$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/j3oRE1nNhTaRwG4nLEOtOXjRDWk.roa File: j3oRE1nNhTaRwG4nLEOtOXjRDWk.roa (raw, json) Hash identifier: 3pg/RReOatEAyTjTGfxHn34yWLi1myXSdZn5MdKKEgA= Subject key identifier: 8F:7A:11:13:59:CD:85:36:91:C0:6E:27:2C:43:AD:39:78:D1:0D:69 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03EC Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/j3oRE1nNhTaRwG4nLEOtOXjRDWk.roa Signing time: Thu 01 May 2025 01:45:15 +0000 ROA not before: Thu 01 May 2025 01:45:15 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 119.150.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:15 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=8F7A111359CD853691C06E272C43AD3978D10D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:c3:75:17:b6:83:ed:01:c3:eb:ab:b5:b8: db:6c:2e:ae:07:ea:6d:37:76:77:a0:cf:9f:76:4a: b2:00:47:cb:2e:74:b7:fb:3c:5d:4f:00:6d:5e:52: 71:8d:e8:05:4f:d4:17:73:03:20:d2:6e:e4:e8:b3: fc:6d:3e:ca:19:a0:3e:3e:fe:1f:89:20:bd:40:0f: 5f:81:e7:4d:f7:e1:96:a5:3e:c4:79:52:f1:da:d2: d1:7e:f4:90:b5:2d:80:be:f0:29:6a:08:a8:dd:48: b4:ab:a3:f8:e5:bf:6d:f5:7f:a6:b1:98:2e:f6:f3: 15:a3:0d:af:65:c0:25:d7:21:47:12:41:24:6c:d6: d0:de:b9:9b:f6:52:a9:1b:54:dc:da:1f:6a:98:06: 4b:6f:96:25:b0:24:85:40:56:e0:4f:47:12:3f:10: 2e:61:3f:86:e8:be:80:78:96:bb:02:c9:7c:cf:c2: 1c:f2:3e:2e:6f:db:c4:b0:fb:e3:8e:d9:25:84:04: f6:d9:64:e1:75:8d:c9:ca:a3:76:6e:3a:18:7b:e9: 01:17:3b:61:12:34:35:4d:88:9c:90:56:9c:69:00: f1:d0:13:4d:4a:2b:97:d7:d8:e0:b4:d7:38:68:cd: 72:b9:3c:14:88:d0:ce:ae:98:77:2c:3d:12:b5:0b: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7A:11:13:59:CD:85:36:91:C0:6E:27:2C:43:AD:39:78:D1:0D:69 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/j3oRE1nNhTaRwG4nLEOtOXjRDWk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.128.0/18 Signature Algorithm: sha256WithRSAEncryption 47:a5:29:4f:03:51:9e:5e:00:e1:22:a3:52:ca:9f:a6:f9:9d: 75:38:bf:c4:34:64:07:93:84:a1:04:45:96:21:3f:fd:40:0f: ca:2a:b4:b5:65:12:04:7b:88:c5:40:b6:38:d8:31:fb:f4:36: 42:b1:96:3b:c4:08:d7:45:34:c1:ad:18:8a:88:a5:4d:f3:63: 24:c1:d5:ee:f9:67:24:83:bb:78:ce:f5:e5:f6:33:ae:5e:2a: 37:2b:bb:6f:26:66:11:42:4d:ec:1a:a9:cb:9e:94:5e:b6:9b: 17:b8:a0:c9:fa:11:0b:a2:2b:cc:26:29:ed:76:93:bf:ed:37: d8:97:2e:9c:ab:e3:17:e7:0b:a9:c0:72:e3:eb:01:4a:90:22: 23:99:09:16:75:53:1f:72:b7:80:15:23:4a:3a:41:ff:f9:5c: 96:09:71:25:b7:a7:a8:97:6c:f9:7c:d5:b0:4d:1f:50:c8:da: ac:b3:6c:57:14:9a:3a:40:b2:69:ef:24:d4:45:7d:a9:b2:91: ea:12:a7:a8:19:21:69:29:27:da:dd:b7:cd:27:3b:82:9f:50: 3e:58:ca:fc:f6:43:d3:f7:7f:ca:70:55:a8:94:cc:59:ce:fd: 9b:db:09:dc:da:b2:50:ad:25:3f:ac:e0:91:06:a9:d7:79:01: 5c:08:e0:fc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MTVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhGN0ExMTEzNTlDRDg1 MzY5MUMwNkUyNzJDNDNBRDM5NzhEMTBENjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5l8N1F7aD7QHD66u1uNtsLq4H6m03dnegz592SrIAR8sudLf7 PF1PAG1eUnGN6AVP1BdzAyDSbuTos/xtPsoZoD4+/h+JIL1AD1+B50334ZalPsR5 UvHa0tF+9JC1LYC+8ClqCKjdSLSro/jlv231f6axmC728xWjDa9lwCXXIUcSQSRs 1tDeuZv2UqkbVNzaH2qYBktvliWwJIVAVuBPRxI/EC5hP4bovoB4lrsCyXzPwhzy Pi5v28Sw++OO2SWEBPbZZOF1jcnKo3ZuOhh76QEXO2ESNDVNiJyQVpxpAPHQE01K K5fX2OC01zhozXK5PBSI0M6umHcsPRK1CwUzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUj3oRE1nNhTaRwG4nLEOtOXjRDWkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2ozb1JFMW5OaFRhUndHNG5MRU90T1hqUkRXay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ3loAwDQYJKoZIhvcNAQELBQADggEBAEelKU8DUZ5eAOEio1LKn6b5nXU4 v8Q0ZAeThKEERZYhP/1AD8oqtLVlEgR7iMVAtjjYMfv0NkKxljvECNdFNMGtGIqI pU3zYyTB1e75ZySDu3jO9eX2M65eKjcru28mZhFCTewaqcuelF62mxe4oMn6EQui K8wmKe12k7/tN9iXLpyr4xfnC6nAcuPrAUqQIiOZCRZ1Ux9yt4AVI0o6Qf/5XJYJ cSW3p6iXbPl81bBNH1DI2qyzbFcUmjpAsmnvJNRFfamykeoSp6gZIWkpJ9rdt80n O4KfUD5Yyvz2Q9P3f8pwVaiUzFnO/ZvbCdzaslCtJT+s4JEGqdd5AVwI4Pw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:47 2025 by rpki-client