$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/J-XumTStBQ-xLz93RwcvaowEjwA.roa File: J-XumTStBQ-xLz93RwcvaowEjwA.roa (raw, json) Hash identifier: crm9+RdAVLNjiA3o/YQZWmKtchcSzE7DLmwSeyXg37g= Subject key identifier: 27:E5:EE:99:34:AD:05:0F:B1:2F:3F:77:47:07:2F:6A:8C:04:8F:00 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03F3 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/J-XumTStBQ-xLz93RwcvaowEjwA.roa Signing time: Thu 01 May 2025 01:45:17 +0000 ROA not before: Thu 01 May 2025 01:45:17 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 220.150.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:17 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=27E5EE9934AD050FB12F3F7747072F6A8C048F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:a9:ae:e9:0b:4f:ca:04:17:79:ca:51:a7: 98:ee:af:36:7b:19:d7:c0:2b:58:16:aa:f7:75:1e: f2:70:de:1a:55:c0:1f:da:d7:24:3c:90:d8:7e:02: 54:5b:90:e7:ff:c3:98:96:79:5e:30:7f:22:23:e4: 26:28:a1:b6:e5:98:32:14:17:d0:ea:81:df:0f:22: e5:1c:56:5e:15:cd:64:c0:24:db:79:ab:f6:30:33: ea:90:3c:45:63:6b:02:ff:e9:99:49:fe:0c:a8:13: 94:36:02:22:b2:77:ed:f2:84:2a:56:72:8d:19:fe: a9:37:ec:5b:90:f7:00:a0:ba:11:91:6a:b6:fa:df: 35:33:4c:f0:ea:e5:7c:18:ce:d8:df:ec:11:8a:1c: bf:05:27:d7:e6:b3:ad:60:86:60:b8:c8:71:1a:0a: 3d:ea:cd:d7:06:cd:52:13:46:d0:df:76:6f:2d:db: b4:f0:43:a7:0c:ad:80:90:3c:bb:3e:90:ca:76:51: a6:43:f4:0d:06:9f:6b:66:f2:78:88:e9:58:d1:7c: 0c:15:d8:f8:88:f8:01:7e:a7:c0:65:9b:4c:7f:bb: 88:94:a5:a4:a8:e0:80:00:a7:e2:af:c2:3b:f9:83: 43:93:3b:72:ce:b6:1e:70:83:09:e8:3f:06:db:f8: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E5:EE:99:34:AD:05:0F:B1:2F:3F:77:47:07:2F:6A:8C:04:8F:00 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/J-XumTStBQ-xLz93RwcvaowEjwA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.150.208.0/21 Signature Algorithm: sha256WithRSAEncryption 49:a4:e9:2e:2f:c4:51:43:5b:fe:f2:a4:9d:60:90:7c:0d:58: 12:19:3b:be:33:5d:24:02:47:0d:2c:c3:2c:02:c9:62:7f:88: 2c:c4:52:4a:bf:59:0a:e7:5e:01:c1:01:33:38:17:fe:e7:8f: 0e:b4:28:80:19:d7:f7:8a:33:ab:e2:3c:06:22:d2:2b:f1:0d: df:c1:5c:df:e4:19:8f:35:0c:1c:e8:1c:6c:dc:68:d6:7f:d0: 29:97:39:9e:33:2f:b0:d0:7a:51:5c:dd:fc:ee:3b:c8:73:12: 1c:d1:25:c5:4a:80:07:37:36:bb:bd:43:55:68:89:07:5d:0a: 8b:7a:8d:1d:3e:b9:17:9f:4f:d9:5e:6e:8a:2d:77:67:5e:06: 3f:a1:38:40:22:93:b3:74:88:55:c3:0e:b5:d6:17:1a:5a:9e: f8:ef:0a:50:d9:69:00:e7:19:8d:6b:5b:6a:4c:1a:3a:6e:9f: 18:f0:d4:a3:10:93:6d:d1:f1:0f:0b:67:2f:e5:fa:fd:38:4d: 51:61:d5:52:5a:eb:f8:7a:5e:d4:ed:a9:55:0d:8b:9f:2c:16: 07:c2:70:69:4a:3a:da:69:97:34:b2:0e:9d:45:3b:3a:da:ef: c3:7c:24:ad:8d:a2:ae:e9:c2:19:94:6a:0b:cc:fb:8d:ce:ef: 6c:62:4c:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MTdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI3RTVFRTk5MzRBRDA1 MEZCMTJGM0Y3NzQ3MDcyRjZBOEMwNDhGMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOLamu6QtPygQXecpRp5jurzZ7GdfAK1gWqvd1HvJw3hpVwB/a 1yQ8kNh+AlRbkOf/w5iWeV4wfyIj5CYoobblmDIUF9Dqgd8PIuUcVl4VzWTAJNt5 q/YwM+qQPEVjawL/6ZlJ/gyoE5Q2AiKyd+3yhCpWco0Z/qk37FuQ9wCguhGRarb6 3zUzTPDq5XwYztjf7BGKHL8FJ9fms61ghmC4yHEaCj3qzdcGzVITRtDfdm8t27Tw Q6cMrYCQPLs+kMp2UaZD9A0Gn2tm8niI6VjRfAwV2PiI+AF+p8Blm0x/u4iUpaSo 4IAAp+Kvwjv5g0OTO3LOth5wgwnoPwbb+H+LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJ+XumTStBQ+xLz93RwcvaowEjwAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0otWHVtVFN0QlEteEx6OTNSd2N2YW93RWp3QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPcltAwDQYJKoZIhvcNAQELBQADggEBAEmk6S4vxFFDW/7ypJ1gkHwNWBIZ O74zXSQCRw0swywCyWJ/iCzEUkq/WQrnXgHBATM4F/7njw60KIAZ1/eKM6viPAYi 0ivxDd/BXN/kGY81DBzoHGzcaNZ/0CmXOZ4zL7DQelFc3fzuO8hzEhzRJcVKgAc3 Nru9Q1VoiQddCot6jR0+uRefT9lebootd2deBj+hOEAik7N0iFXDDrXWFxpanvjv ClDZaQDnGY1rW2pMGjpunxjw1KMQk23R8Q8LZy/l+v04TVFh1VJa6/h6XtTtqVUN i58sFgfCcGlKOtpplzSyDp1FOzra78N8JK2Noq7pwhmUagvM+43O72xiTFI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:42:29 2025 by rpki-client