$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WSMwdyT-J8zcbXPnhHDorGCYzhM.roa File: WSMwdyT-J8zcbXPnhHDorGCYzhM.roa (raw, json) Hash identifier: tI2wFPfNZ2dU6SeNWlmtmoAJQUfYUZ1wmc84A8DbllE= Subject key identifier: 59:23:30:77:24:FE:27:CC:DC:6D:73:E7:84:70:E8:AC:60:98:CE:13 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 037D Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WSMwdyT-J8zcbXPnhHDorGCYzhM.roa Signing time: Thu 01 May 2025 01:33:33 +0000 ROA not before: Thu 01 May 2025 01:33:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 220.150.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=5923307724FE27CCDC6D73E78470E8AC6098CE13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:a3:a6:73:47:a6:69:55:4c:de:08:b9:74: 5b:44:79:bd:41:41:b5:9a:62:d5:08:81:39:88:c3: 62:d9:2d:43:c1:7a:e8:87:20:2c:91:26:14:67:08: d9:e0:06:47:9e:21:cc:1e:c1:bb:ea:81:80:d7:7f: a2:9b:14:a8:92:aa:97:b4:21:36:f6:9c:d4:74:62: be:b2:37:90:6c:01:95:4f:82:3b:3d:e4:e7:ba:86: d0:5b:47:b8:6d:2a:48:22:50:fd:28:31:46:aa:0b: ad:e8:c3:69:de:b5:68:52:7a:71:ee:bc:90:af:8e: d5:51:53:79:e2:05:7e:49:db:84:15:cc:f1:3b:e0: f7:b0:1c:98:cb:7e:b3:5f:a8:45:45:46:21:34:93: 10:91:cc:45:e8:15:ba:e4:fb:f9:67:b2:fa:ef:d4: 71:44:17:73:4d:67:57:2e:69:96:0c:90:86:1e:b7: 9f:ce:0f:43:72:bb:fa:93:7c:b3:c8:fc:61:43:f1: 54:f7:2f:8f:a1:a5:de:31:13:d9:25:94:10:66:f2: 01:c8:e4:2a:5c:06:d5:85:0c:40:f0:a5:74:8d:d6: 3d:6b:de:2b:ca:0d:b1:be:16:4e:89:e4:b1:59:29: 1b:bb:53:de:80:22:9e:6f:61:3e:dd:ec:ed:f7:e7: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:23:30:77:24:FE:27:CC:DC:6D:73:E7:84:70:E8:AC:60:98:CE:13 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WSMwdyT-J8zcbXPnhHDorGCYzhM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.150.89.0/24 Signature Algorithm: sha256WithRSAEncryption 04:d0:21:64:88:7a:73:d9:72:a2:7d:84:62:4a:95:1e:e0:a2: ba:c9:50:a7:bf:63:b5:94:22:3e:40:f1:ac:23:c3:33:4a:5c: 57:3d:06:d7:60:6f:58:c1:4f:f4:6a:91:1a:cf:95:76:d1:d5: 9e:56:b7:a8:29:04:73:83:13:1e:13:26:a9:d7:60:f9:27:c2: e2:e5:30:bb:d9:f3:45:9a:ec:67:cb:31:f0:34:eb:5a:dc:71: 60:be:75:37:0a:2f:f6:d9:69:0c:d2:81:e9:f9:35:a5:cf:60: e0:64:b4:49:15:dd:01:84:b4:71:8b:bf:a2:b2:9f:c1:99:3b: 64:84:48:5f:56:96:72:e7:e7:51:ee:7d:bc:64:9c:1c:3f:71: ec:e8:e5:6b:3f:11:6f:82:e8:f5:ef:e9:d6:0a:3f:a3:90:d5: 54:d3:a4:90:23:5f:62:66:d5:a0:10:6c:25:06:22:b1:e1:94: cb:e1:b1:85:55:53:e7:61:36:c2:81:a7:ae:2e:a9:d4:67:6a: 66:d1:95:5d:34:e1:6a:e5:25:57:e0:66:aa:7d:8d:0c:b7:72: a5:75:c6:a0:19:22:68:70:e7:0c:de:a5:13:8f:32:b8:99:f8: 14:19:4b:d4:30:d1:f2:09:cd:77:56:e1:ed:73:e5:5c:38:5d: a8:6a:5d:fb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMzNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU5MjMzMDc3MjRGRTI3 Q0NEQzZENzNFNzg0NzBFOEFDNjA5OENFMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOmKOmc0emaVVM3gi5dFtEeb1BQbWaYtUIgTmIw2LZLUPBeuiH ICyRJhRnCNngBkeeIcwewbvqgYDXf6KbFKiSqpe0ITb2nNR0Yr6yN5BsAZVPgjs9 5Oe6htBbR7htKkgiUP0oMUaqC63ow2netWhSenHuvJCvjtVRU3niBX5J24QVzPE7 4PewHJjLfrNfqEVFRiE0kxCRzEXoFbrk+/lnsvrv1HFEF3NNZ1cuaZYMkIYet5/O D0Nyu/qTfLPI/GFD8VT3L4+hpd4xE9kllBBm8gHI5CpcBtWFDEDwpXSN1j1r3ivK DbG+Fk6J5LFZKRu7U96AIp5vYT7d7O3356UnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWSMwdyT+J8zcbXPnhHDorGCYzhMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1dTTXdkeVQtSjh6Y2JYUG5oSERvckdDWXpoTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcllkwDQYJKoZIhvcNAQELBQADggEBAATQIWSIenPZcqJ9hGJKlR7gorrJ UKe/Y7WUIj5A8awjwzNKXFc9Btdgb1jBT/RqkRrPlXbR1Z5Wt6gpBHODEx4TJqnX YPknwuLlMLvZ80Wa7GfLMfA061rccWC+dTcKL/bZaQzSgen5NaXPYOBktEkV3QGE tHGLv6Kyn8GZO2SESF9WlnLn51HufbxknBw/cezo5Ws/EW+C6PXv6dYKP6OQ1VTT pJAjX2Jm1aAQbCUGIrHhlMvhsYVVU+dhNsKBp64uqdRnambRlV004WrlJVfgZqp9 jQy3cqV1xqAZImhw5wzepROPMriZ+BQZS9Qw0fIJzXdW4e1z5Vw4XahqXfs= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:21 2025 by rpki-client