$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bJ4awM3o4uaCtaWob37Fcfm8coI.roa File: bJ4awM3o4uaCtaWob37Fcfm8coI.roa (raw, json) Hash identifier: wXQvTjA8SgMKxyYRWlORp1xSOfrhGErj01LOT7N7zbs= Subject key identifier: 6C:9E:1A:C0:CD:E8:E2:E6:82:B5:A5:A8:6F:7E:C5:71:F9:BC:72:82 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0411 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bJ4awM3o4uaCtaWob37Fcfm8coI.roa Signing time: Thu 01 May 2025 01:48:40 +0000 ROA not before: Thu 01 May 2025 01:48:40 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 153.120.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:40 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=6C9E1AC0CDE8E2E682B5A5A86F7EC571F9BC7282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:69:61:8f:ca:e6:c9:51:5f:5b:2c:f5:3a:32: a8:99:59:5d:a9:d1:16:6e:ed:24:b2:f6:dd:f2:16: 90:86:03:5f:c1:69:3e:88:5c:d1:a1:d7:0c:23:07: 92:99:7e:b8:3e:35:a1:2a:14:38:9b:46:75:70:94: 7e:28:d9:4e:75:ab:31:5e:7b:7c:3c:e9:81:2e:1b: 91:84:71:68:b0:83:49:cb:57:94:06:8c:d3:65:e0: 18:d1:0a:0a:c9:0b:da:06:3e:60:1f:cf:cd:f1:62: 3d:9b:70:a1:0f:0f:8e:52:8a:f4:77:ac:86:6a:a1: fd:60:3a:57:df:4c:d8:0e:c3:9f:63:a1:78:3e:f6: 3c:60:b8:ff:12:2e:bf:4c:e2:ee:f4:a6:f3:10:5e: 18:77:bb:cd:8e:a0:f9:4b:08:15:10:e9:14:fe:18: ba:52:ea:23:32:ce:4e:10:1a:68:a0:a3:fd:45:ce: 81:db:59:4d:0e:c1:68:49:41:32:e5:bc:8c:28:9e: 47:17:e4:8e:ea:ba:fc:d8:a7:62:5b:4e:df:08:00: aa:a4:94:54:fa:86:1b:a8:27:f9:5a:97:70:cf:2f: ec:15:69:76:9f:03:ec:ad:26:35:6c:75:d0:34:71: 59:99:04:1a:92:78:7d:ee:d3:7d:9b:40:c8:00:95: 31:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9E:1A:C0:CD:E8:E2:E6:82:B5:A5:A8:6F:7E:C5:71:F9:BC:72:82 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bJ4awM3o4uaCtaWob37Fcfm8coI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.120.208.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:85:05:2f:d5:bf:04:0a:c2:7d:f9:18:26:85:9e:e2:d0:ae: 93:d5:69:1d:34:f4:fa:37:b4:08:a5:f8:dc:ad:7d:b6:ee:bd: b9:26:06:8b:2c:4b:8b:0f:0c:71:63:56:f6:9e:64:66:1d:96: f7:af:18:b9:34:b1:1d:c6:6c:33:51:7f:45:d9:9b:93:d7:1e: 02:58:a7:9d:6f:29:69:1f:e1:11:7f:91:87:6e:ab:7d:aa:70: 87:41:ad:a9:64:87:3c:53:8c:cf:ab:10:5a:29:ac:ea:9d:e6: 66:43:38:43:3e:06:3a:f1:17:11:b8:d7:6d:6e:3b:34:97:08: 03:8a:b8:ea:0a:14:6a:0a:78:45:e1:f4:79:a4:fe:8e:0d:04: 9b:fe:63:05:8f:cd:e7:97:67:c3:f1:69:26:20:fd:f0:20:0d: db:09:90:16:70:97:a9:a5:59:dc:3e:13:33:4a:a2:04:9d:e6: ba:80:27:1b:b6:87:61:09:99:44:9f:7f:e6:c3:9b:03:0c:83: e3:75:96:68:8f:ff:a2:fc:c7:14:68:0f:59:bb:10:58:35:07: 6a:e4:e3:6d:fe:d8:f7:64:96:6d:ce:35:48:80:1f:ea:1a:3e: 39:b8:c0:9c:f8:f4:f1:2e:16:54:7f:06:6d:27:1b:7e:ea:f6: 81:f4:7d:62 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NDBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDOUUxQUMwQ0RFOEUy RTY4MkI1QTVBODZGN0VDNTcxRjlCQzcyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuaWGPyubJUV9bLPU6MqiZWV2p0RZu7SSy9t3yFpCGA1/BaT6I XNGh1wwjB5KZfrg+NaEqFDibRnVwlH4o2U51qzFee3w86YEuG5GEcWiwg0nLV5QG jNNl4BjRCgrJC9oGPmAfz83xYj2bcKEPD45SivR3rIZqof1gOlffTNgOw59joXg+ 9jxguP8SLr9M4u70pvMQXhh3u82OoPlLCBUQ6RT+GLpS6iMyzk4QGmigo/1FzoHb WU0OwWhJQTLlvIwonkcX5I7quvzYp2JbTt8IAKqklFT6hhuoJ/lal3DPL+wVaXaf A+ytJjVsddA0cVmZBBqSeH3u032bQMgAlTHNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbJ4awM3o4uaCtaWob37Fcfm8coIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2JKNGF3TTNvNHVhQ3RhV29iMzdGY2ZtOGNvSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGZeNAwDQYJKoZIhvcNAQELBQADggEBAJuFBS/VvwQKwn35GCaFnuLQrpPV aR009Po3tAil+NytfbbuvbkmBossS4sPDHFjVvaeZGYdlvevGLk0sR3GbDNRf0XZ m5PXHgJYp51vKWkf4RF/kYduq32qcIdBralkhzxTjM+rEFoprOqd5mZDOEM+Bjrx FxG4121uOzSXCAOKuOoKFGoKeEXh9Hmk/o4NBJv+YwWPzeeXZ8PxaSYg/fAgDdsJ kBZwl6mlWdw+EzNKogSd5rqAJxu2h2EJmUSff+bDmwMMg+N1lmiP/6L8xxRoD1m7 EFg1B2rk423+2Pdklm3ONUiAH+oaPjm4wJz49PEuFlR/Bm0nG37q9oH0fWI= -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:05 2025 by rpki-client