZ+MoSHDj/fdY0USzm+C1VL4zsCzBEKkxSO4c= Subject key identifier: 89:62:4C:30:1B:49:4A:33:41:50:C8:21:41:14:2B:69:DD:67:3F:AC Certificate issuer: /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Certificate serial: 41 Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/iWJMMBtJSjNBUMghQRQrad1nP6w.roa Signing time: Mon 01 Sep 2025 01:30:20 +0000 ROA not before: Mon 01 Sep 2025 01:30:20 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 131969 IP address blocks: 133.88.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 15:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C Validity Not Before: Sep 1 01:30:20 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=89624C301B494A334150C82141142B69DD673FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:18:ad:64:4b:d9:4a:82:bc:41:20:90:f4:4e: 42:ea:dc:e1:46:df:c3:5c:58:9a:40:86:ba:67:a5: 80:af:7c:22:e0:25:4d:ac:c6:ba:14:56:dc:8d:20: 9a:f2:f2:cf:0b:91:3e:51:4e:8b:d7:24:ea:5b:43: 7e:36:f8:c0:71:a4:f2:a5:96:95:cd:60:d0:ed:7f: a7:0c:79:22:95:1e:b7:74:62:1e:87:ef:d7:71:2e: cc:78:91:f2:d9:09:42:da:ad:fb:05:61:60:ff:df: fa:f1:dd:19:db:c4:56:a7:90:dc:1b:b9:d1:cb:3e: d3:27:f7:8c:64:5a:7b:2b:5d:89:b6:b7:0b:92:50: 8f:7c:2f:b2:4c:a0:8b:ec:3a:c3:8b:63:07:88:6c: 4c:0e:ab:bc:cc:f6:4f:3e:77:ea:ef:d2:36:a6:25: f4:60:eb:64:7d:c9:3d:12:83:31:c6:7c:a8:4e:79: 56:60:c0:bc:41:49:b3:da:84:2a:86:43:3c:68:83: 6a:7c:b6:f0:75:c1:ef:26:cb:1e:13:d7:dc:ae:e9: 34:31:4c:7a:b4:2b:b8:0b:8d:2f:a9:e1:be:09:ce: 7e:c3:26:4e:6a:e4:66:e4:68:b2:25:6a:f7:a9:ad: 1f:da:7a:db:0b:f7:7c:46:67:87:9f:88:ec:1d:00: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:62:4C:30:1B:49:4A:33:41:50:C8:21:41:14:2B:69:DD:67:3F:AC X509v3 Authority Key Identifier: keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/iWJMMBtJSjNBUMghQRQrad1nP6w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.20.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:51:dc:c7:f1:ad:93:b4:c4:14:df:6d:d6:9b:32:69:19:ec: e1:9b:7b:b3:ca:8a:5d:4d:41:24:10:6f:c3:a6:73:97:9a:73: 59:88:d7:f4:ac:fe:1a:c2:e9:0b:a2:fe:a4:4b:0b:7f:0e:af: dd:41:1f:57:10:9a:82:f8:23:d7:73:14:5e:6a:e1:1f:91:9c: 37:e8:27:d7:2b:9e:fb:4d:9e:25:62:be:4b:a6:23:ed:1f:14: d0:ca:a8:af:5e:60:f5:d8:d5:26:ab:30:cd:9f:09:a6:86:b5: 18:87:f9:20:5c:3b:4a:ae:96:a3:86:94:78:d5:94:fd:af:d0: 80:c0:9c:cd:66:05:f9:b1:fe:16:e3:3b:f1:c0:8a:7e:16:9b: e0:a0:ab:9e:9f:92:71:19:0c:07:85:59:db:24:7e:89:1c:93: 13:cc:55:16:9c:f8:34:87:78:1c:46:55:b9:fb:6b:c1:2b:b8: 12:a0:fd:15:2e:4a:1a:8e:87:ae:b3:45:9e:89:23:ec:e1:82: ec:7b:86:8f:f6:de:ba:72:be:6e:54:52:02:4b:55:c3:4f:91: 03:8f:f7:29:3e:b5:3c:07:f1:eb:94:44:40:27:37:6f:5d:5a: 62:37:dc:cd:8d:a9:9e:70:1b:cd:4d:54:01:57:77:37:19:6f: 56:ca:e6:68 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI1MDkwMTAx MzAyMFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoODk2MjRDMzAxQjQ5NEEz MzQxNTBDODIxNDExNDJCNjlERDY3M0ZBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOEYrWRL2UqCvEEgkPROQurc4Ubfw1xYmkCGumelgK98IuAlTazG uhRW3I0gmvLyzwuRPlFOi9ck6ltDfjb4wHGk8qWWlc1g0O1/pwx5IpUet3RiHofv 13EuzHiR8tkJQtqt+wVhYP/f+vHdGdvEVqeQ3Bu50cs+0yf3jGRaeytdiba3C5JQ j3wvskygi+w6w4tjB4hsTA6rvMz2Tz536u/SNqYl9GDrZH3JPRKDMcZ8qE55VmDA vEFJs9qEKoZDPGiDany28HXB7ybLHhPX3K7pNDFMerQruAuNL6nhvgnOfsMmTmrk ZuRosiVq96mtH9p62wv3fEZnh5+I7B0AqpsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSJYkwwG0lKM0FQyCFBFCtp3Wc/rDAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0 fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc1L2lXSk1NQnRKU2pOQlVNZ2hRUlFyYWQxblA2dy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGFWBQwDQYJKoZIhvcNAQELBQADggEBAGpR3MfxrZO0xBTfbdabMmkZ 7OGbe7PKil1NQSQQb8Omc5eac1mI1/Ss/hrC6Qui/qRLC38Or91BH1cQmoL4I9dz FF5q4R+RnDfoJ9crnvtNniVivkumI+0fFNDKqK9eYPXY1SarMM2fCaaGtRiH+SBc O0qulqOGlHjVlP2v0IDAnM1mBfmx/hbjO/HAin4Wm+Cgq56fknEZDAeFWdskfokc kxPMVRac+DSHeBxGVbn7a8EruBKg/RUuShqOh66zRZ6JI+zhgux7ho/23rpyvm5U UgJLVcNPkQOP9yk+tTwH8euUREAnN29dWmI33M2NqZ5wG81NVAFXdzcZb1bK5mg= -----END CERTIFICATE-----Generated at Wed Oct 8 17:31:32 2025 by rpki-client