$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/HKglPiVVLz4yVePEUTdbjuCSqN4.roa File: HKglPiVVLz4yVePEUTdbjuCSqN4.roa (raw, json) Hash identifier: VmM7xuH618qby9/Nglt8vxM0R2ZE7MwYENDI0C42X7Y= Subject key identifier: 1C:A8:25:3E:25:55:2F:3E:32:55:E3:C4:51:37:5B:8E:E0:92:A8:DE Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0476 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HKglPiVVLz4yVePEUTdbjuCSqN4.roa Signing time: Wed 01 Oct 2025 01:34:52 +0000 ROA not before: Wed 01 Oct 2025 01:34:52 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 113.213.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:52 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=1CA8253E25552F3E3255E3C451375B8EE092A8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:80:ce:b2:ea:25:63:c8:6b:18:ca:8f:6b: 6b:80:72:be:31:25:5f:45:3e:62:92:5b:28:78:fc: 12:38:54:bd:37:13:75:d0:09:9b:c5:8b:35:82:40: 9f:67:9f:72:38:3c:2f:e9:bb:29:fe:78:91:6f:15: 6d:3d:cf:41:84:6c:a6:85:80:29:53:ae:8e:35:63: 68:70:4d:57:af:66:57:71:4e:23:86:46:ab:0a:c2: 1a:3a:c6:31:9f:5d:7d:6e:ab:e5:6d:8e:b9:e3:d6: ff:56:e3:d2:d4:0e:c5:f4:f4:f2:6b:ed:f5:dd:4f: c9:b1:2e:96:cb:8d:f7:0c:cb:44:78:27:8b:ab:d2: c6:7f:7e:9d:eb:9e:cd:f6:e6:86:c3:ed:e4:c5:6d: fc:32:0e:f2:15:60:43:dc:c5:12:6f:d3:19:be:6f: 80:be:29:2c:7d:ed:fa:18:2f:8d:35:6d:6c:88:98: 0a:05:76:ae:c8:b2:b2:d7:c5:5a:b4:89:ee:e7:d7: 9a:94:53:bb:df:77:f0:69:b2:44:8c:5f:1f:3f:e1: bd:62:de:60:ca:07:5e:25:f3:48:cd:bd:ab:e1:55: 69:a6:28:8b:9f:cd:95:24:00:48:a3:7b:ca:1a:09: 20:6b:21:88:88:ee:db:90:1f:05:06:e1:9e:35:c0: 04:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A8:25:3E:25:55:2F:3E:32:55:E3:C4:51:37:5B:8E:E0:92:A8:DE X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/HKglPiVVLz4yVePEUTdbjuCSqN4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.213.244.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:90:6b:47:a9:88:f2:37:7a:3d:38:8e:a4:68:1c:7c:90:79: 1b:ef:e9:ee:5a:04:1a:5c:19:65:d0:6f:4f:7d:b5:f3:d2:f9: b2:b9:98:05:a9:a1:96:a4:9c:5e:68:5d:22:f0:29:2f:c7:77: 20:4d:f1:ce:44:ad:af:9c:e3:93:9a:0e:37:df:f7:41:8c:6c: 99:7e:00:06:4b:bf:9a:87:83:b6:48:1a:b6:e2:5c:ea:dc:32: 8c:4f:9f:b0:65:81:8d:8d:6e:b1:4a:94:c8:fc:27:2f:b0:7d: b7:25:0f:0c:69:4e:b8:70:0e:06:69:a1:2d:94:83:c1:3c:26: fd:c5:7d:d3:05:dc:21:da:be:f6:fe:34:24:09:62:99:b7:f2: d2:dd:cc:f4:18:61:e8:fa:14:eb:b7:03:70:e0:46:01:69:43: d3:08:c4:8f:a5:8d:7f:bc:1b:7d:8b:5d:3f:b0:50:33:ba:69: ac:e9:2b:93:2b:04:05:52:aa:ad:56:87:ac:65:fb:7e:47:40: 2a:d4:d8:8c:87:4a:51:4f:f6:a2:cf:cf:ea:3d:54:ca:34:a8: cf:e7:b2:a9:91:6e:e7:88:46:52:36:2b:d9:d8:f9:ad:1f:d0: 16:e0:5d:08:53:c5:ea:67:13:b2:94:62:0b:91:c5:ca:f3:3b: 21:b6:af:b6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NTJaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFDQTgyNTNFMjU1NTJG M0UzMjU1RTNDNDUxMzc1QjhFRTA5MkE4REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpoYDOsuolY8hrGMqPa2uAcr4xJV9FPmKSWyh4/BI4VL03E3XQ CZvFizWCQJ9nn3I4PC/puyn+eJFvFW09z0GEbKaFgClTro41Y2hwTVevZldxTiOG RqsKwho6xjGfXX1uq+Vtjrnj1v9W49LUDsX09PJr7fXdT8mxLpbLjfcMy0R4J4ur 0sZ/fp3rns325obD7eTFbfwyDvIVYEPcxRJv0xm+b4C+KSx97foYL401bWyImAoF dq7IsrLXxVq0ie7n15qUU7vfd/BpskSMXx8/4b1i3mDKB14l80jNvavhVWmmKIuf zZUkAEije8oaCSBrIYiI7tuQHwUG4Z41wASjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHKglPiVVLz4yVePEUTdbjuCSqN4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0hLZ2xQaVZWTHo0eVZlUEVVVGRianVDU3FONC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJx1fQwDQYJKoZIhvcNAQELBQADggEBAG+Qa0epiPI3ej04jqRoHHyQeRvv 6e5aBBpcGWXQb099tfPS+bK5mAWpoZaknF5oXSLwKS/HdyBN8c5Era+c45OaDjff 90GMbJl+AAZLv5qHg7ZIGrbiXOrcMoxPn7BlgY2NbrFKlMj8Jy+wfbclDwxpTrhw DgZpoS2Ug8E8Jv3FfdMF3CHavvb+NCQJYpm38tLdzPQYYej6FOu3A3DgRgFpQ9MI xI+ljX+8G32LXT+wUDO6aazpK5MrBAVSqq1Wh6xl+35HQCrU2IyHSlFP9qLPz+o9 VMo0qM/nsqmRbueIRlI2K9nY+a0f0BbgXQhTxepnE7KUYguRxcrzOyG2r7Y= -----END CERTIFICATE-----Generated at Wed Nov 5 21:47:45 2025 by rpki-client