$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/F-aAV3gLdvCqRjCAcP6WWI8M_5U.roa File: F-aAV3gLdvCqRjCAcP6WWI8M_5U.roa (raw, json) Hash identifier: RSIrvhzp1H57/y28gAFEGhtbAK4eNMXEzLwCU6qBjUQ= Subject key identifier: 17:E6:80:57:78:0B:76:F0:AA:46:30:80:70:FE:96:58:8F:0C:FF:95 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03C3 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/F-aAV3gLdvCqRjCAcP6WWI8M_5U.roa Signing time: Thu 01 May 2025 01:40:37 +0000 ROA not before: Thu 01 May 2025 01:40:37 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 59.156.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:37 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=17E68057780B76F0AA46308070FE96588F0CFF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:f6:3d:ea:ae:36:ad:22:fd:dd:ba:67:9a: ff:cf:5f:f8:69:6b:8d:5d:db:f4:74:2d:e4:2b:86: f6:85:44:5e:8c:80:87:01:18:d8:15:57:9a:6e:7e: 24:bd:42:e4:88:de:61:cd:11:be:5d:c9:7e:ad:e6: 0a:c2:6f:4b:35:0e:c5:48:76:e6:b6:e9:b9:db:a7: 80:7f:6b:dc:69:5e:ee:fc:ef:76:59:3f:bc:be:2d: 82:af:a2:3c:05:72:c8:a7:81:76:36:76:23:5e:38: eb:57:73:e4:b6:50:e3:40:59:e8:cd:96:be:af:40: 1d:7a:18:7b:c1:97:1f:66:7b:c4:bf:e7:49:a6:82: b9:92:68:b4:74:73:f6:67:89:ab:00:b9:22:7f:35: 36:62:a6:f2:a1:c1:4e:35:7e:dc:43:ce:02:58:d4: d3:7c:fa:ed:f5:10:77:0e:3e:2f:2c:08:e6:fb:13: a0:5e:ce:8c:6f:2e:b6:fe:0a:06:b9:f0:c6:30:84: dc:50:18:bc:ba:96:26:94:72:b2:3f:36:f8:f6:f8: 08:cc:ae:d3:89:7e:11:54:dc:c2:58:fa:fb:4a:36: 88:8d:a0:f5:09:cb:b6:1e:a0:f1:a4:07:02:e4:9e: 5b:6d:02:64:33:b5:f8:0c:97:e8:62:77:f4:af:23: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E6:80:57:78:0B:76:F0:AA:46:30:80:70:FE:96:58:8F:0C:FF:95 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/F-aAV3gLdvCqRjCAcP6WWI8M_5U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.156.128.0/22 Signature Algorithm: sha256WithRSAEncryption 04:6e:40:75:42:bc:20:d7:b1:c2:1d:04:54:29:c8:3c:7c:66: 2e:f0:6e:9b:b9:24:f3:ae:22:61:ce:cd:bb:ad:65:4a:c7:87: d8:94:2e:a7:1f:b2:bb:c1:7c:b2:cf:09:28:25:4f:c6:f8:7a: 7c:37:26:e1:7a:d2:6a:dc:4c:a1:42:52:16:31:f5:df:cb:38: 0c:a3:d2:b1:75:95:a4:9c:d3:f1:b0:47:be:e4:3e:5a:c9:d8: c0:44:63:dc:c6:74:52:ed:96:70:af:ea:97:84:05:57:7c:ed: 62:ba:80:5b:b6:07:95:59:44:97:91:3c:5e:36:b8:ea:ad:63: e6:d7:e1:0c:ae:28:3a:e6:f5:08:4e:cc:6e:88:1e:2f:c0:4c: c8:92:1c:86:e6:f4:1b:3a:d2:3f:5a:b3:ea:99:25:5a:60:fe: 24:cb:86:26:50:e7:88:ba:c1:74:69:9a:e1:93:79:81:0d:07: 6d:05:3f:61:f7:ac:ba:fd:4e:98:d8:b6:6d:4d:a7:1d:4b:b5: 54:e7:02:19:7f:94:85:67:ea:9c:91:8a:83:a9:00:17:43:fd: d0:4a:09:09:3d:e0:a5:80:b0:bf:ed:4c:49:e5:9c:70:96:48: ae:d3:3e:91:c9:54:3c:b7:97:72:33:95:8a:0e:9c:bb:a6:dc: f4:17:34:7f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMzdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE3RTY4MDU3NzgwQjc2 RjBBQTQ2MzA4MDcwRkU5NjU4OEYwQ0ZGOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxbPY96q42rSL93bpnmv/PX/hpa41d2/R0LeQrhvaFRF6MgIcB GNgVV5pufiS9QuSI3mHNEb5dyX6t5grCb0s1DsVIdua26bnbp4B/a9xpXu7873ZZ P7y+LYKvojwFcsingXY2diNeOOtXc+S2UONAWejNlr6vQB16GHvBlx9me8S/50mm grmSaLR0c/ZniasAuSJ/NTZipvKhwU41ftxDzgJY1NN8+u31EHcOPi8sCOb7E6Be zoxvLrb+Cga58MYwhNxQGLy6liaUcrI/Nvj2+AjMrtOJfhFU3MJY+vtKNoiNoPUJ y7YeoPGkBwLknlttAmQztfgMl+hid/SvI8gFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUF+aAV3gLdvCqRjCAcP6WWI8M/5UwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0YtYUFWM2dMZHZDcVJqQ0FjUDZXV0k4TV81VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI7nIAwDQYJKoZIhvcNAQELBQADggEBAARuQHVCvCDXscIdBFQpyDx8Zi7w bpu5JPOuImHOzbutZUrHh9iULqcfsrvBfLLPCSglT8b4enw3JuF60mrcTKFCUhYx 9d/LOAyj0rF1laSc0/GwR77kPlrJ2MBEY9zGdFLtlnCv6peEBVd87WK6gFu2B5VZ RJeRPF42uOqtY+bX4QyuKDrm9QhOzG6IHi/ATMiSHIbm9Bs60j9as+qZJVpg/iTL hiZQ54i6wXRpmuGTeYENB20FP2H3rLr9TpjYtm1Npx1LtVTnAhl/lIVn6pyRioOp ABdD/dBKCQk94KWAsL/tTEnlnHCWSK7TPpHJVDy3l3IzlYoOnLum3PQXNH8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:54 2025 by rpki-client