$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/j4C_2NnHbCdBg721qRz84fQv3U8.roa File: j4C_2NnHbCdBg721qRz84fQv3U8.roa (raw, json) Hash identifier: 610+e8S0kkFkHHUDcZU1pBJ5TIIXUHqfZr66GxvtVqc= Subject key identifier: 8F:80:BF:D8:D9:C7:6C:27:41:83:BD:B5:A9:1C:FC:E1:F4:2F:DD:4F Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03B6 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/j4C_2NnHbCdBg721qRz84fQv3U8.roa Signing time: Thu 01 May 2025 01:40:31 +0000 ROA not before: Thu 01 May 2025 01:40:31 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 36.53.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:31 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=8F80BFD8D9C76C274183BDB5A91CFCE1F42FDD4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:98:92:a8:e8:d1:4e:cb:e0:41:0d:dd:6f:63: 4f:65:fe:37:31:c5:fe:f8:f8:3b:29:a7:94:e0:f1: 8b:95:71:e8:6a:35:04:8b:73:b3:a4:ca:80:f0:31: ed:42:a0:a3:c2:6a:aa:c4:65:c1:94:f5:bf:37:a2: 23:e2:ef:dd:52:56:cf:22:c5:75:45:c9:b3:24:60: e5:12:8d:80:aa:fe:b8:0e:43:e7:3e:57:cf:b2:a4: 22:c5:27:f7:09:d3:27:91:18:0d:2e:06:45:5b:d1: 4c:0e:e7:f6:26:81:05:d9:fd:3a:32:0a:b7:b5:9b: 64:04:d8:f7:b4:7d:91:87:2a:bc:ed:91:d8:84:c7: 36:17:50:85:2f:b8:96:c8:ba:f3:fd:fb:20:82:15: a6:4f:b4:cd:b3:08:90:4d:a0:f1:78:5e:80:85:84: 44:ac:f0:85:8a:f5:83:a4:3a:26:cc:ab:70:4b:46: a3:7e:3c:90:23:22:98:0b:d9:b0:7d:2a:d0:43:6e: b1:17:c9:00:48:03:93:0e:ec:91:7c:6f:ca:07:d1: cb:05:e2:0f:8d:33:ee:9c:11:ce:22:ce:34:7d:31: 21:f9:55:ba:42:86:d8:d8:ab:0f:0d:f1:5b:3c:5e: 32:67:c1:a9:2d:ee:28:04:52:a9:e9:4b:67:46:92: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:BF:D8:D9:C7:6C:27:41:83:BD:B5:A9:1C:FC:E1:F4:2F:DD:4F X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/j4C_2NnHbCdBg721qRz84fQv3U8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.53.224.0/21 Signature Algorithm: sha256WithRSAEncryption 5f:c5:49:39:bb:99:06:52:fb:5b:d4:44:dc:19:13:c4:8c:09: 6e:dd:42:b9:3e:84:7b:44:ec:2b:69:6e:d7:9f:9b:2d:b8:f4: 10:30:8c:8b:9f:46:fd:27:6f:35:8a:98:d3:2d:e6:40:fc:9d: 74:31:32:90:34:28:d7:bf:e3:20:d1:7f:bf:a1:9f:88:fd:2a: a1:15:69:a9:88:1b:61:e1:aa:69:39:e9:9c:42:aa:36:f7:b0: ad:4a:3b:99:d4:fd:46:b6:ac:ae:f4:dc:54:74:52:39:71:9b: b4:d6:f6:49:d1:2a:70:e9:ff:2c:6e:f8:b0:52:9a:dd:33:19: 69:47:7e:eb:87:fa:de:79:db:f6:7d:85:0f:80:bf:1d:6a:64: ce:99:af:c2:6f:77:e1:d7:32:79:67:92:3a:d6:43:1d:ba:f1: eb:a0:8c:92:2f:16:d1:a3:b9:c6:ee:13:37:c0:62:18:7c:4e: 57:0b:67:8e:12:c3:39:00:1e:93:71:45:40:d7:dd:fe:e6:26: f1:86:9c:9a:8b:9e:fd:59:5a:86:99:0b:a9:e4:17:00:05:5a: 72:6a:e2:54:36:d8:78:e5:3b:a0:7f:f3:b3:e4:fc:cf:bb:61: 54:03:44:fa:64:67:03:9d:fc:75:8f:35:97:16:65:33:0e:a4: d8:62:d6:40 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMzFaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhGODBCRkQ4RDlDNzZD Mjc0MTgzQkRCNUE5MUNGQ0UxRjQyRkRENEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpmJKo6NFOy+BBDd1vY09l/jcxxf74+Dspp5Tg8YuVcehqNQSL c7OkyoDwMe1CoKPCaqrEZcGU9b83oiPi791SVs8ixXVFybMkYOUSjYCq/rgOQ+c+ V8+ypCLFJ/cJ0yeRGA0uBkVb0UwO5/YmgQXZ/ToyCre1m2QE2Pe0fZGHKrztkdiE xzYXUIUvuJbIuvP9+yCCFaZPtM2zCJBNoPF4XoCFhESs8IWK9YOkOibMq3BLRqN+ PJAjIpgL2bB9KtBDbrEXyQBIA5MO7JF8b8oH0csF4g+NM+6cEc4izjR9MSH5VbpC htjYqw8N8Vs8XjJnwakt7igEUqnpS2dGkoNpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUj4C/2NnHbCdBg721qRz84fQv3U8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2o0Q18yTm5IYkNkQmc3MjFxUno4NGZRdjNVOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMkNeAwDQYJKoZIhvcNAQELBQADggEBAF/FSTm7mQZS+1vURNwZE8SMCW7d Qrk+hHtE7Ctpbtefmy249BAwjIufRv0nbzWKmNMt5kD8nXQxMpA0KNe/4yDRf7+h n4j9KqEVaamIG2Hhqmk56ZxCqjb3sK1KO5nU/Ua2rK703FR0Ujlxm7TW9knRKnDp /yxu+LBSmt0zGWlHfuuH+t552/Z9hQ+Avx1qZM6Zr8Jvd+HXMnlnkjrWQx268eug jJIvFtGjucbuEzfAYhh8TlcLZ44SwzkAHpNxRUDX3f7mJvGGnJqLnv1ZWoaZC6nk FwAFWnJq4lQ22HjlO6B/87Pk/M+7YVQDRPpkZwOd/HWPNZcWZTMOpNhi1kA= -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:07 2025 by rpki-client