$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/AnDZY3dnFTy2XobfS988aKiSVeo.roa File: AnDZY3dnFTy2XobfS988aKiSVeo.roa (raw, json) Hash identifier: fSHOUjPqyrETBTDfXC1cHUsrH40SS0dEMsKi2nbHeD4= Subject key identifier: 02:70:D9:63:77:67:15:3C:B6:5E:86:DF:4B:DF:3C:68:A8:92:55:EA Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 041E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AnDZY3dnFTy2XobfS988aKiSVeo.roa Signing time: Thu 01 May 2025 01:48:45 +0000 ROA not before: Thu 01 May 2025 01:48:45 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 183.181.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:45 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0270D9637767153CB65E86DF4BDF3C68A89255EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:a7:dd:3c:40:2c:78:23:f3:16:9b:20:0a: 7c:c8:04:87:cc:71:50:1c:05:63:93:cd:ca:c4:d6: ea:67:80:a7:8b:7a:4e:f9:e6:38:94:0d:66:fc:36: 48:a7:c7:9a:f5:b1:ce:c7:c8:a9:26:87:af:f9:b5: ca:f9:c7:50:3b:3e:14:11:09:78:2b:06:eb:52:a6: 48:2a:69:9f:ec:ca:13:05:a3:14:7e:7a:df:ad:d9: 73:65:16:ec:3d:67:56:de:a3:43:5f:d2:bb:dd:ae: 80:86:30:52:bf:9a:21:f9:9f:da:c1:24:26:09:b8: b2:4c:fd:90:7d:f4:f3:7c:bd:d7:ef:f3:3d:9a:e9: 20:1d:df:3d:8f:95:0b:51:5d:1d:59:c3:bb:df:4a: 51:c2:73:75:3b:60:de:bd:43:8b:62:0a:03:f0:ae: aa:a6:88:d5:ab:07:61:9d:39:42:49:6a:e6:9f:5c: b2:6c:ee:b8:00:5b:50:82:ac:1d:ea:a2:8e:76:7b: 1f:a6:5e:b8:b3:f6:60:aa:fc:d1:a0:83:a2:e7:0d: 13:b3:9e:08:8e:5b:8f:ac:a9:bb:b3:f4:be:7e:17: d9:4d:ed:e6:22:e4:64:57:9a:b0:a3:9a:a6:24:6d: b5:3b:64:42:21:52:09:08:39:a0:57:3b:52:4b:9a: c8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:70:D9:63:77:67:15:3C:B6:5E:86:DF:4B:DF:3C:68:A8:92:55:EA X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AnDZY3dnFTy2XobfS988aKiSVeo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.181.64.0/21 Signature Algorithm: sha256WithRSAEncryption 46:da:58:05:a1:5d:41:83:f3:f3:65:2e:0d:6a:1a:c5:e5:2c: 97:2c:7e:5e:c7:de:65:6c:d6:3f:07:ea:5d:cc:3d:87:dd:b8: 04:3b:1b:15:d0:d2:f8:e7:b1:cf:89:56:7d:64:9e:d9:31:26: 62:11:b5:ca:26:51:55:fb:b5:73:6d:e1:aa:b4:77:91:cf:c4: a3:30:9d:88:eb:8b:aa:d4:a7:ff:31:33:44:f0:89:0f:f4:52: 1a:94:1b:58:e5:68:f6:89:38:26:c5:b8:63:17:02:6a:94:03: de:a6:10:57:16:de:ed:d9:38:67:c4:0a:98:13:87:e7:b0:c6: 4d:d8:40:48:80:7e:af:7a:a1:99:b8:d2:67:36:f7:1b:a8:e0: e9:77:5d:d5:1b:c2:31:55:ab:ef:c7:0f:db:f4:4b:ab:3f:fa: 50:b5:29:65:89:bc:6e:16:00:ad:9e:d2:b6:62:76:c5:58:15: ba:1f:9a:41:17:83:f5:cb:fa:30:ca:fe:b1:80:ac:7a:f2:8f: 3f:9a:1c:62:94:2b:71:44:a5:ee:be:76:9c:22:38:46:10:b6: b0:d1:b3:cf:8f:39:b6:73:57:24:91:67:5c:bc:87:02:b7:9b: 3e:c9:0a:26:69:47:4b:72:57:43:72:e3:67:1e:e5:a5:1e:40: 73:c5:29:60 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NDVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAyNzBEOTYzNzc2NzE1 M0NCNjVFODZERjRCREYzQzY4QTg5MjU1RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCejafdPEAseCPzFpsgCnzIBIfMcVAcBWOTzcrE1upngKeLek75 5jiUDWb8Nkinx5r1sc7HyKkmh6/5tcr5x1A7PhQRCXgrButSpkgqaZ/syhMFoxR+ et+t2XNlFuw9Z1beo0Nf0rvdroCGMFK/miH5n9rBJCYJuLJM/ZB99PN8vdfv8z2a 6SAd3z2PlQtRXR1Zw7vfSlHCc3U7YN69Q4tiCgPwrqqmiNWrB2GdOUJJauafXLJs 7rgAW1CCrB3qoo52ex+mXriz9mCq/NGgg6LnDROzngiOW4+sqbuz9L5+F9lN7eYi 5GRXmrCjmqYkbbU7ZEIhUgkIOaBXO1JLmsh7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAnDZY3dnFTy2XobfS988aKiSVeowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0FuRFpZM2RuRlR5MlhvYmZTOTg4YUtpU1Zlby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO3tUAwDQYJKoZIhvcNAQELBQADggEBAEbaWAWhXUGD8/NlLg1qGsXlLJcs fl7H3mVs1j8H6l3MPYfduAQ7GxXQ0vjnsc+JVn1kntkxJmIRtcomUVX7tXNt4aq0 d5HPxKMwnYjri6rUp/8xM0TwiQ/0UhqUG1jlaPaJOCbFuGMXAmqUA96mEFcW3u3Z OGfECpgTh+ewxk3YQEiAfq96oZm40mc29xuo4Ol3XdUbwjFVq+/HD9v0S6s/+lC1 KWWJvG4WAK2e0rZidsVYFbofmkEXg/XL+jDK/rGArHryjz+aHGKUK3FEpe6+dpwi OEYQtrDRs8+PObZzVySRZ1y8hwK3mz7JCiZpR0tyV0Ny42ce5aUeQHPFKWA= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:48 2025 by rpki-client