$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UI-1-EccXk625ZT_JK2xB8G3CDU.roa File: UI-1-EccXk625ZT_JK2xB8G3CDU.roa (raw, json) Hash identifier: +HK8T29XKrR5Hz0DJtnKXSxchdXVnOP4Mrw1YVLQHyo= Subject key identifier: 50:8F:B5:F8:47:1C:5E:4E:B6:E5:94:FF:24:AD:B1:07:C1:B7:08:35 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 040E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UI-1-EccXk625ZT_JK2xB8G3CDU.roa Signing time: Thu 01 May 2025 01:45:28 +0000 ROA not before: Thu 01 May 2025 01:45:28 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 122.145.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:28 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=508FB5F8471C5E4EB6E594FF24ADB107C1B70835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a4:ae:d1:0a:10:b3:06:76:b8:5d:f2:63:3f: 20:dc:96:07:46:79:47:c9:49:d3:36:12:57:10:7d: 69:40:0c:aa:87:ea:10:18:61:2c:90:1e:c4:88:55: 0c:4d:4d:fa:a2:91:73:74:0d:d0:30:2b:33:90:8d: a8:3f:3f:a2:13:45:6f:70:56:b5:78:c9:b1:41:33: f2:ae:f6:ad:e8:3a:52:bb:02:e7:ee:0f:a4:82:b2: 91:5c:fb:24:1e:76:b5:26:1f:ef:6a:97:fc:44:13: b3:ab:3c:18:1c:bd:eb:d6:b3:bb:15:70:dc:d6:2e: 2a:ed:8d:8b:ed:90:93:87:d4:70:08:10:6b:49:a6: f1:3a:53:01:a7:e4:74:ec:51:d5:c1:4c:e2:8c:d2: 05:83:61:04:d5:7b:f1:aa:b8:53:6a:cd:0b:46:60: 16:31:a5:cb:8d:07:3e:f3:dc:24:d0:1d:d3:47:33: 18:f5:7b:8b:c6:6c:56:ae:31:9a:82:41:41:18:11: 6e:5e:5d:a4:69:1a:5a:ce:e3:8d:38:35:25:fe:b3: 94:e0:17:8e:b9:39:92:da:db:79:2c:1b:c6:eb:cd: 4f:fb:11:b8:7a:11:b1:cf:63:d7:06:c7:98:60:ea: d1:ca:ed:b3:f8:ef:df:85:38:59:42:22:8e:38:90: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8F:B5:F8:47:1C:5E:4E:B6:E5:94:FF:24:AD:B1:07:C1:B7:08:35 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UI-1-EccXk625ZT_JK2xB8G3CDU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.145.136.0/21 Signature Algorithm: sha256WithRSAEncryption 01:0e:0a:17:ed:58:f5:57:53:89:08:89:94:e5:ac:89:c6:99: f1:60:e1:51:9d:26:be:ac:ee:a8:0e:e4:52:d5:bd:12:a1:c2: d9:58:bd:09:bf:9c:6e:ed:79:52:63:a7:40:07:65:a0:b2:1f: e6:23:92:5b:fb:1e:ce:18:cb:64:d9:63:83:d1:8a:12:a1:25: 4d:c5:a0:64:cc:7a:c0:09:37:4b:fb:03:86:a6:44:ff:cc:be: 6a:2a:1e:12:ac:07:d2:92:7a:b2:18:dd:bd:61:2c:c2:28:4d: 62:e2:06:6e:4d:92:ac:1f:a5:a7:bb:71:42:2a:7d:06:6b:15: 60:37:12:54:57:eb:72:2f:3a:88:59:43:0e:5f:72:41:c3:2e: 89:86:43:f2:82:f1:dc:70:35:f8:25:82:61:7a:63:a5:aa:3a: a0:32:db:31:96:4a:ad:24:b5:41:b1:1e:2b:b5:c2:60:7d:0b: a0:c7:83:93:5a:8a:4b:d0:ed:65:db:af:85:63:53:85:ab:43: 64:df:49:65:08:d2:dc:18:07:ae:54:db:86:e5:1c:f5:2b:da: 4f:d7:df:a0:da:57:8f:ad:94:f0:c8:86:d1:c8:37:fa:c9:9f: d3:3a:7c:b5:b4:95:fa:53:f5:e3:99:74:60:53:05:b6:5f:70: e0:df:a8:c9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MjhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUwOEZCNUY4NDcxQzVF NEVCNkU1OTRGRjI0QURCMTA3QzFCNzA4MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcpK7RChCzBna4XfJjPyDclgdGeUfJSdM2ElcQfWlADKqH6hAY YSyQHsSIVQxNTfqikXN0DdAwKzOQjag/P6ITRW9wVrV4ybFBM/Ku9q3oOlK7Aufu D6SCspFc+yQedrUmH+9ql/xEE7OrPBgcvevWs7sVcNzWLirtjYvtkJOH1HAIEGtJ pvE6UwGn5HTsUdXBTOKM0gWDYQTVe/GquFNqzQtGYBYxpcuNBz7z3CTQHdNHMxj1 e4vGbFauMZqCQUEYEW5eXaRpGlrO4404NSX+s5TgF465OZLa23ksG8brzU/7Ebh6 EbHPY9cGx5hg6tHK7bP479+FOFlCIo44kKexAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUI+1+EccXk625ZT/JK2xB8G3CDUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1VJLTEtRWNjWGs2MjVaVF9KSzJ4QjhHM0NEVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN6kYgwDQYJKoZIhvcNAQELBQADggEBAAEOChftWPVXU4kIiZTlrInGmfFg 4VGdJr6s7qgO5FLVvRKhwtlYvQm/nG7teVJjp0AHZaCyH+Yjklv7Hs4Yy2TZY4PR ihKhJU3FoGTMesAJN0v7A4amRP/MvmoqHhKsB9KSerIY3b1hLMIoTWLiBm5Nkqwf pae7cUIqfQZrFWA3ElRX63IvOohZQw5fckHDLomGQ/KC8dxwNfglgmF6Y6WqOqAy 2zGWSq0ktUGxHiu1wmB9C6DHg5NaikvQ7WXbr4VjU4WrQ2TfSWUI0twYB65U24bl HPUr2k/X36DaV4+tlPDIhtHIN/rJn9M6fLW0lfpT9eOZdGBTBbZfcODfqMk= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:44 2025 by rpki-client