$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/PckWz7J1cXISXLVwvVT_P5ZC0eA.roa File: PckWz7J1cXISXLVwvVT_P5ZC0eA.roa (raw, json) Hash identifier: YbgRksUqfeCf7q3BcXKpilePpPUSmWgGrwJHfCrF75Q= Subject key identifier: 3D:C9:16:CF:B2:75:71:72:12:5C:B5:70:BD:54:FF:3F:96:42:D1:E0 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0477 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PckWz7J1cXISXLVwvVT_P5ZC0eA.roa Signing time: Wed 01 Oct 2025 01:34:53 +0000 ROA not before: Wed 01 Oct 2025 01:34:53 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 113.213.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:53 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=3DC916CFB2757172125CB570BD54FF3F9642D1E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bc:d0:60:52:71:aa:1b:ee:2a:f5:55:1c:94: 3c:b8:a1:e9:0e:f4:73:4c:04:09:a4:95:06:a8:a9: 4c:f3:70:39:1c:c9:64:85:f4:9d:75:9b:f2:cd:1f: c6:d0:0b:ab:e2:ec:6f:2f:16:3c:bd:46:a6:11:b1: aa:fe:d5:c4:b7:6d:0e:68:7c:07:c9:74:a0:f0:dd: 4f:87:0d:6d:ea:54:b9:6d:70:65:a6:eb:41:3f:ab: 95:98:1c:fa:9c:b9:6b:82:a9:e3:dd:94:ca:39:29: 35:dd:95:91:39:8f:79:e3:f7:dc:cf:1b:64:9d:14: 77:a3:9c:57:f4:56:4d:cd:92:5b:db:35:11:f9:48: 0b:e4:b2:b0:d2:63:0c:e2:7e:1e:c5:b3:1e:20:e4: 8a:15:8b:8d:a5:6f:74:18:32:bc:96:cf:fe:06:3b: eb:8f:a4:6d:37:a5:71:d0:ba:2a:89:b6:92:ee:9a: ac:55:bc:d4:4a:49:60:42:3d:07:39:0b:4e:12:ff: 86:e3:ef:f5:ab:73:dc:ce:9d:34:2d:d1:b9:9c:22: 38:de:99:d2:5a:21:81:ad:26:e0:31:e6:5a:cf:62: 86:0d:8f:b3:e9:c5:ac:5c:40:94:30:ca:b1:d9:9a: c8:18:6c:fb:5f:6f:46:81:e1:35:64:f0:3d:37:be: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C9:16:CF:B2:75:71:72:12:5C:B5:70:BD:54:FF:3F:96:42:D1:E0 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PckWz7J1cXISXLVwvVT_P5ZC0eA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.213.248.0/21 Signature Algorithm: sha256WithRSAEncryption 68:f8:a4:8c:f3:f9:e7:cd:5e:fb:52:32:43:ca:5b:1d:92:08: a6:57:21:be:83:4c:86:ac:74:79:1b:9b:b1:a4:30:e2:78:77: 56:25:14:d5:d9:80:fb:2f:5d:bb:6d:58:01:f5:cf:e4:45:34: ce:ba:c2:fa:4b:3c:19:89:be:25:17:6d:18:06:4d:b5:50:29: 82:da:de:f6:38:dc:0f:d5:fa:95:be:c4:fe:a1:4d:98:46:d9: b2:49:32:1f:bc:9b:2d:27:28:62:8e:b1:df:ed:a9:17:8a:4f: e3:24:ba:de:c0:a6:93:cd:09:de:67:84:9a:20:97:85:1d:12: 02:87:93:28:7c:b4:21:7d:bf:4f:74:25:21:b2:f6:98:dc:bb: 9d:63:13:7a:eb:70:5f:19:0b:bd:a8:0a:e1:55:ab:c2:11:de: 7a:03:63:2a:cb:58:58:63:26:53:66:ef:01:d7:7b:a5:6a:90: 44:00:f6:ec:0c:d4:ef:66:cb:ea:0b:9b:eb:74:a6:e0:6a:3f: 4f:2c:19:b8:ad:f1:3a:19:e4:70:4b:41:24:b3:89:9f:b8:00: 9c:28:05:40:d3:00:86:43:8f:24:e1:2e:cb:02:86:b9:a9:2d: ff:41:28:ad:9b:fa:53:5e:6b:f5:d9:86:3a:85:99:41:bc:80: 55:86:cc:00 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NTNaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNEQzkxNkNGQjI3NTcx NzIxMjVDQjU3MEJENTRGRjNGOTY0MkQxRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvvNBgUnGqG+4q9VUclDy4oekO9HNMBAmklQaoqUzzcDkcyWSF 9J11m/LNH8bQC6vi7G8vFjy9RqYRsar+1cS3bQ5ofAfJdKDw3U+HDW3qVLltcGWm 60E/q5WYHPqcuWuCqePdlMo5KTXdlZE5j3nj99zPG2SdFHejnFf0Vk3NklvbNRH5 SAvksrDSYwzifh7Fsx4g5IoVi42lb3QYMryWz/4GO+uPpG03pXHQuiqJtpLumqxV vNRKSWBCPQc5C04S/4bj7/Wrc9zOnTQt0bmcIjjemdJaIYGtJuAx5lrPYoYNj7Pp xaxcQJQwyrHZmsgYbPtfb0aB4TVk8D03vs1VAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPckWz7J1cXISXLVwvVT/P5ZC0eAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1Bja1d6N0oxY1hJU1hMVnd2VlRfUDVaQzBlQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANx1fgwDQYJKoZIhvcNAQELBQADggEBAGj4pIzz+efNXvtSMkPKWx2SCKZX Ib6DTIasdHkbm7GkMOJ4d1YlFNXZgPsvXbttWAH1z+RFNM66wvpLPBmJviUXbRgG TbVQKYLa3vY43A/V+pW+xP6hTZhG2bJJMh+8my0nKGKOsd/tqReKT+Mkut7AppPN Cd5nhJogl4UdEgKHkyh8tCF9v090JSGy9pjcu51jE3rrcF8ZC72oCuFVq8IR3noD YyrLWFhjJlNm7wHXe6VqkEQA9uwM1O9my+oLm+t0puBqP08sGbit8ToZ5HBLQSSz iZ+4AJwoBUDTAIZDjyThLssChrmpLf9BKK2b+lNea/XZhjqFmUG8gFWGzAA= -----END CERTIFICATE-----Generated at Mon Oct 20 17:19:40 2025 by rpki-client