$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9HaoHa33BT9pMvSMIIjyilEOjbc.roa File: 9HaoHa33BT9pMvSMIIjyilEOjbc.roa (raw, json) Hash identifier: i3Z0kDjaz4hg8xsX6fdgWYGCoPlv6fI6+O6N9otjpKk= Subject key identifier: F4:76:A8:1D:AD:F7:05:3F:69:32:F4:8C:20:88:F2:8A:51:0E:8D:B7 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0497 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9HaoHa33BT9pMvSMIIjyilEOjbc.roa Signing time: Wed 01 Oct 2025 01:43:37 +0000 ROA not before: Wed 01 Oct 2025 01:43:37 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 220.215.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:43:37 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=F476A81DADF7053F6932F48C2088F28A510E8DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:ae:ec:71:63:98:0b:a6:43:ba:be:ea:f0: c5:d3:02:82:4b:0f:b2:ee:72:4b:9b:f8:72:27:c9: 70:e6:24:bc:70:5a:03:70:4a:4e:cc:37:a3:93:89: 3d:65:00:eb:a3:7b:95:2c:e1:d6:94:53:6e:22:1d: e0:e3:98:59:d2:42:de:2d:e0:9d:dc:31:ce:34:d8: 8b:36:74:b6:64:c3:06:a7:69:31:8c:3b:62:58:24: 8f:d5:0e:66:cb:44:d8:94:c3:b5:67:8c:78:ab:88: 89:63:61:2a:b9:83:54:8e:78:67:34:73:ae:6f:ff: 7c:d8:fb:30:56:15:63:76:1c:4f:1c:8a:6a:4f:ba: 79:dc:95:73:08:6b:97:a4:89:05:4b:5a:e4:23:2a: 56:f9:6f:53:9d:7f:6d:45:32:43:0a:8a:e3:bd:ee: 75:fa:57:10:d7:b7:98:e4:76:28:cc:b0:07:7f:58: c4:ad:15:99:ad:b2:39:11:e9:d8:e0:26:7d:50:3e: 94:cd:53:d8:04:4d:3c:6b:2d:d3:7b:ea:d6:20:3d: 5d:2c:4c:d3:f9:53:e2:ee:89:e6:67:01:b8:49:b0: 03:b8:d2:6d:54:be:01:29:18:85:7e:a1:77:72:4b: a6:5f:7d:f2:72:6c:4c:e8:1b:64:e1:4c:8c:c7:45: e1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:76:A8:1D:AD:F7:05:3F:69:32:F4:8C:20:88:F2:8A:51:0E:8D:B7 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9HaoHa33BT9pMvSMIIjyilEOjbc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.215.32.0/21 Signature Algorithm: sha256WithRSAEncryption 51:8d:c9:e8:d3:7e:36:05:3a:ea:ca:23:14:8d:25:81:dd:ae: 88:75:9f:25:f7:2b:bd:ce:d5:a3:af:dc:41:48:34:10:17:c5: c5:3b:3d:83:bd:17:9f:9b:d4:8b:a3:45:4b:bf:c2:ee:ab:25: 8f:59:74:da:77:ae:3b:e8:d6:a2:e5:87:fe:c4:56:af:d7:41: 4a:e1:a4:a7:f0:e3:7f:9d:6c:34:28:6f:20:a5:39:5a:7f:02: 6a:8f:2e:10:bd:37:54:1e:d0:b9:9c:c7:1d:45:34:ea:75:28: 86:b4:dd:49:d0:87:0c:00:8f:fe:6a:dd:10:75:b7:ae:07:6e: a5:cd:43:21:a3:45:1a:22:45:7b:95:32:07:9e:a3:5f:60:7f: 90:a0:15:50:7a:00:be:c6:b3:f4:b3:f5:80:91:fe:33:43:5e: 9a:4b:a0:81:e3:db:6e:45:94:ae:70:9a:20:74:8a:02:66:f3: 05:d7:6e:0f:0e:63:26:12:a4:63:61:2f:ff:19:d4:06:ec:27: e3:38:15:16:7c:1c:d3:2a:5c:3d:30:5e:8e:d5:de:51:ae:3e: c0:a4:25:c1:04:e8:ca:82:1d:c1:87:7e:96:87:04:f6:2a:21: e3:8e:b9:10:8e:0f:94:c4:58:62:19:44:9f:60:7f:6e:52:bf: 32:98:2d:d3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTQzMzdaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0NzZBODFEQURGNzA1 M0Y2OTMyRjQ4QzIwODhGMjhBNTEwRThEQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi7K7scWOYC6ZDur7q8MXTAoJLD7Luckub+HInyXDmJLxwWgNw Sk7MN6OTiT1lAOuje5Us4daUU24iHeDjmFnSQt4t4J3cMc402Is2dLZkwwanaTGM O2JYJI/VDmbLRNiUw7VnjHiriIljYSq5g1SOeGc0c65v/3zY+zBWFWN2HE8cimpP unnclXMIa5ekiQVLWuQjKlb5b1Odf21FMkMKiuO97nX6VxDXt5jkdijMsAd/WMSt FZmtsjkR6djgJn1QPpTNU9gETTxrLdN76tYgPV0sTNP5U+LuieZnAbhJsAO40m1U vgEpGIV+oXdyS6ZfffJybEzoG2ThTIzHReGZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9HaoHa33BT9pMvSMIIjyilEOjbcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzlIYW9IYTMzQlQ5cE12U01JSWp5aWxFT2piYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc1yAwDQYJKoZIhvcNAQELBQADggEBAFGNyejTfjYFOurKIxSNJYHdroh1 nyX3K73O1aOv3EFINBAXxcU7PYO9F5+b1IujRUu/wu6rJY9ZdNp3rjvo1qLlh/7E Vq/XQUrhpKfw43+dbDQobyClOVp/AmqPLhC9N1Qe0Lmcxx1FNOp1KIa03UnQhwwA j/5q3RB1t64HbqXNQyGjRRoiRXuVMgeeo19gf5CgFVB6AL7Gs/Sz9YCR/jNDXppL oIHj225FlK5wmiB0igJm8wXXbg8OYyYSpGNhL/8Z1AbsJ+M4FRZ8HNMqXD0wXo7V 3lGuPsCkJcEE6MqCHcGHfpaHBPYqIeOOuRCOD5TEWGIZRJ9gf25SvzKYLdM= -----END CERTIFICATE-----Generated at Wed Nov 5 20:33:46 2025 by rpki-client