$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1KwFQZ8spFDfxBmlY3wpNG1nDCk.roa File: 1KwFQZ8spFDfxBmlY3wpNG1nDCk.roa (raw, json) Hash identifier: p8m+xjyveG67SD9wwt5o2Q2Rcro1JqnLwgGqKXkzzWU= Subject key identifier: D4:AC:05:41:9F:2C:A4:50:DF:C4:19:A5:63:7C:29:34:6D:67:0C:29 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0487 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1KwFQZ8spFDfxBmlY3wpNG1nDCk.roa Signing time: Wed 01 Oct 2025 01:39:54 +0000 ROA not before: Wed 01 Oct 2025 01:39:54 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 180.131.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:39:54 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=D4AC05419F2CA450DFC419A5637C29346D670C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:a8:de:18:67:ad:82:91:bf:e9:c1:97:8a: 49:86:5a:9e:06:d6:4d:75:0e:b8:f3:3c:4e:74:c8: 0b:83:6d:f8:b1:61:65:f9:d2:fc:11:f2:ad:ba:f0: 27:d8:2a:e1:93:db:bb:82:a8:a7:d6:6a:6c:3c:98: 19:2c:94:50:71:dd:19:88:83:95:9d:cd:b0:4c:82: 53:c2:3f:10:fe:ae:50:77:04:9d:db:e6:88:be:d2: 40:7c:ec:63:43:02:34:ba:cd:d1:9f:df:a2:8e:55: 10:0b:ec:21:78:48:dd:02:aa:a5:97:a1:30:cd:da: 3e:3a:f7:e7:fd:f7:aa:02:dc:56:7b:cd:1e:3b:93: e2:08:96:11:65:30:46:78:b3:01:c5:21:8d:c0:2b: 20:ca:89:2a:ff:8e:ff:33:47:b8:5a:42:f0:7b:a4: ab:dd:38:e4:87:6a:f3:94:41:6d:c3:36:77:a0:2e: f7:6e:20:ce:81:66:2a:70:84:77:8f:a4:e3:93:95: d1:22:3c:6c:a2:33:50:0b:4e:87:6a:09:b0:39:c6: fe:f6:a5:e3:52:0c:bf:94:8a:e6:36:2a:ea:82:b0: 1d:4a:ce:38:31:ce:0e:95:72:81:43:e6:74:a7:c1: 67:14:a3:73:01:d0:e8:19:58:a0:7f:37:ae:1c:b6: d6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AC:05:41:9F:2C:A4:50:DF:C4:19:A5:63:7C:29:34:6D:67:0C:29 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1KwFQZ8spFDfxBmlY3wpNG1nDCk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.115.0/24 Signature Algorithm: sha256WithRSAEncryption 22:c6:b3:3c:e8:e1:84:e6:33:e5:5f:ca:9a:b1:58:99:eb:e8: 1d:ca:a3:b4:11:9d:65:3f:be:85:80:bb:1c:82:05:95:38:9c: ce:4d:6b:09:d7:98:95:79:26:7e:43:c3:6c:a4:f9:6f:f9:e1: b8:8d:86:1a:ee:c9:8a:20:f5:ee:26:cc:86:9f:71:65:d6:b5: a5:ee:dd:6f:aa:e2:03:48:d2:20:2f:44:84:99:71:1d:28:d9: b7:26:32:d4:82:fc:3e:0d:0c:93:85:f4:3a:24:ff:ac:39:18: 3f:49:fd:73:fb:44:3b:48:7b:0c:77:c4:54:e2:54:3e:ec:78: 07:e0:1e:6a:6b:25:da:66:92:bf:d0:80:5a:02:cf:52:5e:d3: 26:28:4b:ee:6e:bd:1c:af:95:33:5d:df:35:32:4e:72:a6:dc: 70:15:48:7f:ce:80:4e:83:2d:21:0a:95:66:f6:2e:d2:9c:35: 04:31:ca:53:db:f5:81:de:92:d9:22:fd:08:f0:b7:55:19:ef: 58:4d:83:0a:1e:5b:b7:78:9e:60:27:0a:90:f2:8e:da:13:5d: 67:0e:0c:04:bf:62:cc:77:55:08:bb:11:74:e7:54:ff:16:86: 70:6b:d4:f1:71:b8:91:db:cc:e3:65:92:70:15:34:d8:5f:a6: e6:4b:2c:6a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM5NTRaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0QUMwNTQxOUYyQ0E0 NTBERkM0MTlBNTYzN0MyOTM0NkQ2NzBDMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjkajeGGetgpG/6cGXikmGWp4G1k11DrjzPE50yAuDbfixYWX5 0vwR8q268CfYKuGT27uCqKfWamw8mBkslFBx3RmIg5WdzbBMglPCPxD+rlB3BJ3b 5oi+0kB87GNDAjS6zdGf36KOVRAL7CF4SN0CqqWXoTDN2j469+f996oC3FZ7zR47 k+IIlhFlMEZ4swHFIY3AKyDKiSr/jv8zR7haQvB7pKvdOOSHavOUQW3DNnegLvdu IM6BZipwhHePpOOTldEiPGyiM1ALTodqCbA5xv72peNSDL+UiuY2KuqCsB1Kzjgx zg6VcoFD5nSnwWcUo3MB0OgZWKB/N64cttbHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1KwFQZ8spFDfxBmlY3wpNG1nDCkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzFLd0ZRWjhzcEZEZnhCbWxZM3dwTkcxbkRDay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC0g3MwDQYJKoZIhvcNAQELBQADggEBACLGszzo4YTmM+VfypqxWJnr6B3K o7QRnWU/voWAuxyCBZU4nM5NawnXmJV5Jn5Dw2yk+W/54biNhhruyYog9e4mzIaf cWXWtaXu3W+q4gNI0iAvRISZcR0o2bcmMtSC/D4NDJOF9Dok/6w5GD9J/XP7RDtI ewx3xFTiVD7seAfgHmprJdpmkr/QgFoCz1Je0yYoS+5uvRyvlTNd3zUyTnKm3HAV SH/OgE6DLSEKlWb2LtKcNQQxylPb9YHektki/Qjwt1UZ71hNgwoeW7d4nmAnCpDy jtoTXWcODAS/Ysx3VQi7EXTnVP8WhnBr1PFxuJHbzONlknAVNNhfpuZLLGo= -----END CERTIFICATE-----Generated at Wed Nov 5 19:08:55 2025 by rpki-client