$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2344/U7ugDxdwoR2s9Gf80eKfD5K-pis.roa File: U7ugDxdwoR2s9Gf80eKfD5K-pis.roa (raw, json) Hash identifier: 9sezkJU3xhN8o5NHSm0T2Zuy8bcfUv08VpxOX9FSQdk= Subject key identifier: 53:BB:A0:0F:17:70:A1:1D:AC:F4:67:FC:D1:E2:9F:0F:92:BE:A6:2B Certificate issuer: /CN=9B4EA0A4C71099FCC5034753E8F8BF1AB66101D7 Certificate serial: 02 Authority key identifier: 9B:4E:A0:A4:C7:10:99:FC:C5:03:47:53:E8:F8:BF:1A:B6:61:01:D7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/U7ugDxdwoR2s9Gf80eKfD5K-pis.roa Signing time: Fri 10 Oct 2025 07:34:54 +0000 ROA not before: Fri 10 Oct 2025 07:34:54 +0000 ROA not after: Sat 10 Oct 2026 06:52:45 +0000 asID: 16509 IP address blocks: 133.194.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 11:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B4EA0A4C71099FCC5034753E8F8BF1AB66101D7 Validity Not Before: Oct 10 07:34:54 2025 GMT Not After : Oct 10 06:52:45 2026 GMT Subject: CN=53BBA00F1770A11DACF467FCD1E29F0F92BEA62B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:3c:c8:99:de:e7:c5:09:5d:6a:1b:2d:fa: a6:3d:26:83:58:2a:f8:41:39:58:9c:5e:df:0d:12: 57:e3:5a:c3:17:52:1a:de:52:4a:98:62:11:19:75: d0:8e:84:04:26:4d:8b:58:74:e5:87:1a:fd:88:89: b6:ad:c6:71:5a:e2:d7:36:d0:c1:5b:83:cc:e8:c5: 9d:48:65:b1:3d:fa:b6:68:6a:7b:5b:a5:d1:b7:ce: ac:3d:78:07:ca:d5:84:df:06:ea:7b:d6:91:2c:2f: 6c:3f:29:38:80:58:be:c6:62:ae:4b:e5:e2:11:b4: d8:73:35:b8:c1:94:9b:fa:92:85:f0:a1:aa:ac:24: 23:4f:1e:f0:ab:4e:22:b9:62:6a:33:69:1b:c4:63: 78:42:ae:98:c3:2f:34:57:52:e9:03:6c:04:ed:5d: 27:8b:59:26:2b:99:94:7d:15:5d:52:05:b6:e1:e0: 6d:6a:4f:b3:c2:9a:22:5e:0d:36:ee:a7:63:05:84: 6f:8f:c9:88:a4:8b:ee:b6:36:06:d5:2f:24:86:34: dc:30:74:bd:60:19:dc:d8:49:17:7c:b1:8d:88:45: ae:ef:60:a8:f5:50:55:e7:db:6e:71:df:85:12:71: a0:bd:2c:99:43:76:b4:16:82:0b:4b:d8:2e:b6:47: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BB:A0:0F:17:70:A1:1D:AC:F4:67:FC:D1:E2:9F:0F:92:BE:A6:2B X509v3 Authority Key Identifier: keyid:9B:4E:A0:A4:C7:10:99:FC:C5:03:47:53:E8:F8:BF:1A:B6:61:01:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/U7ugDxdwoR2s9Gf80eKfD5K-pis.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.194.255.