$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JcFp5rdX4V8lHI6K2_TBRLuLCHk.roa File: JcFp5rdX4V8lHI6K2_TBRLuLCHk.roa (raw, json) Hash identifier: zukp5e3NUr2/ugxXk2Vtu8ur9KRSNqZbCGwcNQeu7BY= Subject key identifier: 25:C1:69:E6:B7:57:E1:5F:25:1C:8E:8A:DB:F4:C1:44:BB:8B:08:79 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 041C Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JcFp5rdX4V8lHI6K2_TBRLuLCHk.roa Signing time: Thu 01 May 2025 01:48:45 +0000 ROA not before: Thu 01 May 2025 01:48:45 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 183.181.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:45 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=25C169E6B757E15F251C8E8ADBF4C144BB8B0879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:2b:bf:fc:75:dd:da:49:0d:af:f6:b7:0e: 58:ff:e0:9d:a8:b9:f3:66:a8:2b:d5:db:12:ae:c4: 5c:b2:22:85:3c:5e:9c:b3:48:66:90:0c:43:47:fb: 67:ba:a6:31:f6:6d:e9:37:bf:a0:68:62:fa:dc:3a: 25:00:73:37:c8:1c:5a:bc:81:b9:cd:a4:78:99:2e: c0:91:aa:8b:33:88:75:58:1e:b2:b1:1f:14:de:e5: 21:b7:87:cb:0c:1b:94:b0:fa:e8:d6:7c:23:9f:51: 2e:4b:0f:7f:55:db:0b:ff:61:c7:fe:f5:69:f0:28: e9:a3:f4:c1:23:5a:8a:76:14:06:91:d7:46:99:85: 66:3f:23:b0:d3:8a:46:a8:10:25:4c:4d:b2:82:28: b5:8f:27:56:3e:b1:1d:4d:ad:d5:46:b0:7e:df:f2: 57:0a:77:6c:66:7d:de:61:f4:18:95:ad:a9:ea:a5: 37:fb:7f:bb:95:b3:c0:df:a5:4e:81:a5:b7:13:af: f6:fd:21:43:86:70:02:66:0c:da:ea:23:9f:8d:ae: 7a:b1:d9:35:54:eb:b5:cf:8b:df:9a:ed:00:b9:4c: 08:91:6b:55:2a:1d:49:9d:d3:8a:94:53:88:7a:8f: e0:48:ff:fe:b2:76:e0:47:d7:5d:6e:82:78:2b:ba: ae:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C1:69:E6:B7:57:E1:5F:25:1C:8E:8A:DB:F4:C1:44:BB:8B:08:79 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JcFp5rdX4V8lHI6K2_TBRLuLCHk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.181.112.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:d1:35:0f:ec:3b:11:6b:a4:74:ee:71:b2:c7:1d:fd:f7:79: 19:eb:b4:7e:ce:28:5c:6c:7c:76:46:b8:b7:d2:23:ff:93:d6: 69:54:4b:0e:67:20:fa:57:ce:83:5f:52:83:a5:7f:7d:40:41: 4f:a6:2a:10:43:6a:56:09:84:24:31:62:50:bb:0d:1f:af:ae: be:e7:81:5b:34:e8:e5:1b:69:8f:12:de:3f:ad:82:e0:ef:e4: aa:74:04:b2:5d:01:c4:f6:56:6b:56:20:d0:c2:32:35:99:bf: b3:85:b9:e0:66:3a:9d:d3:59:9d:6a:4c:05:51:31:fc:ae:3c: 56:cc:65:37:dd:54:9c:f2:4a:66:b4:d7:2e:b0:98:c0:3e:55: e7:03:5e:93:b2:d6:14:33:2a:32:d9:d4:3e:fe:bd:24:ae:b8: 40:59:72:d9:24:39:b6:09:8f:20:15:b0:1b:17:48:41:fb:24: 2e:f8:dc:92:ed:5a:98:3c:47:9e:d4:c2:8e:3c:e8:51:39:05: a0:09:e2:8b:e7:df:4a:e5:b6:2c:a2:eb:a0:06:27:05:df:d0: 14:21:56:d6:81:9f:83:04:c8:d9:4c:36:1c:44:39:60:f2:ca: 73:55:42:e7:02:a3:c1:02:f9:e2:45:02:7a:dc:22:77:d4:3f: b2:f9:21:fd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NDVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI1QzE2OUU2Qjc1N0Ux NUYyNTFDOEU4QURCRjRDMTQ0QkI4QjA4NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9eCu//HXd2kkNr/a3Dlj/4J2oufNmqCvV2xKuxFyyIoU8Xpyz SGaQDENH+2e6pjH2bek3v6BoYvrcOiUAczfIHFq8gbnNpHiZLsCRqosziHVYHrKx HxTe5SG3h8sMG5Sw+ujWfCOfUS5LD39V2wv/Ycf+9WnwKOmj9MEjWop2FAaR10aZ hWY/I7DTikaoECVMTbKCKLWPJ1Y+sR1NrdVGsH7f8lcKd2xmfd5h9BiVranqpTf7 f7uVs8DfpU6BpbcTr/b9IUOGcAJmDNrqI5+Nrnqx2TVU67XPi9+a7QC5TAiRa1Uq HUmd04qUU4h6j+BI//6yduBH111ugngruq7tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJcFp5rdX4V8lHI6K2/TBRLuLCHkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0pjRnA1cmRYNFY4bEhJNksyX1RCUkx1TENIay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO3tXAwDQYJKoZIhvcNAQELBQADggEBAErRNQ/sOxFrpHTucbLHHf33eRnr tH7OKFxsfHZGuLfSI/+T1mlUSw5nIPpXzoNfUoOlf31AQU+mKhBDalYJhCQxYlC7 DR+vrr7ngVs06OUbaY8S3j+tguDv5Kp0BLJdAcT2VmtWINDCMjWZv7OFueBmOp3T WZ1qTAVRMfyuPFbMZTfdVJzySma01y6wmMA+VecDXpOy1hQzKjLZ1D7+vSSuuEBZ ctkkObYJjyAVsBsXSEH7JC743JLtWpg8R57Uwo486FE5BaAJ4ovn30rltiyi66AG JwXf0BQhVtaBn4MEyNlMNhxEOWDyynNVQucCo8EC+eJFAnrcInfUP7L5If0= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:30 2025 by rpki-client