$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7irK3jksTZynxYaXhJzyvuS3Nsw.roa File: 7irK3jksTZynxYaXhJzyvuS3Nsw.roa (raw, json) Hash identifier: PW5h55/Aw3gMZvPZHGrj43mR+qBPmncavvhk6yr/GN4= Subject key identifier: EE:2A:CA:DE:39:2C:4D:9C:A7:C5:86:97:84:9C:F2:BE:E4:B7:36:CC Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0387 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7irK3jksTZynxYaXhJzyvuS3Nsw.roa Signing time: Thu 01 May 2025 01:37:26 +0000 ROA not before: Thu 01 May 2025 01:37:26 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 36.52.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:26 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=EE2ACADE392C4D9CA7C58697849CF2BEE4B736CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:21:46:24:b1:1a:52:7c:7a:04:00:c8:47: 99:93:02:9c:40:7b:54:93:3f:e6:ef:01:cc:22:98: 61:e3:41:5d:03:28:1f:64:85:56:37:6a:68:7e:82: 8a:9e:7f:2d:18:6d:db:7d:e7:cc:5c:5a:57:d9:fb: 22:4b:7f:17:88:80:bd:75:b0:50:0a:8e:87:33:58: 88:99:7d:a5:8e:b9:c9:ca:57:0a:2a:58:8d:d6:eb: 47:2a:62:bf:f8:f4:33:e6:e2:fe:ba:4f:96:0d:2f: 42:0c:c1:0f:16:8a:6f:c7:df:f5:b3:e6:f4:88:ae: f4:7e:4e:7c:4a:9c:2b:19:9f:bc:c6:41:74:70:0f: 6e:9b:62:a8:a7:1e:68:b1:ec:0e:71:9e:70:dd:02: 1e:48:a8:4c:24:5c:89:b0:30:e0:bb:e4:1a:3e:34: 20:4f:c6:3a:0c:fc:35:a4:a9:71:c2:7b:ac:f2:9b: a5:1f:84:15:0e:64:ef:57:25:c9:d3:78:43:6a:4c: 3f:5d:5d:3b:e6:c2:38:c3:a0:08:78:b2:97:fc:ba: d9:98:ad:2a:81:56:46:01:75:c5:9e:80:e5:27:f9: 86:ad:48:a8:7d:9d:46:cb:34:03:01:13:18:cb:7b: 6a:1a:fe:f6:09:9b:9d:65:52:41:87:0a:5a:8f:fc: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2A:CA:DE:39:2C:4D:9C:A7:C5:86:97:84:9C:F2:BE:E4:B7:36:CC X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7irK3jksTZynxYaXhJzyvuS3Nsw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.216.0/22 Signature Algorithm: sha256WithRSAEncryption 55:97:ea:52:0f:60:7a:ff:ad:cb:27:ab:b0:4c:60:e9:0a:33: 90:3f:cb:4f:c4:a7:65:e9:be:cb:75:fd:8f:4c:0a:10:0c:7b: a4:d5:00:fc:5e:d2:11:5f:31:41:35:b7:51:5b:78:4a:26:63: f0:8f:aa:08:ec:c5:fe:2f:8d:0b:c7:9b:93:93:22:fb:77:71: 5a:7f:3d:af:dd:91:b8:ca:6c:f1:78:13:21:d9:a9:4c:e1:07: 4b:ad:17:d3:19:8b:75:3b:11:27:b9:fa:4f:5d:e0:10:0b:aa: c4:ab:aa:e5:c2:25:ac:5e:c2:e9:8c:3e:e3:2b:4e:07:13:47: 62:7c:70:68:8c:9e:db:4b:00:49:b0:96:b8:89:7a:4d:64:b9: f4:0e:e7:c2:23:f1:38:12:b4:6a:5e:d4:bb:17:7a:90:3f:a3: 4d:e0:d2:4b:3d:68:5c:1e:c9:20:b7:40:37:ed:75:3f:69:b3: 7b:cd:d7:d7:54:5b:88:c9:c8:03:9c:12:36:43:01:54:ae:de: 6a:be:25:dd:99:18:df:8b:98:ba:e5:ac:dd:a0:31:ea:af:21: 0d:d3:8e:44:c3:24:ed:2d:85:45:d5:e4:80:a8:07:5c:e3:ca: 8f:3a:dd:1b:4b:76:78:18:a3:2f:30:6a:04:77:c3:a2:bc:0f: 76:23:fe:e4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MjZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVFMkFDQURFMzkyQzRE OUNBN0M1ODY5Nzg0OUNGMkJFRTRCNzM2Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNMCFGJLEaUnx6BADIR5mTApxAe1STP+bvAcwimGHjQV0DKB9k hVY3amh+goqefy0Ybdt958xcWlfZ+yJLfxeIgL11sFAKjoczWIiZfaWOucnKVwoq WI3W60cqYr/49DPm4v66T5YNL0IMwQ8Wim/H3/Wz5vSIrvR+TnxKnCsZn7zGQXRw D26bYqinHmix7A5xnnDdAh5IqEwkXImwMOC75Bo+NCBPxjoM/DWkqXHCe6zym6Uf hBUOZO9XJcnTeENqTD9dXTvmwjjDoAh4spf8utmYrSqBVkYBdcWegOUn+YatSKh9 nUbLNAMBExjLe2oa/vYJm51lUkGHClqP/JFpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7irK3jksTZynxYaXhJzyvuS3NswwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzdpckszamtzVFp5bnhZYVhoSnp5dnVTM05zdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIkNNgwDQYJKoZIhvcNAQELBQADggEBAFWX6lIPYHr/rcsnq7BMYOkKM5A/ y0/Ep2Xpvst1/Y9MChAMe6TVAPxe0hFfMUE1t1FbeEomY/CPqgjsxf4vjQvHm5OT Ivt3cVp/Pa/dkbjKbPF4EyHZqUzhB0utF9MZi3U7ESe5+k9d4BALqsSrquXCJaxe wumMPuMrTgcTR2J8cGiMnttLAEmwlriJek1kufQO58Ij8TgStGpe1LsXepA/o03g 0ks9aFweySC3QDftdT9ps3vN19dUW4jJyAOcEjZDAVSu3mq+Jd2ZGN+LmLrlrN2g MeqvIQ3TjkTDJO0thUXV5ICoB1zjyo863RtLdngYoy8wagR3w6K8D3Yj/uQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:02 2025 by rpki-client