$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/McJvsyAIw6dOc_A5nwUquff6duY.roa File: McJvsyAIw6dOc_A5nwUquff6duY.roa (raw, json) Hash identifier: I7VSKUIxT2ARvR8uuzeXUexyjTRBgbgx8ZqgYfOuGFo= Subject key identifier: 31:C2:6F:B3:20:08:C3:A7:4E:73:F0:39:9F:05:2A:B9:F7:FA:76:E6 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0488 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/McJvsyAIw6dOc_A5nwUquff6duY.roa Signing time: Wed 01 Oct 2025 01:39:55 +0000 ROA not before: Wed 01 Oct 2025 01:39:55 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 180.131.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 09:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:39:55 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=31C26FB32008C3A74E73F0399F052AB9F7FA76E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bd:2f:87:48:4d:e5:44:3c:75:b7:16:53:29: e5:8f:19:dc:04:b7:78:ca:ef:21:2b:59:22:1b:82: c5:df:0c:cd:09:e7:e6:a6:58:86:5a:74:25:de:84: a9:3a:20:82:07:1f:24:b9:90:dc:d0:47:79:bd:2c: 3a:15:b3:66:dc:cc:ea:fb:fc:11:db:8b:f2:6c:e7: 65:10:53:88:49:79:8e:f4:c2:ac:c6:d6:3c:67:c4: 6b:50:e8:f5:85:ff:2e:fa:f3:74:8e:5c:74:64:a1: 2b:52:ac:d3:ab:0c:6e:c5:c3:c5:96:92:1e:6f:79: 9c:2c:58:22:e9:af:01:66:1a:b5:7e:8e:ca:d4:69: fa:5b:6b:2d:75:c7:ec:8e:87:5c:2b:5c:4e:fe:dd: 54:25:91:e7:6b:50:7b:69:9d:ca:51:47:4b:6e:23: f2:77:61:86:ca:e2:a6:31:67:f1:c3:07:b6:ad:1b: da:f9:09:3b:8b:82:ca:16:2a:eb:31:65:1f:07:f3: 8b:ba:04:12:34:79:cf:4f:64:d3:fa:45:cf:70:e9: c9:5d:bf:1e:6b:67:39:5e:44:70:a7:df:c9:77:9d: 8f:32:b0:d0:99:06:fa:74:15:df:65:e6:13:12:a9: ca:74:79:5c:20:5b:4f:a7:dc:0c:1e:0c:10:6e:d8: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C2:6F:B3:20:08:C3:A7:4E:73:F0:39:9F:05:2A:B9:F7:FA:76:E6 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/McJvsyAIw6dOc_A5nwUquff6duY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.123.0/24 Signature Algorithm: sha256WithRSAEncryption 94:66:88:73:72:35:04:d1:88:91:61:32:f6:53:f1:f6:8e:49: 01:e0:88:e6:ba:a4:09:c1:f7:fe:c6:80:10:b6:97:12:d7:5e: 4b:db:34:e6:0d:96:f0:b8:9b:8c:64:0d:10:dd:1e:cc:06:61: 5f:4e:0b:92:be:3d:30:de:5e:8b:ad:4a:3f:e9:c3:81:63:a1: 5c:b1:8e:3d:fd:5a:da:c5:f1:09:52:ce:e0:3a:9e:25:e3:a7: fc:ba:aa:97:6e:da:3a:06:56:f3:fb:e4:f0:25:d0:de:d2:63: 6b:e9:cd:66:27:0f:1e:0d:ae:b8:e5:00:06:c8:6e:b8:df:86: 4c:c8:70:1b:84:3c:fa:35:b8:0c:6a:f1:eb:95:9b:bf:c8:13: 3e:c7:4b:99:4c:8a:b4:a0:4c:3a:ff:ee:24:c2:f5:a6:45:7d: 55:99:1e:5e:98:61:e2:15:7e:ad:b1:08:6a:61:7b:ef:53:b0: 54:82:47:68:e3:ca:f1:dd:5f:0b:50:11:f3:15:35:c7:6e:e2: 95:28:25:5f:52:43:34:45:b7:cb:05:c2:94:d8:8f:a5:31:7a: da:bb:ea:94:e8:9e:27:a9:82:dc:23:1f:b1:e2:13:f4:21:d1: 0d:6f:81:bc:8c:69:44:b4:16:34:b0:21:19:6b:81:af:0e:bc: ae:9a:9b:7e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM5NTVaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMxQzI2RkIzMjAwOEMz QTc0RTczRjAzOTlGMDUyQUI5RjdGQTc2RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcvS+HSE3lRDx1txZTKeWPGdwEt3jK7yErWSIbgsXfDM0J5+am WIZadCXehKk6IIIHHyS5kNzQR3m9LDoVs2bczOr7/BHbi/Js52UQU4hJeY70wqzG 1jxnxGtQ6PWF/y7683SOXHRkoStSrNOrDG7Fw8WWkh5veZwsWCLprwFmGrV+jsrU afpbay11x+yOh1wrXE7+3VQlkedrUHtpncpRR0tuI/J3YYbK4qYxZ/HDB7atG9r5 CTuLgsoWKusxZR8H84u6BBI0ec9PZNP6Rc9w6cldvx5rZzleRHCn38l3nY8ysNCZ Bvp0Fd9l5hMSqcp0eVwgW0+n3AweDBBu2FZhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMcJvsyAIw6dOc/A5nwUquff6duYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L01jSnZzeUFJdzZkT2NfQTVud1VxdWZmNmR1WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC0g3swDQYJKoZIhvcNAQELBQADggEBAJRmiHNyNQTRiJFhMvZT8faOSQHg iOa6pAnB9/7GgBC2lxLXXkvbNOYNlvC4m4xkDRDdHswGYV9OC5K+PTDeXoutSj/p w4FjoVyxjj39WtrF8QlSzuA6niXjp/y6qpdu2joGVvP75PAl0N7SY2vpzWYnDx4N rrjlAAbIbrjfhkzIcBuEPPo1uAxq8euVm7/IEz7HS5lMirSgTDr/7iTC9aZFfVWZ Hl6YYeIVfq2xCGphe+9TsFSCR2jjyvHdXwtQEfMVNcdu4pUoJV9SQzRFt8sFwpTY j6Uxetq76pToniepgtwjH7HiE/Qh0Q1vgbyMaUS0FjSwIRlrga8OvK6am34= -----END CERTIFICATE-----Generated at Mon Oct 20 12:10:08 2025 by rpki-client