$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/945Q5iQzaCb5VmvdfAlEschUJmg.roa File: 945Q5iQzaCb5VmvdfAlEschUJmg.roa (raw, json) Hash identifier: gJAPm77hvzjFy4n8m878gg8ac1yog5wvoeSpy1zGrFQ= Subject key identifier: F7:8E:50:E6:24:33:68:26:F9:56:6B:DD:7C:09:44:B1:C8:54:26:68 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0472 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/945Q5iQzaCb5VmvdfAlEschUJmg.roa Signing time: Wed 01 Oct 2025 01:34:49 +0000 ROA not before: Wed 01 Oct 2025 01:34:49 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 111.235.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:49 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=F78E50E624336826F9566BDD7C0944B1C8542668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b9:19:55:fb:67:03:6a:29:d7:05:14:d4:b2: 0f:da:ba:f7:f3:63:5c:9c:f7:54:f5:83:47:db:9b: 64:d5:6e:d1:6b:93:ee:44:73:39:83:06:4b:19:7f: 6e:c3:74:7f:1f:62:73:b0:09:6c:c5:87:26:3d:e3: 8f:b4:90:87:04:ec:96:4f:ae:17:8a:48:4b:23:0f: 5a:93:b8:4c:bf:61:ac:18:95:c2:68:dd:7d:7a:df: 04:92:33:35:ce:e7:4b:d0:fe:e5:69:5b:49:dd:a1: c9:31:d5:8b:5d:0b:c4:90:4f:6b:b8:58:ca:9b:24: 3b:c8:fd:5c:47:80:86:59:e2:20:8f:74:f2:23:5d: 72:b3:fa:45:ee:ba:85:0b:61:32:40:69:1e:e4:d8: 27:54:31:7b:44:84:db:b7:db:97:2d:16:85:11:4b: cf:f0:bd:c3:3b:e7:d8:6d:d9:b5:cc:28:52:76:56: e2:88:ad:38:31:b3:fa:64:fc:0c:0c:2a:ab:22:7f: ea:7a:61:6a:4e:40:99:b6:42:0d:9c:e7:2a:1f:16: 76:b8:80:1b:8a:44:55:a3:a6:d8:2b:4d:75:b3:92: 0d:dc:d9:16:b2:a9:bb:0f:6c:e5:d5:0b:8e:00:2b: f5:00:82:a2:65:3a:d2:6a:b4:f2:dd:43:e1:36:a1: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8E:50:E6:24:33:68:26:F9:56:6B:DD:7C:09:44:B1:C8:54:26:68 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/945Q5iQzaCb5VmvdfAlEschUJmg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.235.32.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:19:1d:4d:c8:76:55:69:4a:2d:08:d6:16:d2:88:0f:76:be: d3:4c:b0:18:60:f2:72:00:f1:fe:9b:be:21:94:7b:1f:c2:53: 36:3f:51:4b:3f:65:23:11:dd:aa:09:46:4e:ab:bb:59:da:11: e2:5f:5e:be:9b:9b:88:3f:06:8c:80:c4:29:1e:44:04:1f:bd: 16:30:34:a0:e0:09:41:d5:6d:69:ac:c4:fd:01:e2:cb:8d:c1: f5:12:ca:11:1a:46:86:a1:24:e5:e3:99:fa:12:69:a1:6a:4b: 6f:e3:a0:52:ad:f4:bd:e3:b0:8b:7f:79:e0:8b:2a:ab:99:54: d9:2e:31:e6:20:91:7f:d2:73:c7:b2:b8:54:a6:6c:4c:64:98: 5b:c2:48:69:5b:29:16:77:d7:47:0e:4f:4a:c1:6f:74:89:0b: 70:99:10:bb:bb:d9:fb:98:68:2f:4d:80:74:fe:14:52:b3:fd: cb:f3:de:b5:cc:29:cd:42:a9:61:82:61:0a:2d:b1:cd:60:53: e3:5e:8d:2e:b2:83:84:93:1e:3e:53:2c:1c:30:29:8d:48:ae: dd:cc:24:47:35:c2:15:4c:c0:89:3e:7f:c7:fb:75:b5:5d:09: c6:fb:6e:3b:67:13:d7:5f:92:d1:b5:95:37:17:09:8f:43:13: a0:5a:6b:0f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NDlaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY3OEU1MEU2MjQzMzY4 MjZGOTU2NkJERDdDMDk0NEIxQzg1NDI2NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnuRlV+2cDainXBRTUsg/auvfzY1yc91T1g0fbm2TVbtFrk+5E czmDBksZf27DdH8fYnOwCWzFhyY944+0kIcE7JZPrheKSEsjD1qTuEy/YawYlcJo 3X163wSSMzXO50vQ/uVpW0ndockx1YtdC8SQT2u4WMqbJDvI/VxHgIZZ4iCPdPIj XXKz+kXuuoULYTJAaR7k2CdUMXtEhNu325ctFoURS8/wvcM759ht2bXMKFJ2VuKI rTgxs/pk/AwMKqsif+p6YWpOQJm2Qg2c5yofFna4gBuKRFWjptgrTXWzkg3c2Ray qbsPbOXVC44AK/UAgqJlOtJqtPLdQ+E2oXuJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU945Q5iQzaCb5VmvdfAlEschUJmgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0Lzk0NVE1aVF6YUNiNVZtdmRmQWxFc2NoVUptZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJv6yAwDQYJKoZIhvcNAQELBQADggEBAH8ZHU3IdlVpSi0I1hbSiA92vtNM sBhg8nIA8f6bviGUex/CUzY/UUs/ZSMR3aoJRk6ru1naEeJfXr6bm4g/BoyAxCke RAQfvRYwNKDgCUHVbWmsxP0B4suNwfUSyhEaRoahJOXjmfoSaaFqS2/joFKt9L3j sIt/eeCLKquZVNkuMeYgkX/Sc8eyuFSmbExkmFvCSGlbKRZ310cOT0rBb3SJC3CZ ELu72fuYaC9NgHT+FFKz/cvz3rXMKc1CqWGCYQotsc1gU+NejS6yg4STHj5TLBww KY1Irt3MJEc1whVMwIk+f8f7dbVdCcb7bjtnE9dfktG1lTcXCY9DE6Baaw8= -----END CERTIFICATE-----Generated at Wed Nov 5 20:26:58 2025 by rpki-client