$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q7NYmbt4CKNFp8ZwWI_5vEvwzVA.roa File: Q7NYmbt4CKNFp8ZwWI_5vEvwzVA.roa (raw, json) Hash identifier: vZWsTxOsB4H++V8cs4snlLBRSBIjyUVXYCcgdDGOLv8= Subject key identifier: 43:B3:58:99:BB:78:08:A3:45:A7:C6:70:58:8F:F9:BC:4B:F0:CD:50 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 036D Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q7NYmbt4CKNFp8ZwWI_5vEvwzVA.roa Signing time: Thu 01 May 2025 01:33:26 +0000 ROA not before: Thu 01 May 2025 01:33:26 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 27.133.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:26 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=43B35899BB7808A345A7C670588FF9BC4BF0CD50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:e8:8a:67:61:85:f6:a0:51:18:27:87:db: c3:5b:28:c9:79:81:a9:e9:9e:de:e7:67:97:d9:35: 1f:d7:38:43:73:84:ca:4f:44:33:26:2f:21:60:25: de:4d:40:86:12:3c:bb:ff:9c:ce:b4:41:94:4a:a9: 1f:f0:52:0c:68:d6:db:7b:f2:58:cc:66:ba:ff:b9: a1:8e:da:01:fe:50:1d:10:77:b3:1e:d2:ef:49:27: 68:58:a6:38:42:63:fa:c2:db:79:de:fa:45:b9:fb: ed:0c:cb:71:5a:a7:be:f7:60:f0:3a:1f:74:d6:27: 7e:39:c4:d7:f1:08:83:55:b7:60:99:58:cd:e0:87: 1c:c3:e8:5c:3d:e8:29:c6:9b:f1:9e:b0:0b:b3:cf: fd:df:9a:cb:72:fd:53:fa:87:04:2e:b0:9a:a9:f0: 21:8b:c4:a4:dc:06:25:87:c6:fd:0c:63:71:00:6f: e0:b3:a2:32:c7:86:88:84:b7:46:44:9f:3a:18:8e: ec:e2:29:54:85:53:44:90:e2:43:fa:22:08:77:6a: b1:76:16:a7:18:79:85:ec:43:10:70:7a:a7:32:46: b1:f8:8d:60:64:8e:0c:3a:71:86:9d:bb:64:b5:66: b4:88:bf:8d:42:35:02:b5:9d:27:9e:51:a9:92:8f: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B3:58:99:BB:78:08:A3:45:A7:C6:70:58:8F:F9:BC:4B:F0:CD:50 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Q7NYmbt4CKNFp8ZwWI_5vEvwzVA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.133.92.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:0a:88:c1:20:19:91:e0:e0:c8:d1:9c:a0:c8:0d:0d:6e:e6: cb:28:87:50:b2:68:98:7b:4a:7a:17:56:5a:cc:f8:e6:e6:f3: 8d:5e:96:e5:ef:8f:dc:16:17:1f:af:24:16:c1:6d:a5:86:cc: 03:48:b7:71:49:7e:db:81:d0:82:ba:ef:4a:d8:35:61:27:10: 1f:1b:18:f5:98:4a:77:c7:be:b4:e5:44:f7:18:fd:30:2a:d1: a9:ed:69:78:98:6b:f5:64:e5:53:16:12:08:1c:a3:9b:10:26: 81:45:e6:68:8f:e7:5f:2b:2e:dc:4a:bb:a1:16:b3:3c:37:7f: a0:50:46:7d:d6:77:ed:b0:d3:36:27:dd:96:8c:69:66:26:dd: a7:89:4e:1b:af:d3:d9:e5:95:ff:42:85:5a:6b:ef:d1:5a:7b: 06:39:d7:26:10:c4:5f:d6:33:ee:8d:da:1a:58:f6:04:4f:75: 36:aa:0a:11:48:0f:b3:cc:3d:bf:5e:00:c8:00:a4:09:13:8c: 1f:0a:d1:41:0f:ae:ba:6a:03:33:4d:97:e8:e2:c8:7d:23:bb: 03:11:33:ea:2f:5c:8c:06:5f:8d:cc:69:6c:02:f0:84:c8:84: 5c:8c:b1:8a:20:1f:20:50:a9:fb:25:bd:66:94:d2:1b:ae:bf: ba:6e:07:e9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMjZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQzQjM1ODk5QkI3ODA4 QTM0NUE3QzY3MDU4OEZGOUJDNEJGMENENTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL9eiKZ2GF9qBRGCeH28NbKMl5ganpnt7nZ5fZNR/XOENzhMpP RDMmLyFgJd5NQIYSPLv/nM60QZRKqR/wUgxo1tt78ljMZrr/uaGO2gH+UB0Qd7Me 0u9JJ2hYpjhCY/rC23ne+kW5++0My3Fap773YPA6H3TWJ345xNfxCINVt2CZWM3g hxzD6Fw96CnGm/GesAuzz/3fmsty/VP6hwQusJqp8CGLxKTcBiWHxv0MY3EAb+Cz ojLHhoiEt0ZEnzoYjuziKVSFU0SQ4kP6Igh3arF2FqcYeYXsQxBweqcyRrH4jWBk jgw6cYadu2S1ZrSIv41CNQK1nSeeUamSj0lrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQ7NYmbt4CKNFp8ZwWI/5vEvwzVAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1E3TlltYnQ0Q0tORnA4WndXSV81dkV2d3pWQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIbhVwwDQYJKoZIhvcNAQELBQADggEBAJsKiMEgGZHg4MjRnKDIDQ1u5sso h1CyaJh7SnoXVlrM+Obm841eluXvj9wWFx+vJBbBbaWGzANIt3FJftuB0IK670rY NWEnEB8bGPWYSnfHvrTlRPcY/TAq0antaXiYa/Vk5VMWEggco5sQJoFF5miP518r LtxKu6EWszw3f6BQRn3Wd+2w0zYn3ZaMaWYm3aeJThuv09nllf9ChVpr79FaewY5 1yYQxF/WM+6N2hpY9gRPdTaqChFID7PMPb9eAMgApAkTjB8K0UEPrrpqAzNNl+ji yH0juwMRM+ovXIwGX43MaWwC8ITIhFyMsYogHyBQqfslvWaU0huuv7puB+k= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:05 2025 by rpki-client