$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/QW25xgmsJr5mPoUxQW7ZU9H6_3I.roa File: QW25xgmsJr5mPoUxQW7ZU9H6_3I.roa (raw, json) Hash identifier: Dn5nvYt0Pdrh42DJhexZSon27jCWw2FRoydfpLe4c6U= Subject key identifier: 41:6D:B9:C6:09:AC:26:BE:66:3E:85:31:41:6E:D9:53:D1:FA:FF:72 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0475 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QW25xgmsJr5mPoUxQW7ZU9H6_3I.roa Signing time: Wed 01 Oct 2025 01:34:51 +0000 ROA not before: Wed 01 Oct 2025 01:34:51 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 111.235.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:51 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=416DB9C609AC26BE663E8531416ED953D1FAFF72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c2:3d:5f:2d:88:7b:b2:bc:e8:ac:58:e4:b4: 6b:33:78:9b:51:da:e7:bd:78:58:98:42:66:8f:f5: eb:c5:1e:97:b7:c3:f8:5e:4a:d6:ea:bc:2c:9f:9a: 54:51:fc:db:ee:61:1d:28:40:53:12:49:97:87:a2: 4a:9d:f6:a9:0e:ac:c5:8c:e1:e7:f2:14:74:f8:80: 64:0b:22:97:f0:ed:39:c6:f7:8d:c7:72:06:90:7c: 96:a2:f5:9f:82:38:d2:34:26:8f:89:79:2f:96:38: 40:7d:e1:5e:24:15:8c:fd:1b:47:ba:57:10:58:4e: f2:d5:c0:5f:d6:7d:35:35:12:fd:a8:f2:09:7e:3d: 0d:f7:a1:4f:77:db:98:a5:15:35:c8:e9:a2:77:22: 0a:a4:83:8e:2f:cd:bd:3a:2b:fa:6d:b4:19:56:67: 73:1a:cc:a2:6a:24:a1:99:66:84:49:6a:e9:03:0c: 25:ea:3b:20:74:d0:12:bd:ca:3b:76:68:e2:40:1a: 91:dc:7c:95:ab:6e:6c:39:42:84:57:03:76:b9:d6: f4:fa:f7:b6:af:03:14:5d:6c:c0:84:2d:fd:53:e4: 06:97:7b:cf:6c:97:f2:ab:b8:9a:fa:d9:a2:f5:d5: 55:cb:56:2f:1c:ba:33:b7:af:a6:9a:a3:93:57:21: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6D:B9:C6:09:AC:26:BE:66:3E:85:31:41:6E:D9:53:D1:FA:FF:72 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QW25xgmsJr5mPoUxQW7ZU9H6_3I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.235.44.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:82:f9:2b:bf:4e:98:ec:aa:3a:a1:be:d7:83:42:11:5e:0b: ff:9c:b0:ce:e5:7d:71:0a:2c:0c:63:c9:16:6c:1c:8a:93:45: cc:a1:c2:63:be:78:81:bf:8d:51:a2:af:71:79:69:50:8e:28: 6d:aa:33:dd:b4:e8:79:fe:21:b7:ae:0c:74:1d:73:53:9d:7b: b1:aa:4f:4c:72:e5:8c:19:07:77:68:45:58:98:c6:3d:25:3c: 5b:77:9b:84:63:3b:7e:6f:e0:05:af:96:11:ed:ed:d0:03:d6: 1c:8f:98:63:35:76:76:37:37:2c:17:a2:be:f6:87:ab:ce:ac: 59:cf:c1:16:d0:2a:dd:48:9d:94:5e:5f:2d:5e:9e:3b:bb:c4: 8d:8f:eb:db:63:c5:1e:80:78:b3:1b:16:05:df:f7:b5:fb:51: b8:7c:18:0f:86:d7:c8:b1:f8:b6:7c:91:67:d2:be:11:c1:58: 10:63:b6:bc:57:61:b9:2c:f7:f4:37:47:14:ad:8c:63:79:c8: 4e:1f:23:6c:c1:c7:b8:e0:95:4f:46:d6:7c:95:a5:62:15:86: 3d:b9:c3:f6:35:51:84:56:90:1f:02:60:50:7f:5b:c4:52:69: a1:9c:55:b1:22:bc:2e:77:4d:a7:21:d2:a7:03:2f:1b:a9:26: 54:e8:c3:a3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NTFaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQxNkRCOUM2MDlBQzI2 QkU2NjNFODUzMTQxNkVEOTUzRDFGQUZGNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiwj1fLYh7srzorFjktGszeJtR2ue9eFiYQmaP9evFHpe3w/he StbqvCyfmlRR/NvuYR0oQFMSSZeHokqd9qkOrMWM4efyFHT4gGQLIpfw7TnG943H cgaQfJai9Z+CONI0Jo+JeS+WOEB94V4kFYz9G0e6VxBYTvLVwF/WfTU1Ev2o8gl+ PQ33oU9325ilFTXI6aJ3Igqkg44vzb06K/pttBlWZ3MazKJqJKGZZoRJaukDDCXq OyB00BK9yjt2aOJAGpHcfJWrbmw5QoRXA3a51vT697avAxRdbMCELf1T5AaXe89s l/KruJr62aL11VXLVi8cujO3r6aao5NXIWL/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQW25xgmsJr5mPoUxQW7ZU9H6/3IwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1FXMjV4Z21zSnI1bVBvVXhRVzdaVTlINl8zSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFv6ywwDQYJKoZIhvcNAQELBQADggEBAF2C+Su/TpjsqjqhvteDQhFeC/+c sM7lfXEKLAxjyRZsHIqTRcyhwmO+eIG/jVGir3F5aVCOKG2qM9206Hn+IbeuDHQd c1Ode7GqT0xy5YwZB3doRViYxj0lPFt3m4RjO35v4AWvlhHt7dAD1hyPmGM1dnY3 NywXor72h6vOrFnPwRbQKt1InZReXy1enju7xI2P69tjxR6AeLMbFgXf97X7Ubh8 GA+G18ix+LZ8kWfSvhHBWBBjtrxXYbks9/Q3RxStjGN5yE4fI2zBx7jglU9G1nyV pWIVhj25w/Y1UYRWkB8CYFB/W8RSaaGcVbEivC53Tach0qcDLxupJlTow6M= -----END CERTIFICATE-----Generated at Wed Nov 5 21:48:28 2025 by rpki-client