$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/KK4fOhWvLfNTJGrPnyYJA5W8Le4.roa File: KK4fOhWvLfNTJGrPnyYJA5W8Le4.roa (raw, json) Hash identifier: X8n+C019MbPpeYHvEtYbe3MFMPja8vOtttqWIc03sBQ= Subject key identifier: 28:AE:1F:3A:15:AF:2D:F3:53:24:6A:CF:9F:26:09:03:95:BC:2D:EE Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 69 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/KK4fOhWvLfNTJGrPnyYJA5W8Le4.roa Signing time: Wed 01 Oct 2025 01:29:44 +0000 ROA not before: Wed 01 Oct 2025 01:29:44 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 131925 IP address blocks: 160.237.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Oct 1 01:29:44 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=28AE1F3A15AF2DF353246ACF9F26090395BC2DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:21:2b:55:8e:c2:06:bb:ab:73:3b:81:70: 3c:e0:34:17:42:f5:5f:85:f6:ec:c7:b2:60:b0:cf: 36:67:b7:6b:93:df:be:8e:0e:f1:bb:e4:4b:57:89: 6a:1b:f1:88:60:df:74:5a:2c:5b:22:de:89:4f:a7: 55:a2:df:05:7b:e7:c5:e0:5d:0c:c6:f9:78:cb:12: 07:e6:f2:fa:d1:44:00:eb:d2:db:5e:b1:80:90:31: 39:9b:e2:d2:21:f2:0c:77:aa:ab:16:a7:7e:83:87: 0a:a9:63:3d:3c:7b:8a:42:da:11:8c:94:f5:58:26: a4:7b:07:1b:7b:d2:b5:a0:fe:a2:39:9a:c5:2f:40: e4:2e:e5:82:d5:13:55:63:b6:14:fe:17:53:08:19: 41:1e:03:45:99:8e:6c:3b:09:9d:30:30:ec:af:8d: 73:31:42:9c:d3:29:3c:5d:9f:25:f5:91:cb:f6:43: 2a:93:1a:56:a5:6f:90:f0:67:88:72:66:4c:40:8f: 32:77:bc:31:1f:a6:ae:c5:bb:f9:96:f9:eb:eb:2a: f6:ac:0c:46:16:ae:7f:62:be:87:6c:95:50:29:ac: 60:4d:dc:39:3e:02:b7:f6:0f:eb:94:8b:72:90:6a: 9c:7c:79:f9:ab:c7:64:d1:85:d6:c6:65:35:35:94: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AE:1F:3A:15:AF:2D:F3:53:24:6A:CF:9F:26:09:03:95:BC:2D:EE X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/KK4fOhWvLfNTJGrPnyYJA5W8Le4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.237.190.0/24 Signature Algorithm: sha256WithRSAEncryption b3:90:18:cb:3f:8c:b6:94:45:d9:ce:19:f0:1c:5b:81:10:63: 23:66:7e:bf:dc:ef:2c:8e:3c:6f:29:fe:b3:6d:7c:f7:73:97: d6:26:a2:b7:03:17:4d:3b:5a:7d:e8:c0:ae:62:f8:21:a8:a6: ac:1c:f7:f5:e0:67:db:4c:7b:27:1b:81:a6:91:d6:b2:c5:5d: 95:26:37:2c:4c:87:cb:97:ea:30:69:94:27:58:19:66:b7:bc: d8:ab:ea:89:47:21:b1:fd:2a:0d:b6:77:cc:d3:15:21:0f:29: 24:a7:66:b4:b0:b7:54:e6:d3:8f:b6:76:e1:65:e0:a0:6d:40: 1a:18:44:06:e7:47:71:79:8e:9b:91:67:16:b2:1f:e6:76:9b: 69:a0:4f:23:f9:bb:53:75:dd:e3:9f:48:90:6e:80:ce:20:f6: d0:24:fb:65:50:53:60:78:da:f4:6c:6d:bb:55:a3:1a:02:29: bb:6e:e0:1c:07:78:39:be:e2:f0:86:c9:05:90:b0:c9:f5:fc: 36:06:2d:77:8c:d2:2f:c7:87:38:03:d3:f5:47:d6:6e:d0:e6: 7d:76:f3:66:88:31:15:2f:0d:2d:8c:d0:b6:78:ed:2a:98:b0: 12:95:8b:27:a0:38:8f:27:ce:fd:72:62:86:95:4a:2a:55:43: 3f:98:04:1a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTI1MTAwMTAx Mjk0NFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMjhBRTFGM0ExNUFGMkRG MzUzMjQ2QUNGOUYyNjA5MDM5NUJDMkRFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALJQIStVjsIGu6tzO4FwPOA0F0L1X4X27MeyYLDPNme3a5Pfvo4O 8bvkS1eJahvxiGDfdFosWyLeiU+nVaLfBXvnxeBdDMb5eMsSB+by+tFEAOvS216x gJAxOZvi0iHyDHeqqxanfoOHCqljPTx7ikLaEYyU9VgmpHsHG3vStaD+ojmaxS9A 5C7lgtUTVWO2FP4XUwgZQR4DRZmObDsJnTAw7K+NczFCnNMpPF2fJfWRy/ZDKpMa VqVvkPBniHJmTECPMne8MR+mrsW7+Zb56+sq9qwMRhauf2K+h2yVUCmsYE3cOT4C t/YP65SLcpBqnHx5+avHZNGF1sZlNTWUN90CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQorh86Fa8t81Mkas+fJgkDlbwt7jAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvS0s0Zk9oV3ZMZk5USkdyUG55WUpBNVc4TGU0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKDtvjANBgkqhkiG9w0BAQsFAAOCAQEAs5AYyz+MtpRF2c4Z8BxbgRBjI2Z+ v9zvLI48byn+s21893OX1iaitwMXTTtafejArmL4IaimrBz39eBn20x7JxuBppHW ssVdlSY3LEyHy5fqMGmUJ1gZZre82KvqiUchsf0qDbZ3zNMVIQ8pJKdmtLC3VObT j7Z24WXgoG1AGhhEBudHcXmOm5FnFrIf5nabaaBPI/m7U3Xd459IkG6AziD20CT7 ZVBTYHja9Gxtu1WjGgIpu27gHAd4Ob7i8IbJBZCwyfX8NgYtd4zSL8eHOAPT9UfW btDmfXbzZogxFS8NLYzQtnjtKpiwEpWLJ6A4jyfO/XJihpVKKlVDP5gEGg== -----END CERTIFICATE-----Generated at Tue Oct 21 08:04:33 2025 by rpki-client