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:3e:40:86:ec:09:8f:84:0f:ed:ae:ab:78:71:64:fc:6c:40: e7:7b:5f:3e:3e:b7:24:89:ba:b4:ae:10:e7:21:cd:49:54:3d: 8a:08:61:b5:26:03:87:ac:be:3f:dc:4b:a5:7f:0b:33:17:2a: fa:0d:2a:78:da:5c:ec:d6:77:6d:66:3d:0c:88:e6:da:27:47: 39:0e:f1:ea:ae:5b:06:1c:16:6f:5c:ba:6a:b0:62:d7:20:65: 8a:99:a5:0c:f9:5c:81:75:04:8f:43:b5:17:c7:67:aa:81:4b: 5e:f2:ee:03:c6:9b:90:d7:e0:2a:78:8e:8d:0f:f4:26:ad:ab: 6b:a9:a9:65:93:e0:6f:17:5c:bd:06:cd:78:61:bb:c8:15:0f: 92:be:17:89:4a:1d:6f:f9:46:06:8d:97:4c:97:81:5e:51:d7: be:a2:a3:35:9e:82:59:04:3b:57:53:72:a4:93:5c:94:09:42: 82:69:87:2f:c3:ff:f1:71:0f:53:09:fd:83:65:6f:e7:01:30: a7:bc:d8:58:fd:27:a5:e4:5f:0b:79:55:32:a5:5f:3e:cc:e4: 9b:91:0a:b3:ea:9a:33:9c:28:0f:ca:a4:4b:5f:32:44:61:96: 1d:03:e0:f5:de:b4:9b:9b:5d:0c:ee:d3:ff:8e:ee:ed:4e:f9: bc:72:45:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QjRF QTBBNEM3MTA5OUZDQzUwMzQ3NTNFOEY4QkYxQUI2NjEwMUQ3MB4XDTI1MTAxMDA3 MzQ1NFoXDTI2MTAxMDA2NTI0NVowMzExMC8GA1UEAxMoNTNCQkEwMEYxNzcwQTEx REFDRjQ2N0ZDRDFFMjlGMEY5MkJFQTYyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALbnPMiZ3ufFCV1qGy36pj0mg1gq+EE5WJxe3w0SV+NawxdSGt5S SphiERl10I6EBCZNi1h05Yca/YiJtq3GcVri1zbQwVuDzOjFnUhlsT36tmhqe1ul 0bfOrD14B8rVhN8G6nvWkSwvbD8pOIBYvsZirkvl4hG02HM1uMGUm/qShfChqqwk I08e8KtOIrliajNpG8RjeEKumMMvNFdS6QNsBO1dJ4tZJiuZlH0VXVIFtuHgbWpP s8KaIl4NNu6nYwWEb4/JiKSL7rY2BtUvJIY03DB0vWAZ3NhJF3yxjYhFru9gqPVQ VefbbnHfhRJxoL0smUN2tBaCC0vYLrZHPOMCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRTu6APF3ChHaz0Z/zR4p8Pkr6mKzAfBgNVHSMEGDAWgBSbTqCkxxCZ/MUDR1Po +L8atmEB1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM0NC9tMDZncE1jUW1mekZBMGRUNlBpX0dyWmhBZGMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9tMDZncE1jUW1mekZBMGRUNlBpX0dy WmhBZGMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM0NC9VN3VnRHhkd29SMnM5R2Y4MGVLZkQ1Sy1waXMucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAhcL/MA0GCSqGSIb3DQEBCwUAA4IBAQAaPkCG7AmPhA/trqt4cWT8bEDn e18+Prckibq0rhDnIc1JVD2KCGG1JgOHrL4/3EulfwszFyr6DSp42lzs1ndtZj0M iObaJ0c5DvHqrlsGHBZvXLpqsGLXIGWKmaUM+VyBdQSPQ7UXx2eqgUte8u4DxpuQ 1+AqeI6ND/Qmratrqallk+BvF1y9Bs14YbvIFQ+SvheJSh1v+UYGjZdMl4FeUde+ oqM1noJZBDtXU3Kkk1yUCUKCaYcvw//xcQ9TCf2DZW/nATCnvNhY/Sel5F8LeVUy pV8+zOSbkQqz6poznCgPyqRLXzJEYZYdA+D13rSbm10M7tP/ju7tTvm8ckXW -----END CERTIFICATE-----Generated at Mon Oct 20 13:38:06 2025 by rpki-client