$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lGcvOaIGMfdbRLmpn65Tprwca3A.roa File: lGcvOaIGMfdbRLmpn65Tprwca3A.roa (raw, json) Hash identifier: TdH22nY1uQ9+RrsD00jO9v8CtsqwiifgXM5TfLSb0VA= Subject key identifier: 94:67:2F:39:A2:06:31:F7:5B:44:B9:A9:9F:AE:53:A6:BC:1C:6B:70 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0481 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lGcvOaIGMfdbRLmpn65Tprwca3A.roa Signing time: Wed 01 Oct 2025 01:39:51 +0000 ROA not before: Wed 01 Oct 2025 01:39:51 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 153.120.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:39:51 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=94672F39A20631F75B44B9A99FAE53A6BC1C6B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:99:27:4e:eb:9b:02:e9:bf:72:a5:f1:c1: ca:7d:e4:2d:15:58:3d:95:a5:1f:18:49:bb:e0:c9: ea:e7:ba:15:60:13:83:16:6f:b2:1b:8e:12:d7:db: 69:02:3d:2c:c1:3f:39:0f:52:bf:65:98:f4:b9:75: c3:51:80:a8:1d:f0:2e:77:13:ae:4c:7f:bc:4f:24: 7b:6b:56:22:84:df:0c:67:50:bf:e9:93:e5:cb:fe: 24:72:f4:7d:38:f8:f3:78:09:bd:04:8d:4c:d1:ce: 3e:93:f3:be:e3:14:eb:76:80:c8:ea:00:2b:cc:8b: 8b:6f:d3:22:1b:7e:18:ec:ca:47:2b:51:f5:a8:b2: 54:a4:fb:da:a8:12:5a:cc:95:ce:3e:ed:d0:85:01: fa:89:9f:4f:5d:31:35:4e:99:39:fc:0a:26:22:c2: a6:53:fe:e0:82:f4:b0:4a:2b:97:00:44:6c:7f:8b: a3:e3:1f:20:6d:18:7c:0e:cf:98:b2:a2:2a:7e:ea: 78:52:cd:53:41:fa:6c:ec:28:db:2b:71:57:d4:b7: 22:01:5e:8a:6f:f1:4e:44:3a:d2:f8:a6:a9:b2:91: e3:cf:b5:75:7b:36:69:c8:7a:db:27:d3:93:79:16: c4:04:c2:61:19:47:c7:e4:27:71:29:46:63:f3:4f: 7f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:67:2F:39:A2:06:31:F7:5B:44:B9:A9:9F:AE:53:A6:BC:1C:6B:70 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lGcvOaIGMfdbRLmpn65Tprwca3A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.120.218.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:b6:2e:9b:67:c7:d6:85:af:75:30:4f:ce:07:34:ea:7e:ee: 78:0b:f6:d0:ce:61:88:44:28:1a:94:41:e9:4a:50:52:6e:da: 19:42:dc:ad:1b:5d:f8:44:b4:0f:23:ad:0d:06:42:a0:93:5b: b6:c9:e4:09:05:58:6a:7e:83:6f:ef:b4:56:9d:fb:12:87:72: ed:4d:4e:67:a3:de:90:4b:c4:5b:6d:7f:cc:eb:89:15:1b:39: 07:2d:a5:0a:3a:43:a1:12:59:2e:9a:7a:b6:92:7a:bb:5a:ac: 90:61:87:22:c4:e0:04:73:5f:aa:75:43:4c:4a:89:8c:0a:9c: b0:57:f7:ae:c3:62:99:67:8f:e1:93:c2:36:53:ed:76:1d:33: db:4d:02:74:5f:8b:3b:6c:49:2a:f5:05:5b:25:3a:9f:21:07: bd:9f:71:bf:24:a7:d5:16:0a:47:65:15:6a:86:ba:f6:a8:45: 5e:ab:9e:4a:fd:15:d3:4c:72:8f:b7:0f:6a:d3:e8:5a:a9:78: 8b:57:8e:55:9a:fa:bb:e5:19:53:0b:f1:75:03:fc:85:dc:d8: 90:02:e2:1c:fd:01:17:b4:b1:21:42:94:1c:2b:16:9e:90:87: b2:5e:46:aa:29:7f:79:a4:17:eb:b3:0d:73:91:19:63:56:66: 30:c5:83:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM5NTFaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0NjcyRjM5QTIwNjMx Rjc1QjQ0QjlBOTlGQUU1M0E2QkMxQzZCNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU0ZknTuubAum/cqXxwcp95C0VWD2VpR8YSbvgyernuhVgE4MW b7IbjhLX22kCPSzBPzkPUr9lmPS5dcNRgKgd8C53E65Mf7xPJHtrViKE3wxnUL/p k+XL/iRy9H04+PN4Cb0EjUzRzj6T877jFOt2gMjqACvMi4tv0yIbfhjsykcrUfWo slSk+9qoElrMlc4+7dCFAfqJn09dMTVOmTn8CiYiwqZT/uCC9LBKK5cARGx/i6Pj HyBtGHwOz5iyoip+6nhSzVNB+mzsKNsrcVfUtyIBXopv8U5EOtL4pqmykePPtXV7 NmnIetsn05N5FsQEwmEZR8fkJ3EpRmPzT393AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlGcvOaIGMfdbRLmpn65Tprwca3AwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2xHY3ZPYUlHTWZkYlJMbXBuNjVUcHJ3Y2EzQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGZeNowDQYJKoZIhvcNAQELBQADggEBABy2Lptnx9aFr3UwT84HNOp+7ngL 9tDOYYhEKBqUQelKUFJu2hlC3K0bXfhEtA8jrQ0GQqCTW7bJ5AkFWGp+g2/vtFad +xKHcu1NTmej3pBLxFttf8zriRUbOQctpQo6Q6ESWS6aeraSertarJBhhyLE4ARz X6p1Q0xKiYwKnLBX967DYplnj+GTwjZT7XYdM9tNAnRfiztsSSr1BVslOp8hB72f cb8kp9UWCkdlFWqGuvaoRV6rnkr9FdNMco+3D2rT6FqpeItXjlWa+rvlGVML8XUD /IXc2JAC4hz9ARe0sSFClBwrFp6Qh7JeRqopf3mkF+uzDXORGWNWZjDFgxw= -----END CERTIFICATE-----Generated at Mon Oct 20 17:20:05 2025 by rpki-client