$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/DSiT9jStLomdzbLrMFJMosbO84w.roa File: DSiT9jStLomdzbLrMFJMosbO84w.roa (raw, json) Hash identifier: /RzbMyfzaX/ptHtT2Sq3S0cHbjqCyFzTi7kVd9sMab8= Subject key identifier: 0D:28:93:F6:34:AD:2E:89:9D:CD:B2:EB:30:52:4C:A2:C6:CE:F3:8C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03D9 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DSiT9jStLomdzbLrMFJMosbO84w.roa Signing time: Thu 01 May 2025 01:42:47 +0000 ROA not before: Thu 01 May 2025 01:42:47 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 110.0.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:47 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0D2893F634AD2E899DCDB2EB30524CA2C6CEF38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:9d:dd:7d:13:1f:36:c3:b2:2f:61:12:de: b7:9b:04:b8:7c:41:d2:b3:8f:82:82:06:ba:23:11: 41:47:21:d8:61:95:a8:97:fa:4d:59:4b:d5:36:f1: e3:74:34:50:2e:75:36:9a:73:c1:97:85:12:25:23: 23:16:e8:0f:0e:09:44:91:5c:d6:6a:b3:ac:03:2d: b1:e4:d2:01:ec:79:24:f6:2b:ab:fd:ae:f0:5c:38: d2:a1:65:03:7f:01:6d:64:90:f7:39:55:41:06:74: 6e:65:1b:2a:2e:d0:3c:17:5e:ee:d8:a7:e9:89:47: e7:f9:ed:68:6d:3a:8a:c3:40:2e:62:e9:eb:64:4e: 24:43:12:c7:8d:ad:8f:98:03:47:58:4e:39:73:1d: 99:db:cd:8e:b9:a7:43:c9:17:2d:64:c3:88:01:19: 72:3e:ac:3d:0e:82:30:db:8f:a7:43:37:4d:86:95: 9b:9e:df:4d:ef:67:a0:58:ca:ce:48:7b:35:a5:92: a2:1f:17:4a:b6:68:f4:50:67:5e:11:25:2a:84:b4: f2:e1:c4:37:16:09:1f:63:59:55:a0:25:6f:45:13: 16:89:ca:6c:bc:80:65:32:03:13:86:8e:c1:c8:89: 1e:8a:ad:2d:86:21:c4:b8:43:b7:c0:68:4e:58:85: ec:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:93:F6:34:AD:2E:89:9D:CD:B2:EB:30:52:4C:A2:C6:CE:F3:8C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DSiT9jStLomdzbLrMFJMosbO84w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.0.0.0/15 Signature Algorithm: sha256WithRSAEncryption 53:81:5a:ea:43:2e:11:07:fb:dd:8a:9c:24:10:cb:84:85:8f: 3f:47:db:0a:72:1b:cf:ba:a5:96:3d:d4:ff:3e:22:d4:3b:61: 83:d0:1d:74:f3:54:1d:11:9c:e0:93:8b:da:f0:16:4b:96:b8: 88:34:22:c0:7b:61:17:60:5d:af:60:90:52:4d:1d:4c:de:ec: 6f:eb:d1:7a:51:e4:bb:e4:46:4c:6e:c0:a6:80:ad:4d:0d:da: 6c:a6:ef:e6:f3:ed:f1:9c:da:5d:01:7d:e9:c7:9c:9e:c5:e7: 49:47:ba:7c:70:25:89:c2:73:58:25:ad:6a:bd:fc:14:fb:43: 0a:e7:a4:0a:32:dd:95:51:ec:90:a3:89:a3:36:0b:1b:6e:b5: f3:67:37:d5:00:57:75:ee:94:3c:b5:cc:c3:14:d7:67:3a:97: 7c:70:fd:23:f4:78:7e:e6:9b:14:45:6c:77:9f:57:d5:23:0f: 60:d0:07:75:4c:76:d0:ea:ea:2e:d7:96:1e:85:44:fa:d3:19: fb:1d:12:bb:74:e4:25:4e:7f:90:d1:b9:04:a8:d9:5a:1d:f4: f0:e4:2b:b2:ee:ad:92:39:3d:01:45:45:7c:10:40:81:09:26: a3:b8:5f:7c:27:7f:61:8b:ea:b9:0f:51:db:89:54:b0:53:cb: 15:78:35:9a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNDdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBEMjg5M0Y2MzRBRDJF ODk5RENEQjJFQjMwNTI0Q0EyQzZDRUYzOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcV53dfRMfNsOyL2ES3rebBLh8QdKzj4KCBrojEUFHIdhhlaiX +k1ZS9U28eN0NFAudTaac8GXhRIlIyMW6A8OCUSRXNZqs6wDLbHk0gHseST2K6v9 rvBcONKhZQN/AW1kkPc5VUEGdG5lGyou0DwXXu7Yp+mJR+f57WhtOorDQC5i6etk TiRDEseNrY+YA0dYTjlzHZnbzY65p0PJFy1kw4gBGXI+rD0OgjDbj6dDN02GlZue 303vZ6BYys5IezWlkqIfF0q2aPRQZ14RJSqEtPLhxDcWCR9jWVWgJW9FExaJymy8 gGUyAxOGjsHIiR6KrS2GIcS4Q7fAaE5Yhez7AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUDSiT9jStLomdzbLrMFJMosbO84wwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0RTaVQ5alN0TG9tZHpiTHJNRkpNb3NiTzg0dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFuADANBgkqhkiG9w0BAQsFAAOCAQEAU4Fa6kMuEQf73YqcJBDLhIWPP0fb CnIbz7qllj3U/z4i1Dthg9AddPNUHRGc4JOL2vAWS5a4iDQiwHthF2Bdr2CQUk0d TN7sb+vRelHku+RGTG7ApoCtTQ3abKbv5vPt8ZzaXQF96cecnsXnSUe6fHAlicJz WCWtar38FPtDCuekCjLdlVHskKOJozYLG26182c31QBXde6UPLXMwxTXZzqXfHD9 I/R4fuabFEVsd59X1SMPYNAHdUx20OrqLteWHoVE+tMZ+x0Su3TkJU5/kNG5BKjZ Wh308OQrsu6tkjk9AUVFfBBAgQkmo7hffCd/YYvquQ9R24lUsFPLFXg1mg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:23 2025 by rpki-client