$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0PQ5gabthZDmgxrZtaxdSKgMKeE.roa File: 0PQ5gabthZDmgxrZtaxdSKgMKeE.roa (raw, json) Hash identifier: bVDFEcz6K79ZMtbyuULqp33/5iMqYQ7WFh7s5UInMBg= Subject key identifier: D0:F4:39:81:A6:ED:85:90:E6:83:1A:D9:B5:AC:5D:48:A8:0C:29:E1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FD8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0PQ5gabthZDmgxrZtaxdSKgMKeE.roa Signing time: Fri 10 Oct 2025 05:10:20 +0000 ROA not before: Fri 10 Oct 2025 05:10:20 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4056 (0xfd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Oct 10 05:10:20 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=D0F43981A6ED8590E6831AD9B5AC5D48A80C29E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:ed:7c:41:1e:b1:88:ba:76:72:74:64:ce: 0e:03:f2:01:cd:ee:5a:ef:57:c1:05:a7:53:9a:ca: 6c:c1:e1:84:b0:1b:a7:4b:4d:8f:e9:49:77:ae:2e: 9b:11:44:86:71:87:ed:db:93:54:cd:8c:c2:88:ed: bc:82:d4:29:02:6b:89:a6:fc:11:0e:7e:27:d8:3d: e5:6f:94:b7:bb:14:12:d1:ef:20:1f:9f:c2:5a:7b: 63:eb:95:ea:de:9d:90:56:b2:89:1d:f6:65:d3:30: 9a:62:73:fa:c5:dd:77:63:7e:47:9a:37:df:98:ed: 5a:2a:56:8a:39:ad:d4:83:72:ad:7e:73:49:d2:89: a4:28:1e:f0:ed:6b:0a:db:81:e5:af:8f:72:9d:fe: 92:82:a1:5e:8f:d0:e4:5a:5e:8c:de:42:8c:d7:9a: 71:e2:ca:df:61:cf:bf:15:a1:ea:45:99:a7:b7:75: 44:83:8f:b8:50:4f:c3:6d:9c:6b:67:4a:16:67:49: dc:2e:15:40:39:09:4e:7a:c8:7f:40:3b:e2:8f:53: ea:9c:36:35:cf:03:68:91:87:1f:3a:3e:68:25:66: 1d:c5:33:29:e9:a9:17:fd:3a:6e:73:76:00:e7:45: 4a:1f:7a:0d:63:5a:a1:09:93:58:a8:08:d9:c1:d3: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F4:39:81:A6:ED:85:90:E6:83:1A:D9:B5:AC:5D:48:A8:0C:29:E1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0PQ5gabthZDmgxrZtaxdSKgMKeE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.207.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:f2:d4:12:45:1c:53:9c:ff:ae:07:9d:fc:64:4a:6a:83:91: 4c:37:a2:49:59:fc:7a:25:95:64:5a:92:a5:1a:09:4d:77:9e: c2:12:17:9c:17:e3:86:20:b0:3c:3a:6b:a6:74:5b:5f:e7:a2: 0d:7d:8c:53:ac:55:74:b1:01:30:4b:c4:c4:5f:34:95:c2:c3: f1:a1:d6:a0:19:86:1d:c2:cf:55:06:25:0a:96:cf:23:bd:88: 0a:dd:24:80:0f:4d:40:39:a4:9f:13:af:26:74:92:fb:ba:85: ab:9c:83:4a:1d:c1:3b:17:fc:f1:d3:85:33:d2:1b:c8:72:3e: 22:72:df:88:14:a7:48:c6:dd:e0:62:d3:0e:7a:67:75:7e:dd: 56:0b:ad:f0:d4:48:5b:fd:1c:0e:20:33:10:bb:f1:6d:42:e6: 31:15:c1:2d:dd:04:3c:75:38:82:82:0d:14:93:df:0b:09:13: ba:ab:5f:53:7d:a6:66:d0:5a:a9:bc:5e:18:61:b0:17:7e:b5: e0:c4:8d:84:07:30:a0:7c:30:e6:36:71:a5:2d:35:d7:d5:62: 67:7e:99:dd:3b:4f:1f:07:c1:d6:4d:f5:84:2c:27:8b:d3:a3: de:83:e2:a7:55:35:01:db:ff:b4:55:5d:51:66:5e:6d:4c:b3: dd:2d:00:11 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTEwMTAw NTEwMjBaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQwRjQzOTgxQTZFRDg1 OTBFNjgzMUFEOUI1QUM1RDQ4QTgwQzI5RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT2u18QR6xiLp2cnRkzg4D8gHN7lrvV8EFp1OaymzB4YSwG6dL TY/pSXeuLpsRRIZxh+3bk1TNjMKI7byC1CkCa4mm/BEOfifYPeVvlLe7FBLR7yAf n8Jae2PrlerenZBWsokd9mXTMJpic/rF3XdjfkeaN9+Y7VoqVoo5rdSDcq1+c0nS iaQoHvDtawrbgeWvj3Kd/pKCoV6P0ORaXozeQozXmnHiyt9hz78VoepFmae3dUSD j7hQT8NtnGtnShZnSdwuFUA5CU56yH9AO+KPU+qcNjXPA2iRhx86PmglZh3FMynp qRf9Om5zdgDnRUofeg1jWqEJk1ioCNnB0xMbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0PQ5gabthZDmgxrZtaxdSKgMKeEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBQUTVnYWJ0aFpEbWd4clp0YXhkU0tnTUtlRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcn88wDQYJKoZIhvcNAQELBQADggEBAHvy1BJFHFOc/64HnfxkSmqDkUw3 oklZ/HollWRakqUaCU13nsISF5wX44YgsDw6a6Z0W1/nog19jFOsVXSxATBLxMRf NJXCw/Gh1qAZhh3Cz1UGJQqWzyO9iArdJIAPTUA5pJ8TryZ0kvu6haucg0odwTsX /PHThTPSG8hyPiJy34gUp0jG3eBi0w56Z3V+3VYLrfDUSFv9HA4gMxC78W1C5jEV wS3dBDx1OIKCDRST3wsJE7qrX1N9pmbQWqm8XhhhsBd+teDEjYQHMKB8MOY2caUt NdfVYmd+md07Tx8HwdZN9YQsJ4vTo96D4qdVNQHb/7RVXVFmXm1Ms90tABE= -----END CERTIFICATE-----Generated at Mon Oct 20 18:41:11 2025 by rpki-client