$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CoMLZ7szOJY8ak7DRhTqrW13WTc.roa File: CoMLZ7szOJY8ak7DRhTqrW13WTc.roa (raw, json) Hash identifier: 2s+ycn1kUZxnDP4bGt+cxByTLWlUF+CDD0dIIoyunBU= Subject key identifier: 0A:83:0B:67:BB:33:38:96:3C:6A:4E:C3:46:14:EA:AD:6D:77:59:37 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03B2 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CoMLZ7szOJY8ak7DRhTqrW13WTc.roa Signing time: Thu 01 May 2025 01:40:29 +0000 ROA not before: Thu 01 May 2025 01:40:29 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 27.135.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 946 (0x3b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:29 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0A830B67BB3338963C6A4EC34614EAAD6D775937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:85:b8:fa:81:22:16:ad:7c:1e:28:ae:3d: e6:5e:b8:c8:a4:d7:1c:47:b0:f4:22:ed:28:a1:fc: 6e:bd:24:81:87:25:5c:ff:d4:e0:00:80:4c:03:19: ac:e3:52:7e:8e:9c:b3:00:d8:ad:1c:be:49:4f:79: d8:bf:fd:59:9f:b5:51:66:59:a4:9c:f2:2b:27:4e: 33:63:11:80:02:fb:21:d7:6b:9b:a3:6d:2c:74:0b: 0b:9f:c9:33:19:a8:e9:9a:46:f6:a9:5e:02:b0:12: 8c:18:45:69:dc:96:55:ea:38:95:bf:cd:33:93:03: b7:0f:8e:e8:cf:a3:44:da:ee:1b:68:6d:49:34:cc: 17:c0:68:16:af:66:c9:34:42:ee:ef:e2:3a:20:5e: fd:0b:2c:a5:fd:41:6b:32:1e:89:e7:32:b5:9a:20: 89:bf:29:a5:38:7c:4a:f8:17:6d:3a:9f:6b:be:6b: 8d:9e:35:73:20:f9:fc:39:13:80:71:10:57:ea:ab: 36:54:21:cb:b0:4b:f1:7b:57:4a:82:bf:03:de:3d: 70:1d:25:e2:4f:11:bf:94:03:d1:8b:e8:1d:b6:8d: 74:d2:c8:39:f1:71:b3:65:d6:8e:3d:92:a6:89:21: 9f:e7:00:b9:75:9b:fc:de:11:dc:b4:a5:09:07:69: 6c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:83:0B:67:BB:33:38:96:3C:6A:4E:C3:46:14:EA:AD:6D:77:59:37 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CoMLZ7szOJY8ak7DRhTqrW13WTc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.135.128.0/17 Signature Algorithm: sha256WithRSAEncryption 3f:9e:55:1d:ba:e2:8d:83:55:31:24:7d:d8:c4:01:9d:78:77: 9c:45:20:9b:42:1b:ec:a5:a9:f3:c1:92:41:f9:c8:e8:12:22: b8:1d:54:bf:43:a7:f6:c6:e2:2f:e3:a7:ee:5d:01:6f:d8:c7: 8d:4d:b3:de:69:39:e7:76:89:a3:a7:1a:ec:dd:a7:2c:95:05: c9:6f:ca:b6:44:0a:87:04:67:b4:e3:10:5a:d1:c5:06:94:d4: 86:77:57:40:66:9e:90:d7:50:1e:55:89:80:29:cf:ec:82:65: 0c:f4:0b:c7:a6:4a:89:3d:d7:e9:f1:7a:af:98:91:0d:c7:51: 25:2a:9b:f8:8c:88:90:44:6c:ef:29:74:66:f2:d6:8a:fb:7d: 86:45:bd:a6:d1:09:13:ce:f6:2b:45:19:35:7f:17:c5:d4:5c: 11:03:70:a6:0f:3f:48:f8:a7:3e:86:bd:55:6b:d5:67:53:d3: 29:39:22:32:8c:21:e3:89:0f:3d:80:b6:51:99:10:39:5a:1b: 24:17:04:cd:89:97:ed:0d:de:c3:8c:64:bd:75:0d:f1:ac:3c: 96:8a:2e:7b:0b:91:3d:4a:1f:5f:c9:96:77:0f:c4:7b:17:d8: 76:db:88:be:81:6f:89:94:66:0c:92:e6:60:c4:c4:8b:a9:2a: 1b:06:48:7d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMjlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBBODMwQjY3QkIzMzM4 OTYzQzZBNEVDMzQ2MTRFQUFENkQ3NzU5MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHSYW4+oEiFq18HiiuPeZeuMik1xxHsPQi7Sih/G69JIGHJVz/ 1OAAgEwDGazjUn6OnLMA2K0cvklPedi//VmftVFmWaSc8isnTjNjEYAC+yHXa5uj bSx0CwufyTMZqOmaRvapXgKwEowYRWncllXqOJW/zTOTA7cPjujPo0Ta7htobUk0 zBfAaBavZsk0Qu7v4jogXv0LLKX9QWsyHonnMrWaIIm/KaU4fEr4F206n2u+a42e NXMg+fw5E4BxEFfqqzZUIcuwS/F7V0qCvwPePXAdJeJPEb+UA9GL6B22jXTSyDnx cbNl1o49kqaJIZ/nALl1m/zeEdy0pQkHaWydAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCoMLZ7szOJY8ak7DRhTqrW13WTcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0NvTUxaN3N6T0pZOGFrN0RSaFRxclcxM1dUYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcbh4AwDQYJKoZIhvcNAQELBQADggEBAD+eVR264o2DVTEkfdjEAZ14d5xF IJtCG+ylqfPBkkH5yOgSIrgdVL9Dp/bG4i/jp+5dAW/Yx41Ns95pOed2iaOnGuzd pyyVBclvyrZECocEZ7TjEFrRxQaU1IZ3V0BmnpDXUB5ViYApz+yCZQz0C8emSok9 1+nxeq+YkQ3HUSUqm/iMiJBEbO8pdGby1or7fYZFvabRCRPO9itFGTV/F8XUXBED cKYPP0j4pz6GvVVr1WdT0yk5IjKMIeOJDz2AtlGZEDlaGyQXBM2Jl+0N3sOMZL11 DfGsPJaKLnsLkT1KH1/JlncPxHsX2HbbiL6Bb4mUZgyS5mDExIupKhsGSH0= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:55 2025 by rpki-client