$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/T3osYKdM3fPIm0SicKcjW4J-Dtk.roa File: T3osYKdM3fPIm0SicKcjW4J-Dtk.roa (raw, json) Hash identifier: 9KkYfm4uqVXn7Vi1LhWqZv9xcniszFUGB84CfV4v4yI= Subject key identifier: 4F:7A:2C:60:A7:4C:DD:F3:C8:9B:44:A2:70:A7:23:5B:82:7E:0E:D9 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0408 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/T3osYKdM3fPIm0SicKcjW4J-Dtk.roa Signing time: Thu 01 May 2025 01:45:26 +0000 ROA not before: Thu 01 May 2025 01:45:26 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 119.150.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:26 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=4F7A2C60A74CDDF3C89B44A270A7235B827E0ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:4e:97:73:55:c1:44:5d:85:7b:33:e9:55: 26:6e:1d:be:e1:ff:61:69:da:83:c2:62:ac:1d:ae: 8c:c4:ef:67:d8:08:16:95:1c:d6:5d:77:34:19:5b: 3f:57:6d:ba:a0:d0:ba:97:50:c9:31:8b:8e:cb:e3: b0:f9:07:c9:52:40:a7:d4:8d:3b:01:b0:ed:bb:52: 30:73:a6:7c:fc:b9:9e:33:4f:81:35:b8:15:ef:6c: e6:eb:c5:0d:11:f4:2a:17:3f:5e:8a:a4:3a:72:33: 25:da:13:86:4a:ae:3f:e2:e9:02:4e:fc:86:48:76: 13:ae:4b:09:ea:5b:9f:52:1d:87:23:e6:de:d0:9e: ae:c6:40:d5:3c:36:32:eb:52:a2:2a:1f:1c:9e:70: 54:d1:57:44:2f:54:a2:9c:9a:b8:a6:75:46:db:c8: 15:d9:e1:59:02:1b:36:67:04:34:45:50:fd:d9:0c: 41:e4:a1:c5:b5:87:a4:c6:5b:52:cf:82:52:53:93: a0:f9:ff:2b:88:c5:7b:b3:40:ee:df:68:d6:84:d8: aa:fc:09:c6:d3:4e:88:13:60:7e:9a:c5:a5:81:78: 95:60:e6:f0:8f:1d:88:3e:71:03:30:b3:48:85:62: 16:37:66:2a:02:7e:e0:20:21:c3:86:49:39:dc:6b: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7A:2C:60:A7:4C:DD:F3:C8:9B:44:A2:70:A7:23:5B:82:7E:0E:D9 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/T3osYKdM3fPIm0SicKcjW4J-Dtk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.216.0/21 Signature Algorithm: sha256WithRSAEncryption 8e:74:33:62:e6:f0:bb:20:c0:84:0e:86:da:63:1b:17:08:67: 70:11:e1:e5:e8:c2:95:75:eb:f6:24:72:38:b1:16:b3:f0:36: 65:b2:64:d7:fe:e2:0c:6e:97:61:43:ef:29:a6:e4:28:d3:b6: 31:20:89:d1:50:0a:cf:1d:53:31:35:50:87:c4:50:10:97:23: 9b:3f:80:74:51:bb:48:1b:c7:a5:2b:0d:a9:47:04:df:97:02: 5a:67:2e:7d:e4:33:36:1f:e9:85:9b:4e:3b:e5:77:61:7f:69: 81:6b:a3:d8:a0:a2:a4:4c:cd:d9:50:f2:57:e7:b7:2d:cf:59: 86:8d:9e:58:c8:f2:06:3b:e0:24:78:9b:0c:fe:00:35:56:3f: a6:55:c6:9e:e9:7e:a7:17:6c:8a:31:82:b5:3e:02:28:97:5b: 46:19:4b:4c:22:44:70:96:9c:79:8e:36:ae:bc:36:76:48:4a: 6c:a8:7a:fd:54:05:57:0a:a8:1c:ea:90:36:80:6d:a4:2b:c5: 15:13:4c:7e:98:bb:ae:f8:51:cf:ae:c7:a1:a7:64:7f:b2:c8: 2f:e4:f1:6e:87:e4:69:8e:76:4b:1f:f6:bd:d2:a9:e7:a3:78: 76:86:46:a3:50:de:9f:12:8b:92:73:c0:bf:5c:87:0c:03:3b: 83:e2:30:5c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MjZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRGN0EyQzYwQTc0Q0RE RjNDODlCNDRBMjcwQTcyMzVCODI3RTBFRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpfk6Xc1XBRF2FezPpVSZuHb7h/2Fp2oPCYqwdrozE72fYCBaV HNZddzQZWz9Xbbqg0LqXUMkxi47L47D5B8lSQKfUjTsBsO27UjBzpnz8uZ4zT4E1 uBXvbObrxQ0R9CoXP16KpDpyMyXaE4ZKrj/i6QJO/IZIdhOuSwnqW59SHYcj5t7Q nq7GQNU8NjLrUqIqHxyecFTRV0QvVKKcmrimdUbbyBXZ4VkCGzZnBDRFUP3ZDEHk ocW1h6TGW1LPglJTk6D5/yuIxXuzQO7faNaE2Kr8CcbTTogTYH6axaWBeJVg5vCP HYg+cQMws0iFYhY3ZioCfuAgIcOGSTncazg3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUT3osYKdM3fPIm0SicKcjW4J+DtkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1Qzb3NZS2RNM2ZQSW0wU2ljS2NqVzRKLUR0ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN3ltgwDQYJKoZIhvcNAQELBQADggEBAI50M2Lm8LsgwIQOhtpjGxcIZ3AR 4eXowpV16/YkcjixFrPwNmWyZNf+4gxul2FD7ymm5CjTtjEgidFQCs8dUzE1UIfE UBCXI5s/gHRRu0gbx6UrDalHBN+XAlpnLn3kMzYf6YWbTjvld2F/aYFro9igoqRM zdlQ8lfnty3PWYaNnljI8gY74CR4mwz+ADVWP6ZVxp7pfqcXbIoxgrU+AiiXW0YZ S0wiRHCWnHmONq68NnZISmyoev1UBVcKqBzqkDaAbaQrxRUTTH6Yu674Uc+ux6Gn ZH+yyC/k8W6H5GmOdksf9r3SqeejeHaGRqNQ3p8Si5JzwL9chwwDO4PiMFw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:05 2025 by rpki-client