$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SdBPMNSm1h6dd9MRlZsrnj8HQFE.roa File: SdBPMNSm1h6dd9MRlZsrnj8HQFE.roa (raw, json) Hash identifier: /clclisQJ3uUCfWk4FImJ4POJXgFwsP9zBUwgi9LIK8= Subject key identifier: 49:D0:4F:30:D4:A6:D6:1E:9D:77:D3:11:95:9B:2B:9E:3F:07:40:51 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03C6 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SdBPMNSm1h6dd9MRlZsrnj8HQFE.roa Signing time: Thu 01 May 2025 01:40:38 +0000 ROA not before: Thu 01 May 2025 01:40:38 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.205.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:38 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=49D04F30D4A6D61E9D77D311959B2B9E3F074051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:91:1a:50:d5:7e:30:c8:a8:37:eb:59:81: d5:38:e0:cd:9e:5f:65:7e:4f:87:fb:27:cf:d5:cd: 6d:4d:7a:9f:aa:45:cc:ad:77:df:9d:0b:30:8a:44: f7:0c:7c:5b:46:09:c9:ce:36:b2:fe:e8:52:e1:bc: 5a:be:56:c8:99:16:14:37:59:10:96:e0:07:97:9b: 14:50:5e:73:66:e6:6f:7f:1a:3f:4e:b6:16:8d:21: 9a:7a:c1:bb:6d:66:d9:cc:b4:7b:cf:0c:bd:8b:2e: f2:39:01:a7:2c:ff:7c:de:77:d6:c8:60:47:30:f8: cc:05:06:77:b5:ac:4b:8c:7d:44:3f:15:6c:9c:d1: ef:80:9e:b0:1a:99:63:4e:30:f1:85:dd:24:17:5f: fd:1a:19:4b:3e:7d:d2:21:1b:18:db:18:d3:2e:93: 3d:f3:e7:59:72:f7:b7:30:ef:16:91:7f:9b:96:81: 05:48:8b:04:cb:99:ad:3b:50:6a:f3:74:15:ea:e3: 25:17:8e:f7:49:97:0c:f8:d3:e4:0d:05:2f:e9:0d: 10:51:12:fb:bd:ff:d3:ca:13:b9:08:e0:7e:27:0d: dd:33:25:89:99:bd:0d:df:82:b6:f3:fa:59:0f:c3: 18:63:59:bb:b8:85:91:4f:e8:a9:39:c6:60:a2:a8: 34:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D0:4F:30:D4:A6:D6:1E:9D:77:D3:11:95:9B:2B:9E:3F:07:40:51 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SdBPMNSm1h6dd9MRlZsrnj8HQFE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.205.40.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:52:28:a7:71:15:c4:bc:9a:9e:97:45:a2:19:d9:a6:9a:b7: 40:96:17:e3:7f:9c:32:4f:04:b9:02:c4:93:fa:29:c5:0a:b4: af:28:74:48:90:b4:f9:1c:c6:61:c3:90:b6:c5:66:c7:dd:f9: 0c:ee:0a:ba:23:6d:59:50:33:60:98:c0:61:6f:3f:94:db:b5: 93:7e:59:ca:6e:28:d0:e3:67:65:8a:b7:8e:da:69:e1:04:1d: 0e:d9:64:ad:7e:91:2a:a9:db:da:96:ab:8e:fb:0a:a0:29:03: 0c:8e:1b:d1:54:11:f0:49:f4:fd:16:6e:f4:56:41:3b:7c:19: 71:a6:34:4a:2e:f3:f5:e0:1a:ee:c4:49:10:6f:86:a5:94:19: 27:3d:a0:30:6f:87:8d:f2:ce:cb:96:1c:21:a8:a6:ac:ff:52: 13:4f:d2:0e:02:4a:49:21:49:0b:fc:1f:6e:68:af:da:86:09: e2:d7:6c:86:99:e4:a1:cf:90:3a:7d:bd:05:ad:8e:47:c3:77: 8a:f4:6f:f4:ab:c0:1c:82:1d:93:80:04:1f:2e:2b:22:2f:4a: 06:a3:c5:81:79:42:38:15:37:05:ee:a2:63:f8:84:e8:bf:bf: df:1a:dc:8c:a1:ca:a0:66:9b:72:65:62:f9:02:5d:af:17:28: 5e:5b:d1:6b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMzhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ5RDA0RjMwRDRBNkQ2 MUU5RDc3RDMxMTk1OUIyQjlFM0YwNzQwNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy+5EaUNV+MMioN+tZgdU44M2eX2V+T4f7J8/VzW1Nep+qRcyt d9+dCzCKRPcMfFtGCcnONrL+6FLhvFq+VsiZFhQ3WRCW4AeXmxRQXnNm5m9/Gj9O thaNIZp6wbttZtnMtHvPDL2LLvI5Aacs/3zed9bIYEcw+MwFBne1rEuMfUQ/FWyc 0e+AnrAamWNOMPGF3SQXX/0aGUs+fdIhGxjbGNMukz3z51ly97cw7xaRf5uWgQVI iwTLma07UGrzdBXq4yUXjvdJlwz40+QNBS/pDRBREvu9/9PKE7kI4H4nDd0zJYmZ vQ3fgrbz+lkPwxhjWbu4hZFP6Kk5xmCiqDTPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSdBPMNSm1h6dd9MRlZsrnj8HQFEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1NkQlBNTlNtMWg2ZGQ5TVJsWnNybmo4SFFGRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9zSgwDQYJKoZIhvcNAQELBQADggEBAE5SKKdxFcS8mp6XRaIZ2aaat0CW F+N/nDJPBLkCxJP6KcUKtK8odEiQtPkcxmHDkLbFZsfd+QzuCrojbVlQM2CYwGFv P5TbtZN+WcpuKNDjZ2WKt47aaeEEHQ7ZZK1+kSqp29qWq477CqApAwyOG9FUEfBJ 9P0WbvRWQTt8GXGmNEou8/XgGu7ESRBvhqWUGSc9oDBvh43yzsuWHCGopqz/UhNP 0g4CSkkhSQv8H25or9qGCeLXbIaZ5KHPkDp9vQWtjkfDd4r0b/SrwByCHZOABB8u KyIvSgajxYF5QjgVNwXuomP4hOi/v98a3IyhyqBmm3JlYvkCXa8XKF5b0Ws= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:44 2025 by rpki-client