$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VK8I1pFnvyxSHcEVmXWPVMLn99g.roa File: VK8I1pFnvyxSHcEVmXWPVMLn99g.roa (raw, json) Hash identifier: 1utV20WPFKEXL+QNXx+PFSOcPqc4x36S4ha7yx7gx2g= Subject key identifier: 54:AF:08:D6:91:67:BF:2C:52:1D:C1:15:99:75:8F:54:C2:E7:F7:D8 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 041B Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VK8I1pFnvyxSHcEVmXWPVMLn99g.roa Signing time: Thu 01 May 2025 01:48:44 +0000 ROA not before: Thu 01 May 2025 01:48:44 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 183.181.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:44 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=54AF08D69167BF2C521DC11599758F54C2E7F7D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:b5:13:42:89:d3:48:88:e4:90:3c:fc:c1: 2e:df:d1:35:d5:f3:a1:e2:70:55:02:ae:37:0b:0b: 91:2f:c2:98:d6:b3:e9:b5:73:ce:1e:0c:84:f5:d4: 7c:02:50:fa:e8:1b:13:96:58:64:5b:ca:26:b8:48: 90:4c:c9:85:aa:43:0c:82:2e:a8:9c:53:82:b9:e6: 64:77:e7:3c:4c:f9:c8:2f:7f:69:3e:e1:68:6b:6b: c8:d0:f1:54:82:df:34:30:9b:e4:b4:ce:a9:25:df: d5:43:03:00:0d:82:f3:30:b6:af:b6:84:fc:a7:ec: 96:f9:55:2f:3b:22:f3:26:6f:4c:ff:50:53:9c:91: 64:7c:a9:e1:d6:46:90:ea:c1:21:0a:4f:c3:75:13: ca:c7:16:84:7c:0e:97:ac:88:c3:fe:d9:fe:73:e4: 83:72:5f:11:96:4d:fc:4c:de:c3:41:9b:94:c9:be: e1:b7:94:d8:b7:8a:4e:47:17:af:df:66:ea:1c:8e: 18:10:6c:ea:5e:89:b7:9e:48:bb:95:70:06:15:ca: d8:66:70:da:c1:42:95:ff:9e:15:ba:d1:9b:ec:c3: b6:84:27:cf:a8:cf:32:ea:31:e7:b8:7d:ed:1c:19: 33:d0:fb:70:b6:5e:37:c5:6a:f6:38:5d:29:7d:28: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AF:08:D6:91:67:BF:2C:52:1D:C1:15:99:75:8F:54:C2:E7:F7:D8 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VK8I1pFnvyxSHcEVmXWPVMLn99g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.181.104.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:49:95:b5:a4:88:3f:d7:1e:f8:46:f4:1e:64:7a:0b:53:d2: 07:60:1c:69:f6:33:7a:f7:5e:e4:97:4c:42:5f:d6:28:99:93: 84:c5:4e:29:0d:9e:41:ba:a3:c8:97:35:d7:4e:44:3c:0b:3f: 43:a9:01:c3:99:43:76:7e:cc:d6:74:56:31:d5:3a:73:43:50: c1:76:fd:b4:1b:a9:35:a2:95:8b:c6:fd:04:79:da:71:11:a9: 2e:ac:c7:7e:a9:12:6d:3e:1c:7f:29:3e:23:2f:f1:1e:8b:fd: f1:e8:90:af:aa:41:bc:50:8f:74:85:fc:6c:21:65:d6:3b:f9: 7a:7d:ef:a5:84:c9:0c:b6:bd:84:88:83:36:66:d4:ec:3e:b9: 45:14:8f:88:13:91:12:ba:8d:e4:38:b2:aa:a2:5a:c3:60:fc: dc:b7:d3:ef:e1:91:69:cb:7e:99:2b:6e:59:fb:43:34:63:31: db:53:5a:59:a0:07:8c:7d:85:39:03:63:35:54:a9:ba:52:08: 0c:52:29:73:b9:1b:d2:1c:6b:d2:45:05:a7:39:db:d8:7c:7b: 22:18:02:c0:ad:d4:ab:2f:ed:43:0a:a6:b8:bc:ab:55:0c:5b: 77:0f:81:dd:dc:1d:cf:ce:c1:73:a7:3c:03:61:ef:b2:a4:22: 1d:48:c3:49 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NDRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU0QUYwOEQ2OTE2N0JG MkM1MjFEQzExNTk5NzU4RjU0QzJFN0Y3RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqmLUTQonTSIjkkDz8wS7f0TXV86HicFUCrjcLC5EvwpjWs+m1 c84eDIT11HwCUProGxOWWGRbyia4SJBMyYWqQwyCLqicU4K55mR35zxM+cgvf2k+ 4Whra8jQ8VSC3zQwm+S0zqkl39VDAwANgvMwtq+2hPyn7Jb5VS87IvMmb0z/UFOc kWR8qeHWRpDqwSEKT8N1E8rHFoR8DpesiMP+2f5z5INyXxGWTfxM3sNBm5TJvuG3 lNi3ik5HF6/fZuocjhgQbOpeibeeSLuVcAYVythmcNrBQpX/nhW60Zvsw7aEJ8+o zzLqMee4fe0cGTPQ+3C2XjfFavY4XSl9KFClAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVK8I1pFnvyxSHcEVmXWPVMLn99gwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1ZLOEkxcEZudnl4U0hjRVZtWFdQVk1Mbjk5Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO3tWgwDQYJKoZIhvcNAQELBQADggEBAFtJlbWkiD/XHvhG9B5kegtT0gdg HGn2M3r3XuSXTEJf1iiZk4TFTikNnkG6o8iXNddORDwLP0OpAcOZQ3Z+zNZ0VjHV OnNDUMF2/bQbqTWilYvG/QR52nERqS6sx36pEm0+HH8pPiMv8R6L/fHokK+qQbxQ j3SF/GwhZdY7+Xp976WEyQy2vYSIgzZm1Ow+uUUUj4gTkRK6jeQ4sqqiWsNg/Ny3 0+/hkWnLfpkrbln7QzRjMdtTWlmgB4x9hTkDYzVUqbpSCAxSKXO5G9Ica9JFBac5 29h8eyIYAsCt1Ksv7UMKpri8q1UMW3cPgd3cHc/OwXOnPANh77KkIh1Iw0k= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:53 2025 by rpki-client