$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/DmjTLFHbVjGTqJ39_428-jWzF4k.roa File: DmjTLFHbVjGTqJ39_428-jWzF4k.roa (raw, json) Hash identifier: zqCFFbJivEjwPsvdeuku7F0TJAeEB0eVlcmUazoaJtM= Subject key identifier: 0E:68:D3:2C:51:DB:56:31:93:A8:9D:FD:FF:8D:BC:FA:35:B3:17:89 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0470 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DmjTLFHbVjGTqJ39_428-jWzF4k.roa Signing time: Wed 01 Oct 2025 01:34:48 +0000 ROA not before: Wed 01 Oct 2025 01:34:48 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 111.234.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 09:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:48 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=0E68D32C51DB563193A89DFDFF8DBCFA35B31789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:c9:23:ab:75:e0:be:5e:56:ec:d0:76:d6: 65:22:52:1e:d3:e2:ff:b6:6c:ba:07:79:50:c4:f4: f1:f5:e0:24:bd:af:3f:22:f8:4c:a3:2f:74:50:74: e3:f3:4d:02:12:ff:3c:f7:31:c3:88:15:b5:bc:58: e7:df:c0:b1:83:e0:39:fd:a4:b4:8a:4d:c9:bf:b8: b6:ac:70:4a:cf:79:43:6b:b4:4d:31:0e:17:b6:1c: 6b:f9:18:57:cf:21:04:ec:3d:2c:17:23:78:98:5d: 20:0d:91:24:9b:6e:58:ed:72:78:02:43:ba:fc:9a: cb:87:6c:d6:3d:bf:be:a5:ee:1c:5d:a4:62:85:ac: 7b:4f:d1:1c:49:09:be:b7:aa:f8:48:ec:45:c6:2f: 6a:4c:af:91:1f:eb:8c:ac:b8:2b:71:a5:17:7c:26: fd:bb:b9:e1:b1:53:e7:3f:cc:0c:ee:92:6c:45:77: 14:ed:4b:47:0f:27:66:42:1a:9e:42:47:45:5e:cf: a6:e3:42:67:95:cc:d2:da:ef:49:41:ac:0a:f7:23: 7a:cf:ec:f9:c3:c2:b1:7e:e4:64:71:3c:cc:f5:98: 40:0a:2e:31:3f:c6:4e:8c:eb:12:8f:bc:57:02:35: 30:4f:1a:7d:3a:41:f2:c9:5d:78:66:92:ae:89:8e: 35:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:D3:2C:51:DB:56:31:93:A8:9D:FD:FF:8D:BC:FA:35:B3:17:89 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DmjTLFHbVjGTqJ39_428-jWzF4k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.234.240.0/22 Signature Algorithm: sha256WithRSAEncryption 54:89:4f:f7:ab:70:ac:5f:bb:22:c7:80:f2:ca:36:39:53:6e: 8d:fe:73:82:b5:17:6c:a0:9d:a3:5a:05:78:1b:0c:95:01:a2: 0b:bf:68:f2:5f:ab:14:f8:d3:92:f9:68:2f:37:7f:ac:07:82: 79:e3:d7:b3:e9:f7:90:95:e2:8d:23:17:70:14:4b:81:bc:9c: 50:2b:76:27:4a:74:d3:97:31:89:21:e2:b9:0e:b1:86:ae:7d: ef:08:fd:7a:5d:c2:55:72:66:57:8b:c4:0e:e8:b6:43:3e:a6: 94:5f:bf:de:f1:5e:09:3d:47:a5:f2:70:1f:f1:df:05:af:a8: d9:c5:14:98:a4:4d:62:74:5f:98:51:e3:7f:ff:3a:f6:2f:17: 1a:d3:a8:98:d3:37:f7:14:01:89:f3:76:89:08:9c:59:62:50: 70:0e:a5:38:fe:ee:cc:76:cd:d0:08:5c:42:72:59:35:c5:28: c8:05:c8:50:e0:0c:6e:71:ac:b7:a8:02:63:73:72:21:01:2a: 90:ae:48:dc:84:77:d2:52:c7:c3:45:47:a5:35:9b:a1:58:b6: 2d:16:02:1c:15:38:0a:76:1e:59:87:da:58:fb:fc:52:1e:3f: c5:4a:12:4d:b8:26:ee:ea:ef:f9:1f:92:22:4b:03:14:18:15: f7:f6:5b:58 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NDhaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBFNjhEMzJDNTFEQjU2 MzE5M0E4OURGREZGOERCQ0ZBMzVCMzE3ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxfMkjq3Xgvl5W7NB21mUiUh7T4v+2bLoHeVDE9PH14CS9rz8i +EyjL3RQdOPzTQIS/zz3McOIFbW8WOffwLGD4Dn9pLSKTcm/uLascErPeUNrtE0x Dhe2HGv5GFfPIQTsPSwXI3iYXSANkSSbbljtcngCQ7r8msuHbNY9v76l7hxdpGKF rHtP0RxJCb63qvhI7EXGL2pMr5Ef64ysuCtxpRd8Jv27ueGxU+c/zAzukmxFdxTt S0cPJ2ZCGp5CR0Vez6bjQmeVzNLa70lBrAr3I3rP7PnDwrF+5GRxPMz1mEAKLjE/ xk6M6xKPvFcCNTBPGn06QfLJXXhmkq6JjjXxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDmjTLFHbVjGTqJ39/428+jWzF4kwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0RtalRMRkhiVmpHVHFKMzlfNDI4LWpXekY0ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJv6vAwDQYJKoZIhvcNAQELBQADggEBAFSJT/ercKxfuyLHgPLKNjlTbo3+ c4K1F2ygnaNaBXgbDJUBogu/aPJfqxT405L5aC83f6wHgnnj17Pp95CV4o0jF3AU S4G8nFArdidKdNOXMYkh4rkOsYaufe8I/XpdwlVyZleLxA7otkM+ppRfv97xXgk9 R6XycB/x3wWvqNnFFJikTWJ0X5hR43//OvYvFxrTqJjTN/cUAYnzdokInFliUHAO pTj+7sx2zdAIXEJyWTXFKMgFyFDgDG5xrLeoAmNzciEBKpCuSNyEd9JSx8NFR6U1 m6FYti0WAhwVOAp2HlmH2lj7/FIeP8VKEk24Ju7q7/kfkiJLAxQYFff2W1g= -----END CERTIFICATE-----Generated at Mon Oct 20 12:10:08 2025 by rpki-client