$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/heTo3e4pSCdZ5QvovEcmvcrJpF8.roa File: heTo3e4pSCdZ5QvovEcmvcrJpF8.roa (raw, json) Hash identifier: bsRuxTTsCImRIPXyvVfmEA7p2ngw5ddwpbrx3sbyJ58= Subject key identifier: 85:E4:E8:DD:EE:29:48:27:59:E5:0B:E8:BC:47:26:BD:CA:C9:A4:5F Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0382 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/heTo3e4pSCdZ5QvovEcmvcrJpF8.roa Signing time: Thu 01 May 2025 01:33:36 +0000 ROA not before: Thu 01 May 2025 01:33:36 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 36.52.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:36 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=85E4E8DDEE29482759E50BE8BC4726BDCAC9A45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:0c:40:83:45:2b:06:79:25:cd:30:30:03: 0b:3c:fc:a7:21:17:5f:d7:9a:cc:dc:12:05:33:d1: cb:4e:23:77:7b:d0:7f:6f:59:98:e1:60:ea:c4:f5: 9a:11:eb:cd:81:3b:7b:6d:be:b4:de:64:66:7b:ec: 08:c8:82:a9:fb:72:40:f3:49:f8:68:d9:a9:1c:98: 5f:2c:2f:57:56:ae:e3:0a:1f:6a:19:f5:09:32:5e: c4:87:7b:ed:3e:e7:a3:bf:c5:90:e0:06:78:cb:1f: aa:f8:b4:b3:fd:86:2c:59:19:03:69:52:f3:23:9e: 6c:60:d6:11:8c:d7:b4:19:fe:c1:72:79:8d:fe:15: 67:d0:ea:7e:59:d0:e0:38:cc:99:ac:5e:3f:8c:c6: 0f:a7:6e:c1:29:a2:e7:97:0a:04:de:78:f1:ca:5f: 3b:5c:3c:4e:44:03:55:ff:fb:e1:d3:9b:79:3f:50: 97:28:32:21:4a:78:8c:e7:97:72:09:e1:ba:23:9f: 51:c5:e6:bb:d5:82:c2:58:7b:d0:67:35:74:fa:2a: 5f:cd:9f:38:20:0a:b4:16:27:0e:ee:1a:43:40:de: 44:81:3c:17:6a:b1:56:98:0c:01:25:c1:88:9e:a0: 7c:43:80:86:65:fa:38:46:5a:97:02:84:c6:09:0c: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E4:E8:DD:EE:29:48:27:59:E5:0B:E8:BC:47:26:BD:CA:C9:A4:5F X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/heTo3e4pSCdZ5QvovEcmvcrJpF8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.26.0/23 Signature Algorithm: sha256WithRSAEncryption 06:ee:57:d4:8b:53:12:4b:a7:a6:cb:dc:d0:46:8a:cf:5a:a2: dc:86:cd:46:27:5d:e8:6f:af:37:9d:fc:63:55:48:03:6d:46: e2:b5:66:4c:c4:18:28:af:d6:83:80:49:bd:94:02:2b:17:84: f7:b1:dd:7b:d1:6a:23:64:3d:b6:28:7d:19:04:f0:10:9d:26: c3:03:d2:d9:76:81:45:a5:4c:af:db:68:5a:90:86:41:0a:af: 4c:4c:49:54:a4:d6:0f:b8:9d:a2:85:3b:c5:45:06:89:31:f0: 26:3d:2a:55:65:ad:b1:bd:71:9c:01:31:6b:2e:38:40:97:da: 9f:92:6a:56:02:75:b8:76:e6:42:da:8a:ec:a6:1f:49:f9:59: ce:55:1a:00:3e:7a:d4:24:fa:91:5b:09:db:9b:83:cb:10:eb: 85:68:a8:29:31:db:d0:e1:c2:c3:08:b7:97:42:ad:54:9d:40: 91:df:09:4c:c0:ba:dd:21:03:f8:bc:04:dc:6d:4a:63:09:ee: 1c:cc:4d:ad:14:65:e1:42:7e:81:db:c5:5c:3d:44:a0:9d:2d: 37:38:ac:16:1e:73:b7:b0:d0:53:4a:ab:fc:81:dd:f0:64:31: 84:5a:42:de:0d:8a:9a:ab:ee:d9:8f:13:bb:9b:da:11:80:04: 10:8f:b9:92 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMzZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg1RTRFOERERUUyOTQ4 Mjc1OUU1MEJFOEJDNDcyNkJEQ0FDOUE0NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClegxAg0UrBnklzTAwAws8/KchF1/XmszcEgUz0ctOI3d70H9v WZjhYOrE9ZoR682BO3ttvrTeZGZ77AjIgqn7ckDzSfho2akcmF8sL1dWruMKH2oZ 9QkyXsSHe+0+56O/xZDgBnjLH6r4tLP9hixZGQNpUvMjnmxg1hGM17QZ/sFyeY3+ FWfQ6n5Z0OA4zJmsXj+Mxg+nbsEpoueXCgTeePHKXztcPE5EA1X/++HTm3k/UJco MiFKeIznl3IJ4bojn1HF5rvVgsJYe9BnNXT6Kl/NnzggCrQWJw7uGkNA3kSBPBdq sVaYDAElwYieoHxDgIZl+jhGWpcChMYJDHp3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUheTo3e4pSCdZ5QvovEcmvcrJpF8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2hlVG8zZTRwU0NkWjVRdm92RWNtdmNySnBGOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEkNBowDQYJKoZIhvcNAQELBQADggEBAAbuV9SLUxJLp6bL3NBGis9aotyG zUYnXehvrzed/GNVSANtRuK1ZkzEGCiv1oOASb2UAisXhPex3XvRaiNkPbYofRkE 8BCdJsMD0tl2gUWlTK/baFqQhkEKr0xMSVSk1g+4naKFO8VFBokx8CY9KlVlrbG9 cZwBMWsuOECX2p+SalYCdbh25kLaiuymH0n5Wc5VGgA+etQk+pFbCdubg8sQ64Vo qCkx29DhwsMIt5dCrVSdQJHfCUzAut0hA/i8BNxtSmMJ7hzMTa0UZeFCfoHbxVw9 RKCdLTc4rBYec7ew0FNKq/yB3fBkMYRaQt4Nipqr7tmPE7ub2hGABBCPuZI= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:39 2025 by rpki-client