$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/QFWzU6amtLPVbQ6i3axBSYYfnOU.roa File: QFWzU6amtLPVbQ6i3axBSYYfnOU.roa (raw, json) Hash identifier: +ga2TTeB000HUCKJqUl53lYROSCh5VbdHUK2VU//jVQ= Subject key identifier: 40:55:B3:53:A6:A6:B4:B3:D5:6D:0E:A2:DD:AC:41:49:86:1F:9C:E5 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0486 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QFWzU6amtLPVbQ6i3axBSYYfnOU.roa Signing time: Wed 01 Oct 2025 01:39:54 +0000 ROA not before: Wed 01 Oct 2025 01:39:54 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 175.28.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:39:54 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=4055B353A6A6B4B3D56D0EA2DDAC4149861F9CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:17:96:db:00:70:61:d7:eb:26:ae:20:49: 1d:7c:e2:75:56:be:12:96:bd:15:16:8f:19:7b:a1: 39:28:95:01:dd:92:e0:18:65:57:3a:2d:dc:d3:9e: 34:17:2c:33:e7:d5:c4:4f:74:4a:a4:d3:3c:87:30: 14:58:56:47:2e:e4:c4:02:34:c2:50:4c:95:b4:d5: f8:98:53:ec:85:3c:af:27:0b:9c:d4:85:99:f7:fd: 23:2b:a8:ff:10:a7:c6:13:6b:01:1f:40:c0:48:60: bb:ee:3e:22:0f:77:4d:5c:8c:7b:60:cd:2d:ff:58: 5d:11:1a:e1:3b:74:37:14:90:5a:ed:cd:53:1e:72: 01:ed:62:0e:25:aa:c5:85:e3:91:15:70:2e:f8:93: cb:26:b7:84:72:75:01:24:86:bf:e2:04:33:8f:7b: 16:7b:e8:b4:9d:99:f2:67:4a:e2:57:ce:b5:bc:9d: 4f:6f:6c:2a:cc:92:49:f5:83:aa:3b:ec:f2:da:a4: 1c:2c:70:ac:2c:fa:40:8c:77:d3:37:19:1d:3b:9f: 91:63:d0:79:f5:e8:79:6e:5e:aa:c9:6a:25:24:55: 72:98:17:fd:da:47:48:8a:36:2d:05:8d:55:ad:02: 34:8c:5c:39:54:bc:a3:a9:19:28:3b:b2:e8:04:eb: 39:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:55:B3:53:A6:A6:B4:B3:D5:6D:0E:A2:DD:AC:41:49:86:1F:9C:E5 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QFWzU6amtLPVbQ6i3axBSYYfnOU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.28.62.0/24 Signature Algorithm: sha256WithRSAEncryption 62:74:61:0b:67:bb:3d:e1:36:9b:ef:d9:14:7f:aa:25:c1:b2: 71:bc:ab:48:1e:c3:db:cc:f7:5c:e9:da:8a:76:e6:c9:d0:1e: fc:17:72:37:fd:07:fd:f3:97:f0:ba:72:83:50:54:f9:4b:4f: cd:3d:0d:5a:79:79:90:c2:b0:80:24:dc:64:49:64:fb:dc:f4: de:bf:3e:35:50:85:1f:c4:31:1d:c7:4b:b3:c0:09:ed:c4:11: 7c:90:d6:f7:d8:c1:50:b3:12:93:69:5f:d3:ed:d9:84:9b:90: c4:36:27:d6:78:e1:8d:e5:66:c4:e1:63:b0:07:34:01:89:73: f3:c0:d0:fd:62:77:d2:15:87:a7:fd:5c:44:d9:df:3a:cd:ad: 20:fa:7a:1a:b1:b2:5e:12:4b:da:43:98:3d:b4:23:7b:fd:ea: 50:a5:31:cf:bc:34:00:c9:9b:53:82:03:45:22:13:2e:b2:df: bb:11:fe:c3:ee:85:75:78:5c:a1:52:0d:68:8b:52:bf:70:02: 11:11:20:0b:93:fa:bd:f8:03:5f:46:92:db:b3:c1:af:d9:c2: ff:c0:7a:b2:69:7f:cd:ed:33:8b:a5:81:63:78:cc:49:ce:2d: ba:5f:af:fd:1c:33:ce:5f:9f:7d:b1:cf:37:11:cc:3c:3a:de: 6f:87:c0:71 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM5NTRaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwNTVCMzUzQTZBNkI0 QjNENTZEMEVBMkREQUM0MTQ5ODYxRjlDRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsGBeW2wBwYdfrJq4gSR184nVWvhKWvRUWjxl7oTkolQHdkuAY ZVc6LdzTnjQXLDPn1cRPdEqk0zyHMBRYVkcu5MQCNMJQTJW01fiYU+yFPK8nC5zU hZn3/SMrqP8Qp8YTawEfQMBIYLvuPiIPd01cjHtgzS3/WF0RGuE7dDcUkFrtzVMe cgHtYg4lqsWF45EVcC74k8smt4RydQEkhr/iBDOPexZ76LSdmfJnSuJXzrW8nU9v bCrMkkn1g6o77PLapBwscKws+kCMd9M3GR07n5Fj0Hn16HluXqrJaiUkVXKYF/3a R0iKNi0FjVWtAjSMXDlUvKOpGSg7sugE6zlpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQFWzU6amtLPVbQ6i3axBSYYfnOUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1FGV3pVNmFtdExQVmJRNmkzYXhCU1lZZm5PVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACvHD4wDQYJKoZIhvcNAQELBQADggEBAGJ0YQtnuz3hNpvv2RR/qiXBsnG8 q0gew9vM91zp2op25snQHvwXcjf9B/3zl/C6coNQVPlLT809DVp5eZDCsIAk3GRJ ZPvc9N6/PjVQhR/EMR3HS7PACe3EEXyQ1vfYwVCzEpNpX9Pt2YSbkMQ2J9Z44Y3l ZsThY7AHNAGJc/PA0P1id9IVh6f9XETZ3zrNrSD6ehqxsl4SS9pDmD20I3v96lCl Mc+8NADJm1OCA0UiEy6y37sR/sPuhXV4XKFSDWiLUr9wAhERIAuT+r34A19Gktuz wa/Zwv/AerJpf83tM4ulgWN4zEnOLbpfr/0cM85fn32xzzcRzDw63m+HwHE= -----END CERTIFICATE-----Generated at Tue Oct 21 01:28:05 2025 by rpki-client