$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/qeKT3NBI-qW8XQSOSK7MFr1o25Q.roa File: qeKT3NBI-qW8XQSOSK7MFr1o25Q.roa (raw, json) Hash identifier: qNkoZ5qWAJCMJ8/Ehl9ni479FdWBMJDV669Rfns2ivc= Subject key identifier: A9:E2:93:DC:D0:48:FA:A5:BC:5D:04:8E:48:AE:CC:16:BD:68:DB:94 Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Certificate serial: 63 Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qeKT3NBI-qW8XQSOSK7MFr1o25Q.roa Signing time: Wed 01 Oct 2025 01:30:17 +0000 ROA not before: Wed 01 Oct 2025 01:30:17 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 9621 IP address blocks: 157.120.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Validity Not Before: Oct 1 01:30:17 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=A9E293DCD048FAA5BC5D048E48AECC16BD68DB94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:dd:d2:c8:b8:78:86:20:cc:81:fa:95:bd: 42:91:80:14:50:e0:5d:53:94:e6:21:5b:de:ff:47: e7:a7:4a:e0:63:61:1e:e1:b3:fd:13:93:99:c2:4a: 6b:be:8c:14:a2:46:a7:7a:cb:9f:21:df:00:06:89: bd:75:85:2e:5d:df:fd:23:ea:04:c1:5a:dd:14:35: c5:b6:81:31:d2:37:86:e9:a3:7a:37:3e:f7:c9:a8: 47:15:8a:44:b6:a4:df:7d:39:54:99:93:a3:39:b4: 0c:04:39:29:4f:77:30:0b:cd:07:41:df:1d:d4:77: 3a:4e:1a:0d:5f:7b:4b:c8:d6:4a:38:b6:1a:82:df: e1:6c:60:58:f4:36:6c:f0:57:4e:a4:54:84:a9:23: 19:bb:3c:bf:5d:18:f6:29:8b:9d:2b:fa:82:f6:37: 5a:51:2f:bd:c2:ff:d1:dd:88:c4:b2:67:b8:93:1d: 8a:7e:d3:11:26:7c:fb:0a:8a:d7:fb:32:49:f0:22: 95:ce:71:bf:a1:16:63:1d:b3:8a:6c:26:a1:39:44: 68:6b:58:04:37:93:fb:20:67:c3:7c:02:7a:e4:3a: 26:8d:17:f8:25:35:7a:6b:01:64:fe:57:15:b1:67: cb:39:5b:b8:69:97:a2:41:54:2f:09:74:9e:49:3b: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:93:DC:D0:48:FA:A5:BC:5D:04:8E:48:AE:CC:16:BD:68:DB:94 X509v3 Authority Key Identifier: keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qeKT3NBI-qW8XQSOSK7MFr1o25Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.120.96.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:cc:48:8a:e6:da:64:1b:9d:fb:99:8b:48:50:f3:3c:d7:83: 92:10:40:f7:a2:d1:5c:c4:80:39:4f:b6:e5:14:e0:83:cc:fc: 4b:51:c5:d7:29:6b:7c:d2:30:58:49:c0:39:43:28:ba:12:d5: 29:7f:8c:33:24:56:36:91:98:a8:97:2a:69:c6:27:2f:37:de: 1d:dc:75:61:5c:8e:77:94:39:a0:d3:8d:d4:a5:20:be:05:0a: 2a:9c:dc:b6:a0:79:35:6e:81:e2:3b:c4:d7:29:10:70:32:8c: e6:e4:3e:00:a2:b7:67:5e:46:fd:78:38:e5:0d:c4:ff:c0:c6: 73:9b:a2:9e:fa:4e:39:cb:5b:5d:eb:56:22:f5:7a:de:a3:41: 9f:fe:12:62:94:2a:e2:1a:f6:9d:22:73:6c:8b:1b:35:dc:2b: f7:71:07:f5:41:d4:38:2e:8a:5d:fe:86:06:cb:8a:c4:6b:b2: ba:c5:5a:48:d4:53:92:b1:98:38:d3:d5:02:92:9d:31:20:8d: 6c:f7:95:19:01:8e:68:d9:14:b8:be:56:e4:af:3f:7e:3a:69: c0:87:a3:1e:ea:83:63:77:d5:31:c4:cf:93:c6:7b:ad:ec:35: 40:1b:6f:97:e9:24:de:41:5b:29:1e:f8:f7:10:38:22:f0:24: ff:9b:37:c6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjkw MEYxRTMxMjZFNjA5RUY0RjFBMEZCODU1RUI0REU0RTNBMThBMB4XDTI1MTAwMTAx MzAxN1oXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQTlFMjkzRENEMDQ4RkFB NUJDNUQwNDhFNDhBRUNDMTZCRDY4REI5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALRS3dLIuHiGIMyB+pW9QpGAFFDgXVOU5iFb3v9H56dK4GNhHuGz /ROTmcJKa76MFKJGp3rLnyHfAAaJvXWFLl3f/SPqBMFa3RQ1xbaBMdI3humjejc+ 98moRxWKRLak3305VJmTozm0DAQ5KU93MAvNB0HfHdR3Ok4aDV97S8jWSji2GoLf 4WxgWPQ2bPBXTqRUhKkjGbs8v10Y9imLnSv6gvY3WlEvvcL/0d2IxLJnuJMdin7T ESZ8+wqK1/sySfAilc5xv6EWYx2zimwmoTlEaGtYBDeT+yBnw3wCeuQ6Jo0X+CU1 emsBZP5XFbFnyzlbuGmXokFULwl0nkk7eysCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSp4pPc0Ej6pbxdBI5IrswWvWjblDAfBgNVHSMEGDAWgBTWkA8eMSbmCe9PGg+4 VetN5OOhijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3LzFwQVBIakVtNWdudlR4b1B1RlhyVGVUam9Zby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFwQVBIakVtNWdudlR4b1B1RlhyVGVU am9Zby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvcWVLVDNOQkktcVc4WFFTT1NLN01GcjFvMjVRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ14YDANBgkqhkiG9w0BAQsFAAOCAQEALMxIiubaZBud+5mLSFDzPNeDkhBA 96LRXMSAOU+25RTgg8z8S1HF1ylrfNIwWEnAOUMouhLVKX+MMyRWNpGYqJcqacYn LzfeHdx1YVyOd5Q5oNON1KUgvgUKKpzctqB5NW6B4jvE1ykQcDKM5uQ+AKK3Z15G /Xg45Q3E/8DGc5uinvpOOctbXetWIvV63qNBn/4SYpQq4hr2nSJzbIsbNdwr93EH 9UHUOC6KXf6GBsuKxGuyusVaSNRTkrGYONPVApKdMSCNbPeVGQGOaNkUuL5W5K8/ fjppwIejHuqDY3fVMcTPk8Z7rew1QBtvl+kk3kFbKR749xA4IvAk/5s3xg== -----END CERTIFICATE-----Generated at Tue Oct 21 06:43:57 2025 by rpki-client