$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Y0gxRYOzwwlPfElXfhYEwVqvZ7E.roa File: Y0gxRYOzwwlPfElXfhYEwVqvZ7E.roa (raw, json) Hash identifier: 01D4DcPRrtqBJDDA/8yug/GuFBlG18QDGuNrOt0/Tm0= Subject key identifier: 63:48:31:45:83:B3:C3:09:4F:7C:49:57:7E:16:04:C1:5A:AF:67:B1 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 046F Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Y0gxRYOzwwlPfElXfhYEwVqvZ7E.roa Signing time: Wed 01 Oct 2025 01:34:48 +0000 ROA not before: Wed 01 Oct 2025 01:34:48 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 111.234.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 09:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:48 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=6348314583B3C3094F7C49577E1604C15AAF67B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6a:08:f7:5b:1f:99:72:e2:4a:b1:f9:8b:b0: e8:d7:96:bb:8a:e9:c4:64:d0:a4:11:e6:8f:77:20: 28:85:9d:7d:31:59:e7:17:38:0a:a0:d0:6a:f8:00: 51:1b:c3:09:21:e4:51:22:e9:53:0b:77:45:d4:c6: 4b:b4:b4:b6:58:9a:d6:3f:96:39:61:4f:c5:f1:96: 36:2a:ad:ae:fa:83:57:31:4a:9a:97:62:bc:ac:1d: 5b:a3:ac:5d:3b:d5:2a:e5:94:ab:aa:db:ff:8b:44: b0:0f:58:1f:77:7b:c4:56:fa:dd:52:e9:f2:79:d9: fb:ac:bd:4c:1c:8e:60:22:ea:dc:73:d2:35:1a:80: 5a:75:b6:22:8f:48:9e:b8:86:fd:a1:bc:53:25:66: 4d:cb:a4:84:d1:04:de:18:d2:88:f8:fb:f4:6f:83: 94:5f:51:c9:8e:71:ba:0b:43:34:24:a0:9f:4a:e4: 37:f3:ad:b7:7f:dd:66:ad:36:35:87:4a:dc:e2:c9: c2:2c:50:36:a6:5d:af:99:4c:55:98:2e:43:49:4a: e4:7d:79:98:d0:60:8e:b9:ca:e5:74:ca:1a:dc:4c: 49:dc:62:db:a3:19:f6:16:43:1b:f5:fa:ad:76:01: 62:dc:be:54:79:89:92:b8:47:38:50:5e:41:c5:d1: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:48:31:45:83:B3:C3:09:4F:7C:49:57:7E:16:04:C1:5A:AF:67:B1 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Y0gxRYOzwwlPfElXfhYEwVqvZ7E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.234.220.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:56:86:33:59:3f:e2:46:3b:b8:ee:34:d5:4c:60:d3:94:4b: 67:9e:8f:11:46:ac:4c:b8:30:bc:ad:ce:76:87:65:40:52:b0: 87:cb:a2:88:67:32:9d:ff:84:01:a4:17:80:f2:35:d4:3e:df: ca:d1:77:40:69:14:e7:30:19:2d:e0:e3:41:72:ad:f8:a4:73: 8e:5e:c6:79:1e:d9:b6:b5:47:b8:3f:dd:12:f4:88:c1:48:1d: 92:fd:16:d1:47:93:b3:32:97:4d:d9:d8:e2:48:c0:e4:ff:04: 58:f1:d0:bb:a8:09:bb:60:00:57:b8:5f:dc:2b:ab:86:ab:64: 1d:a6:a9:a3:f0:62:d0:0b:2e:96:82:67:8b:65:4f:fb:55:b9: 25:77:b2:01:92:24:af:a4:b1:08:ca:88:b9:f0:25:07:d0:33: 6a:79:89:22:56:a7:f4:3e:43:60:b6:ac:f3:09:e3:65:6d:d6: 5e:4a:70:66:b4:6a:d4:72:92:87:4c:b7:8e:78:fd:66:af:08: 78:34:62:86:fd:89:c1:7b:a2:d7:ff:80:a1:b6:97:2d:cc:79: 5a:fe:03:f7:8f:0d:a8:55:d5:f1:43:37:02:2b:17:85:e2:9d: fb:ea:d6:4a:70:72:13:d2:8c:b0:e3:44:0c:bf:b9:9f:50:f6: 7e:ad:3d:c6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NDhaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYzNDgzMTQ1ODNCM0Mz MDk0RjdDNDk1NzdFMTYwNEMxNUFBRjY3QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcagj3Wx+ZcuJKsfmLsOjXlruK6cRk0KQR5o93ICiFnX0xWecX OAqg0Gr4AFEbwwkh5FEi6VMLd0XUxku0tLZYmtY/ljlhT8XxljYqra76g1cxSpqX YrysHVujrF071SrllKuq2/+LRLAPWB93e8RW+t1S6fJ52fusvUwcjmAi6txz0jUa gFp1tiKPSJ64hv2hvFMlZk3LpITRBN4Y0oj4+/Rvg5RfUcmOcboLQzQkoJ9K5Dfz rbd/3WatNjWHStziycIsUDamXa+ZTFWYLkNJSuR9eZjQYI65yuV0yhrcTEncYtuj GfYWQxv1+q12AWLcvlR5iZK4RzhQXkHF0ftHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUY0gxRYOzwwlPfElXfhYEwVqvZ7EwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1kwZ3hSWU96d3dsUGZFbFhmaFlFd1Zxdlo3RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJv6twwDQYJKoZIhvcNAQELBQADggEBAGxWhjNZP+JGO7juNNVMYNOUS2ee jxFGrEy4MLytznaHZUBSsIfLoohnMp3/hAGkF4DyNdQ+38rRd0BpFOcwGS3g40Fy rfikc45exnke2ba1R7g/3RL0iMFIHZL9FtFHk7Myl03Z2OJIwOT/BFjx0LuoCbtg AFe4X9wrq4arZB2mqaPwYtALLpaCZ4tlT/tVuSV3sgGSJK+ksQjKiLnwJQfQM2p5 iSJWp/Q+Q2C2rPMJ42Vt1l5KcGa0atRykodMt454/WavCHg0Yob9icF7otf/gKG2 ly3MeVr+A/ePDahV1fFDNwIrF4Xinfvq1kpwchPSjLDjRAy/uZ9Q9n6tPcY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:10:04 2025 by rpki-client