$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Rr47BfrTqyzOfhBDsOHeOHu7x1g.roa File: Rr47BfrTqyzOfhBDsOHeOHu7x1g.roa (raw, json) Hash identifier: z439oHS1eyGLmziBQ7W7s0/ISFXA+M+yE8N0jMP2t5w= Subject key identifier: 46:BE:3B:05:FA:D3:AB:2C:CE:7E:10:43:B0:E1:DE:38:7B:BB:C7:58 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03A1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Rr47BfrTqyzOfhBDsOHeOHu7x1g.roa Signing time: Thu 01 May 2025 01:37:36 +0000 ROA not before: Thu 01 May 2025 01:37:36 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 110.3.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 929 (0x3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:36 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=46BE3B05FAD3AB2CCE7E1043B0E1DE387BBBC758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:06:db:14:31:38:a6:d2:a1:45:c5:22:dd:56: fb:d1:14:16:0b:c9:a1:a1:02:ca:c1:cd:1d:d4:b5: 49:2e:9a:6e:c9:0a:a0:cc:f1:a5:dd:73:2b:d3:fe: c7:96:e7:c2:44:b1:7f:d8:3d:35:04:7a:41:5b:d7: 76:b5:d2:de:b3:bc:99:27:6f:fc:31:e5:91:45:82: 8b:f3:b7:d2:85:50:99:b3:11:d8:07:c7:72:9d:6a: 57:f7:53:f2:b6:12:de:d5:ba:7a:1a:c7:1a:55:b0: c7:84:2d:0a:ab:8f:fe:cb:a7:aa:ae:c6:51:c9:3e: aa:2d:59:4d:bd:13:ea:bc:7c:25:e5:34:09:29:dd: 23:b8:b9:d5:69:4f:ef:05:0a:67:8b:5b:d0:8a:bf: 1e:aa:3f:d7:be:e7:ce:e2:a5:87:37:8d:a0:55:7e: 56:6a:22:72:df:13:dd:68:95:c6:66:4c:b1:80:4a: 1a:29:c2:ff:a3:69:05:3a:e8:60:15:ec:96:a3:49: 65:bf:e0:95:fc:36:5e:5e:85:8a:3e:38:67:44:9a: f6:53:76:2a:36:54:07:e1:cc:ed:21:f9:90:96:f1: d0:af:f0:67:ab:a3:55:1a:e2:e5:7c:50:d0:1c:b8: 19:98:ab:89:f3:8c:5a:19:17:47:01:f4:f4:83:c8: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BE:3B:05:FA:D3:AB:2C:CE:7E:10:43:B0:E1:DE:38:7B:BB:C7:58 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Rr47BfrTqyzOfhBDsOHeOHu7x1g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.3.192.0/18 Signature Algorithm: sha256WithRSAEncryption 77:49:03:07:f3:3f:b1:59:c2:cc:07:bd:f3:4e:25:82:e6:4a: 44:84:98:10:42:d3:b9:bb:6f:40:88:c9:85:c9:9a:b2:5c:c7: 95:38:70:3d:74:45:15:7d:fa:c1:78:17:05:f9:e0:09:c6:f4: ad:ad:33:6f:1c:3a:1d:75:f2:44:40:b6:fe:97:1c:f1:97:1c: f5:8c:76:f1:c6:59:e9:a8:bd:39:2f:74:16:bd:ed:4c:18:9a: 55:82:a7:c7:c1:83:19:a2:94:5d:cd:a9:f0:54:0a:9e:31:a8: b8:e9:3c:14:28:71:a0:a3:0c:8e:e3:e1:85:57:e2:7a:a0:a3: de:af:15:9d:2e:35:44:c1:94:26:dd:aa:31:68:36:5d:65:55: 6d:dd:dd:8c:45:f7:c1:ad:30:21:21:58:85:50:da:c7:82:ef: fd:0a:05:ab:10:e5:2e:1d:37:12:d3:82:54:e4:a5:e8:fb:ae: 0d:60:d9:78:6f:d5:cb:f3:59:c8:29:6e:64:76:08:55:28:b2: a9:db:92:3f:01:4c:18:2f:89:89:7d:47:2d:74:c6:95:bc:61: 94:d8:3a:e9:f0:3c:28:a2:c7:74:0b:73:c1:06:db:65:19:13: 4a:7a:17:23:63:80:df:30:7a:78:fe:4f:f2:cb:8f:94:12:56: 83:b2:54:9f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MzZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ2QkUzQjA1RkFEM0FC MkNDRTdFMTA0M0IwRTFERTM4N0JCQkM3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3BtsUMTim0qFFxSLdVvvRFBYLyaGhAsrBzR3UtUkumm7JCqDM 8aXdcyvT/seW58JEsX/YPTUEekFb13a10t6zvJknb/wx5ZFFgovzt9KFUJmzEdgH x3Kdalf3U/K2Et7VunoaxxpVsMeELQqrj/7Lp6quxlHJPqotWU29E+q8fCXlNAkp 3SO4udVpT+8FCmeLW9CKvx6qP9e+587ipYc3jaBVflZqInLfE91olcZmTLGAShop wv+jaQU66GAV7JajSWW/4JX8Nl5ehYo+OGdEmvZTdio2VAfhzO0h+ZCW8dCv8Ger o1Ua4uV8UNAcuBmYq4nzjFoZF0cB9PSDyLj1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURr47BfrTqyzOfhBDsOHeOHu7x1gwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1JyNDdCZnJUcXl6T2ZoQkRzT0hlT0h1N3gxZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZuA8AwDQYJKoZIhvcNAQELBQADggEBAHdJAwfzP7FZwswHvfNOJYLmSkSE mBBC07m7b0CIyYXJmrJcx5U4cD10RRV9+sF4FwX54AnG9K2tM28cOh118kRAtv6X HPGXHPWMdvHGWemovTkvdBa97UwYmlWCp8fBgxmilF3NqfBUCp4xqLjpPBQocaCj DI7j4YVX4nqgo96vFZ0uNUTBlCbdqjFoNl1lVW3d3YxF98GtMCEhWIVQ2seC7/0K BasQ5S4dNxLTglTkpej7rg1g2Xhv1cvzWcgpbmR2CFUosqnbkj8BTBgviYl9Ry10 xpW8YZTYOunwPCiix3QLc8EG22UZE0p6FyNjgN8wenj+T/LLj5QSVoOyVJ8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:01 2025 by rpki-client