$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/-fZ8mr8h6WNrzhPpHzZBGqeWfPU.roa File: -fZ8mr8h6WNrzhPpHzZBGqeWfPU.roa (raw, json) Hash identifier: pSWaILyuRhG2GWlk9i2/lW2pnp3BFF0kTipJzSgApBU= Subject key identifier: F9:F6:7C:9A:BF:21:E9:63:6B:CE:13:E9:1F:36:41:1A:A7:96:7C:F5 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03CF Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-fZ8mr8h6WNrzhPpHzZBGqeWfPU.roa Signing time: Thu 01 May 2025 01:42:41 +0000 ROA not before: Thu 01 May 2025 01:42:41 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.44.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:41 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=F9F67C9ABF21E9636BCE13E91F36411AA7967CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:da:64:3f:e9:c0:74:21:30:fd:f4:d6:93: 87:d7:35:b1:aa:85:8d:6e:b0:f9:18:7e:97:28:58: 9a:8e:af:4c:c1:59:29:7f:65:1b:e0:d8:47:ad:1f: c1:6b:23:ec:5a:5b:b5:fb:53:12:25:a5:9a:80:e8: d3:54:d7:15:5f:c3:d4:e4:7c:ec:e7:f4:7b:15:fd: c0:5c:6b:a8:fb:aa:6d:cb:f9:ca:f1:65:19:50:a7: e5:3f:4a:73:ef:a3:2a:70:15:e5:49:47:c4:15:bc: c9:9c:8f:7b:d8:5e:51:30:6c:3c:93:e3:97:5f:1f: d9:d7:12:ce:cc:0b:99:66:c6:21:05:4a:11:7f:a8: e9:0e:fa:bc:c2:68:41:a4:02:39:8b:02:4e:52:f7: 50:a0:ec:e6:86:ca:d0:95:f2:9c:7f:53:2d:c6:de: 54:54:f4:81:04:6b:70:b9:dd:32:85:ba:f4:91:26: 8a:2c:f8:25:c5:68:3b:b7:95:12:c7:4a:1f:e5:3b: 78:28:eb:dc:e4:23:b9:ef:5c:73:1d:c1:f0:12:02: 88:9a:6f:3a:17:62:93:c9:65:ec:68:08:ea:24:a5: 21:e4:62:8d:c3:3b:56:fc:61:31:da:68:7f:6d:9f: ba:6d:1e:ea:dd:55:07:1d:26:92:8d:e4:24:74:41: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F6:7C:9A:BF:21:E9:63:6B:CE:13:E9:1F:36:41:1A:A7:96:7C:F5 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-fZ8mr8h6WNrzhPpHzZBGqeWfPU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.44.66.0/24 Signature Algorithm: sha256WithRSAEncryption 29:20:2a:08:7e:fb:0e:c1:97:f4:d1:a7:27:db:ed:24:1b:3d: 33:e9:11:78:1b:3a:a1:49:f1:2a:8a:fe:50:3b:01:c9:86:92: 1c:ef:b6:8a:51:a6:4b:99:4e:de:de:1f:d7:64:ee:60:42:a9: c2:4e:fb:b9:ae:e2:00:14:9c:8f:48:63:b5:ce:ef:ad:85:29: 28:12:20:fc:4e:1d:48:2f:71:a9:b4:da:9c:7b:17:18:8f:ed: 9d:49:f5:70:39:c4:76:36:76:1a:05:b8:10:88:97:98:0f:b4: ef:4d:35:e9:fb:4b:2e:9e:b2:aa:85:ea:0e:61:af:fd:42:41: a3:86:91:79:41:8d:e3:0c:34:3b:77:67:43:6e:12:0c:9e:7a: 2a:7a:83:5c:1b:61:d1:4d:94:ac:39:c8:04:fe:6f:ff:c4:37: 2d:88:57:17:c4:37:7a:f5:4c:a5:c8:01:8b:76:92:9a:bc:e2: a0:5e:52:c5:20:b8:79:af:5a:f6:05:ad:9a:ee:7d:a5:d4:f8: ce:52:43:6e:d8:1d:d4:68:2c:b8:ab:ca:2c:de:c0:9b:19:73: 01:01:cb:6a:5d:53:09:92:7f:80:a2:20:ab:34:45:f9:8b:00: c7:1f:26:47:cc:43:e8:40:6c:e6:04:94:36:58:3c:fe:41:05: ae:69:e2:cc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNDFaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY5RjY3QzlBQkYyMUU5 NjM2QkNFMTNFOTFGMzY0MTFBQTc5NjdDRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqUtpkP+nAdCEw/fTWk4fXNbGqhY1usPkYfpcoWJqOr0zBWSl/ ZRvg2EetH8FrI+xaW7X7UxIlpZqA6NNU1xVfw9TkfOzn9HsV/cBca6j7qm3L+crx ZRlQp+U/SnPvoypwFeVJR8QVvMmcj3vYXlEwbDyT45dfH9nXEs7MC5lmxiEFShF/ qOkO+rzCaEGkAjmLAk5S91Cg7OaGytCV8px/Uy3G3lRU9IEEa3C53TKFuvSRJoos +CXFaDu3lRLHSh/lO3go69zkI7nvXHMdwfASAoiabzoXYpPJZexoCOokpSHkYo3D O1b8YTHaaH9tn7ptHurdVQcdJpKN5CR0QZW7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+fZ8mr8h6WNrzhPpHzZBGqeWfPUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0Ly1mWjhtcjhoNldOcnpoUHBIelpCR3FlV2ZQVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA9LEIwDQYJKoZIhvcNAQELBQADggEBACkgKgh++w7Bl/TRpyfb7SQbPTPp EXgbOqFJ8SqK/lA7AcmGkhzvtopRpkuZTt7eH9dk7mBCqcJO+7mu4gAUnI9IY7XO 762FKSgSIPxOHUgvcam02px7FxiP7Z1J9XA5xHY2dhoFuBCIl5gPtO9NNen7Sy6e sqqF6g5hr/1CQaOGkXlBjeMMNDt3Z0NuEgyeeip6g1wbYdFNlKw5yAT+b//ENy2I VxfEN3r1TKXIAYt2kpq84qBeUsUguHmvWvYFrZrufaXU+M5SQ27YHdRoLLiryize wJsZcwEBy2pdUwmSf4CiIKs0RfmLAMcfJkfMQ+hAbOYElDZYPP5BBa5p4sw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:55 2025 by rpki-client