$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/cBLuAVLN9aYeGbsarGskpKs-2s4.roa File: cBLuAVLN9aYeGbsarGskpKs-2s4.roa (raw, json) Hash identifier: kKrfTSiONXRy9nwOgQtqcQ14HNQ+SCsIDMJ5213C/yk= Subject key identifier: 70:12:EE:01:52:CD:F5:A6:1E:19:BB:1A:AC:6B:24:A4:AB:3E:DA:CE Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 046E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cBLuAVLN9aYeGbsarGskpKs-2s4.roa Signing time: Wed 01 Oct 2025 01:34:47 +0000 ROA not before: Wed 01 Oct 2025 01:34:47 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 111.234.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1134 (0x46e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:47 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=7012EE0152CDF5A61E19BB1AAC6B24A4AB3EDACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:32:c0:0a:17:ca:7f:47:7f:05:dd:dc:df: 8a:1c:04:1f:fe:ee:2e:ae:da:f0:93:d1:4d:6b:ff: 57:72:ac:64:34:fa:31:59:a6:bb:91:82:c0:10:49: ba:45:d1:3b:ee:5f:27:23:0b:f4:65:6b:78:d3:8b: 4d:3c:6b:71:8f:30:ea:35:b8:2a:b4:79:66:6f:d3: d7:10:2a:c3:91:43:f8:87:ed:b5:0c:b2:9b:57:0e: b7:81:21:c2:ca:82:8c:3a:ac:e3:7d:91:f7:d6:24: 03:55:58:95:48:41:44:22:ed:be:b9:b3:54:3d:5b: 02:90:ae:c8:3e:09:07:5e:16:43:17:47:cd:d9:1a: c6:f1:91:94:cd:9a:e5:9f:93:ff:71:f6:f0:95:00: bd:c7:42:29:d8:b0:28:e9:a3:87:7e:e0:c4:ef:4d: 3a:3d:c2:42:56:fb:54:73:6b:b7:7a:34:5a:c2:42: 59:70:9f:03:57:c0:9b:9d:44:5e:69:e3:c5:d3:1d: b5:8c:47:72:fa:61:34:ce:cd:b7:20:ee:10:2f:ce: 50:60:22:19:c2:dc:31:d8:6b:56:0c:72:17:a6:23: bf:35:19:ea:ad:bd:b3:1d:62:f6:72:ea:58:91:a2: 03:4f:18:93:d9:1c:3a:72:0d:24:18:62:09:57:e4: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:12:EE:01:52:CD:F5:A6:1E:19:BB:1A:AC:6B:24:A4:AB:3E:DA:CE X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cBLuAVLN9aYeGbsarGskpKs-2s4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.234.218.0/23 Signature Algorithm: sha256WithRSAEncryption 18:ee:c2:7e:bd:dd:8c:bd:83:2f:3e:f4:33:ae:a7:cf:56:cf: 53:23:27:7f:6e:b3:4f:bf:0f:bd:7a:84:51:4f:7a:3c:92:43: e8:98:50:3f:1f:c4:e4:97:0c:2e:a2:47:fa:c1:ff:76:2d:c1: a4:6e:b0:b9:19:a9:06:11:3c:c7:5b:09:db:79:dc:a0:6d:ef: eb:c7:f0:ec:06:c9:bc:15:cf:c6:c5:c1:97:1e:1c:5c:3e:d1: e2:dd:1a:89:19:85:4e:51:cc:3a:00:66:9e:7b:0c:6e:7b:3a: 46:bd:c2:55:de:e3:61:aa:e5:9e:ff:19:da:9d:56:c7:77:ce: 0e:5a:1e:86:72:b1:35:0f:5f:76:1a:e2:29:24:61:ea:2e:b4: 04:96:34:ee:2f:75:75:10:ad:5c:ef:28:17:b1:2b:8d:64:13: 57:e9:df:a1:f8:1d:bf:f4:e7:8a:29:a2:45:a3:d9:f2:87:26: 24:4e:65:5c:7f:a2:e2:1c:0f:0d:bb:f1:43:4f:ce:48:4b:1e: 65:b8:7d:67:29:e6:60:d3:c1:d7:08:61:e4:1e:fd:b5:28:15: 5e:5c:6a:2b:70:16:99:19:c8:d5:a2:f3:0d:c0:62:55:a1:fc: 0c:18:63:5c:a8:bd:5c:41:58:78:d9:9e:55:bd:e0:9d:42:80: d0:5d:82:06 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NDdaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwMTJFRTAxNTJDREY1 QTYxRTE5QkIxQUFDNkIyNEE0QUIzRURBQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoBjLAChfKf0d/Bd3c34ocBB/+7i6u2vCT0U1r/1dyrGQ0+jFZ pruRgsAQSbpF0TvuXycjC/Rla3jTi008a3GPMOo1uCq0eWZv09cQKsORQ/iH7bUM sptXDreBIcLKgow6rON9kffWJANVWJVIQUQi7b65s1Q9WwKQrsg+CQdeFkMXR83Z GsbxkZTNmuWfk/9x9vCVAL3HQinYsCjpo4d+4MTvTTo9wkJW+1Rza7d6NFrCQllw nwNXwJudRF5p48XTHbWMR3L6YTTOzbcg7hAvzlBgIhnC3DHYa1YMchemI781Geqt vbMdYvZy6liRogNPGJPZHDpyDSQYYglX5BaDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcBLuAVLN9aYeGbsarGskpKs+2s4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2NCTHVBVkxOOWFZZUdic2FyR3NrcEtzLTJzNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFv6towDQYJKoZIhvcNAQELBQADggEBABjuwn693Yy9gy8+9DOup89Wz1Mj J39us0+/D716hFFPejySQ+iYUD8fxOSXDC6iR/rB/3YtwaRusLkZqQYRPMdbCdt5 3KBt7+vH8OwGybwVz8bFwZceHFw+0eLdGokZhU5RzDoAZp57DG57Oka9wlXe42Gq 5Z7/GdqdVsd3zg5aHoZysTUPX3Ya4ikkYeoutASWNO4vdXUQrVzvKBexK41kE1fp 36H4Hb/054opokWj2fKHJiROZVx/ouIcDw278UNPzkhLHmW4fWcp5mDTwdcIYeQe /bUoFV5caitwFpkZyNWi8w3AYlWh/AwYY1yovVxBWHjZnlW94J1CgNBdggY= -----END CERTIFICATE-----Generated at Wed Nov 5 21:48:03 2025 by rpki-client