$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7W1oRI0pDPccaTtrMhDy0GhmwGY.roa File: 7W1oRI0pDPccaTtrMhDy0GhmwGY.roa (raw, json) Hash identifier: JL05OFbe6qyUgY5wljSRcFfdrb6UMi+8HQkKZPmGQyM= Subject key identifier: ED:6D:68:44:8D:29:0C:F7:1C:69:3B:6B:32:10:F2:D0:68:66:C0:66 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0365 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7W1oRI0pDPccaTtrMhDy0GhmwGY.roa Signing time: Thu 01 May 2025 01:33:23 +0000 ROA not before: Thu 01 May 2025 01:33:23 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 27.120.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:23 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=ED6D68448D290CF71C693B6B3210F2D06866C066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:95:bd:83:10:97:d4:41:38:3a:a0:35:4f: 7d:32:f1:f6:3d:20:81:48:09:99:7e:55:c4:c1:93: 87:a3:4f:a3:c7:01:17:d1:1e:aa:cc:f2:b9:4d:ef: 4b:12:2a:4a:a0:18:11:2f:68:47:20:f1:cc:ee:9d: f0:45:aa:a3:d8:8b:43:51:15:7f:50:bc:e4:8d:80: b2:fc:f8:3b:6d:37:8d:27:45:cb:e1:11:62:1b:68: 2a:12:00:37:00:a3:1d:13:69:84:ce:10:03:bd:8e: 1a:9a:d1:ca:69:b8:8b:49:ea:5d:e6:5d:01:68:2f: e3:89:09:b5:63:9e:5f:b2:12:d2:00:c3:46:e0:2e: 1d:94:f6:ec:c4:86:fc:cd:8a:15:79:36:05:a4:79: fb:8d:6d:63:0b:a7:b8:d6:7d:9c:6a:d0:5e:e6:d7: 90:5c:1b:c7:8a:d6:1c:7b:05:19:ec:4d:1b:36:4d: f9:5b:12:9e:b7:6d:e5:df:a5:39:fe:9e:ca:6c:b2: 19:a2:12:47:12:dd:fb:90:54:6d:e6:64:d4:70:a2: 3b:74:d4:23:fb:81:d6:65:f5:98:80:f4:a7:1b:fb: 36:ba:ad:88:2c:7e:08:b7:a4:2b:20:66:ca:a1:7b: 9c:42:70:1b:8a:9e:97:ef:c4:01:75:6c:c2:29:05: f2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6D:68:44:8D:29:0C:F7:1C:69:3B:6B:32:10:F2:D0:68:66:C0:66 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7W1oRI0pDPccaTtrMhDy0GhmwGY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.120.184.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:83:eb:d3:33:b7:14:e9:ae:1b:7e:f2:a7:82:e4:83:22:a3: 64:1c:7f:af:e4:ba:d2:45:c6:7c:7f:02:a3:b1:45:42:83:13: f3:e2:28:0c:ba:7e:74:34:62:2a:2e:dc:e3:eb:c0:63:2c:e9: 84:6f:a4:31:4d:67:cf:4b:e6:d7:f6:9a:23:1e:60:74:e6:76: 87:11:ff:50:c0:5f:c2:05:78:34:ea:5c:33:ae:41:e2:b8:fe: e8:fd:0c:60:00:ca:de:54:d7:8d:1a:33:65:4a:3c:b5:9c:60: 41:db:32:41:51:6d:37:c7:d0:43:64:bb:7b:48:39:c8:86:cd: 72:c3:12:60:53:48:bf:bf:21:77:8b:d6:23:7d:2a:51:b9:7b: e4:d7:7e:54:4a:21:0e:b5:8a:bd:76:37:9c:14:0f:2f:59:52: 72:d2:0c:8f:68:2a:7a:60:21:21:d9:0e:71:f5:0e:69:43:a1: 53:34:33:d8:5f:b6:56:8c:3d:9a:31:c2:fc:d8:59:17:91:24: 0f:7f:3e:80:70:38:60:ea:ed:49:45:d6:45:04:31:ba:a7:9d: a0:a8:0e:76:02:a5:a5:5c:f5:7b:15:f7:bd:a9:3b:78:ca:10: 1c:86:d7:d6:3b:1a:c6:e5:9e:e9:44:b4:3a:b6:1f:de:96:27: 3b:bb:ac:99 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMjNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVENkQ2ODQ0OEQyOTBD RjcxQzY5M0I2QjMyMTBGMkQwNjg2NkMwNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8+5W9gxCX1EE4OqA1T30y8fY9IIFICZl+VcTBk4ejT6PHARfR HqrM8rlN70sSKkqgGBEvaEcg8czunfBFqqPYi0NRFX9QvOSNgLL8+DttN40nRcvh EWIbaCoSADcAox0TaYTOEAO9jhqa0cppuItJ6l3mXQFoL+OJCbVjnl+yEtIAw0bg Lh2U9uzEhvzNihV5NgWkefuNbWMLp7jWfZxq0F7m15BcG8eK1hx7BRnsTRs2Tflb Ep63beXfpTn+nspsshmiEkcS3fuQVG3mZNRwojt01CP7gdZl9ZiA9Kcb+za6rYgs fgi3pCsgZsqhe5xCcBuKnpfvxAF1bMIpBfJPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7W1oRI0pDPccaTtrMhDy0GhmwGYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzdXMW9SSTBwRFBjY2FUdHJNaER5MEdobXdHWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMbeLgwDQYJKoZIhvcNAQELBQADggEBAJ2D69MztxTprht+8qeC5IMio2Qc f6/kutJFxnx/AqOxRUKDE/PiKAy6fnQ0Yiou3OPrwGMs6YRvpDFNZ89L5tf2miMe YHTmdocR/1DAX8IFeDTqXDOuQeK4/uj9DGAAyt5U140aM2VKPLWcYEHbMkFRbTfH 0ENku3tIOciGzXLDEmBTSL+/IXeL1iN9KlG5e+TXflRKIQ61ir12N5wUDy9ZUnLS DI9oKnpgISHZDnH1DmlDoVM0M9hftlaMPZoxwvzYWReRJA9/PoBwOGDq7UlF1kUE MbqnnaCoDnYCpaVc9XsV972pO3jKEByG19Y7GsblnulEtDq2H96WJzu7rJk= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:25 2025 by rpki-client