$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/DsrXA3PXlA8XBROlGh5nlkUhyxw.roa File: DsrXA3PXlA8XBROlGh5nlkUhyxw.roa (raw, json) Hash identifier: tJnXermxuNOW8LH1eAsdI8cowSs+Zex1PN+/2aHqsRE= Subject key identifier: 0E:CA:D7:03:73:D7:94:0F:17:05:13:A5:1A:1E:67:96:45:21:CB:1C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03CD Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DsrXA3PXlA8XBROlGh5nlkUhyxw.roa Signing time: Thu 01 May 2025 01:42:41 +0000 ROA not before: Thu 01 May 2025 01:42:41 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.44.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:42:41 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0ECAD70373D7940F170513A51A1E67964521CB1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:16:f7:4c:09:b5:ff:f4:6f:83:6b:35:88: 60:51:d5:5b:47:e5:75:f0:1f:25:9b:36:75:52:b9: cb:47:0e:11:6d:27:dc:96:bb:9d:88:bf:73:1d:5c: 57:56:6c:35:5f:53:e9:61:9f:59:f3:80:71:be:99: 99:22:b7:8a:17:19:64:41:d0:9f:c3:9d:85:31:83: d1:df:24:e4:1e:ac:e9:03:3d:56:0a:ef:ab:00:3d: 47:f9:56:fa:02:27:98:33:1a:52:c7:fe:fe:e5:c6: 97:05:e7:21:9c:d2:aa:8c:fc:1b:11:76:1b:fb:60: 65:be:3b:d9:16:70:fb:13:90:13:f2:96:b7:51:b8: ab:38:68:ac:01:f1:de:35:b3:dd:68:5e:35:6d:0b: fa:8a:83:3e:84:0d:61:9b:17:8d:26:54:88:e7:23: 20:25:9c:9d:9d:30:1f:a1:e3:13:2a:79:14:9a:67: 87:24:61:0c:7f:cd:ff:77:b5:5b:a3:b1:c9:07:79: f2:e7:06:c6:f1:fb:26:e0:bc:09:2a:1d:12:61:68: 7f:4f:36:fe:66:41:36:fe:50:82:2e:a4:4e:02:eb: cf:f6:ae:ff:77:e1:97:ba:66:97:dc:fa:6d:81:82: c1:ed:74:53:a5:50:b3:de:b7:32:51:86:2a:5b:6f: a1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:D7:03:73:D7:94:0F:17:05:13:A5:1A:1E:67:96:45:21:CB:1C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DsrXA3PXlA8XBROlGh5nlkUhyxw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.44.32.0/19 Signature Algorithm: sha256WithRSAEncryption 2e:41:f3:87:e0:f4:a4:aa:91:2a:0d:ed:bd:e7:c8:49:7c:8d: 37:d9:0b:fb:0f:21:b1:c8:af:0b:86:6a:70:9f:b5:75:02:a9: ad:46:fb:a4:68:9c:d9:8a:42:c5:70:80:84:fc:69:5f:cf:2a: a0:7a:53:c4:08:65:8a:62:99:b1:f3:ab:3e:5f:2c:76:cd:82: bc:8d:c0:b7:57:27:07:fa:3f:d8:b0:8f:0f:21:50:35:e9:88: b4:25:45:f2:22:0e:13:72:44:f0:4d:58:eb:f4:75:bd:6a:e7: 55:e6:d9:d9:1d:84:97:17:8e:49:1b:ce:03:81:8d:dc:6a:6e: e0:9d:46:9b:56:d8:b1:a8:32:77:a3:40:03:50:02:73:68:de: f1:e1:ee:87:24:0c:e9:09:c8:86:55:4c:f4:b3:5f:31:d8:05: 07:48:fb:29:2c:64:66:a2:51:ad:73:17:71:ce:7a:e1:58:77: 37:ae:f0:cf:e2:eb:b2:d4:9e:c6:13:19:84:e4:d9:b0:ff:9d: 7e:cb:52:64:9b:5b:e7:b5:b3:30:6f:52:3e:69:29:06:91:bf: ae:ba:a2:0a:02:0a:33:b4:51:61:8e:51:03:76:35:05:71:b1: d9:32:91:30:5e:b9:0c:09:50:64:b4:22:d1:48:fd:c6:c3:7a: 42:7c:93:0e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQyNDFaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBFQ0FENzAzNzNENzk0 MEYxNzA1MTNBNTFBMUU2Nzk2NDUyMUNCMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7qhb3TAm1//Rvg2s1iGBR1VtH5XXwHyWbNnVSuctHDhFtJ9yW u52Iv3MdXFdWbDVfU+lhn1nzgHG+mZkit4oXGWRB0J/DnYUxg9HfJOQerOkDPVYK 76sAPUf5VvoCJ5gzGlLH/v7lxpcF5yGc0qqM/BsRdhv7YGW+O9kWcPsTkBPylrdR uKs4aKwB8d41s91oXjVtC/qKgz6EDWGbF40mVIjnIyAlnJ2dMB+h4xMqeRSaZ4ck YQx/zf93tVujsckHefLnBsbx+ybgvAkqHRJhaH9PNv5mQTb+UIIupE4C68/2rv93 4Ze6Zpfc+m2BgsHtdFOlULPetzJRhipbb6HHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDsrXA3PXlA8XBROlGh5nlkUhyxwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0RzclhBM1BYbEE4WEJST2xHaDVubGtVaHl4dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU9LCAwDQYJKoZIhvcNAQELBQADggEBAC5B84fg9KSqkSoN7b3nyEl8jTfZ C/sPIbHIrwuGanCftXUCqa1G+6RonNmKQsVwgIT8aV/PKqB6U8QIZYpimbHzqz5f LHbNgryNwLdXJwf6P9iwjw8hUDXpiLQlRfIiDhNyRPBNWOv0db1q51Xm2dkdhJcX jkkbzgOBjdxqbuCdRptW2LGoMnejQANQAnNo3vHh7ockDOkJyIZVTPSzXzHYBQdI +yksZGaiUa1zF3HOeuFYdzeu8M/i67LUnsYTGYTk2bD/nX7LUmSbW+e1szBvUj5p KQaRv666ogoCCjO0UWGOUQN2NQVxsdkykTBeuQwJUGS0ItFI/cbDekJ8kw4= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:27 2025 by rpki-client