$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/k8m4Ewm7HtJ0q7PocKCSOI7qPpg.roa File: k8m4Ewm7HtJ0q7PocKCSOI7qPpg.roa (raw, json) Hash identifier: OCm7dX+DDPhun/iGJjf0Fe95I1UMyOebGMED+rbIfRA= Subject key identifier: 93:C9:B8:13:09:BB:1E:D2:74:AB:B3:E8:70:A0:92:38:8E:EA:3E:98 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0499 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/k8m4Ewm7HtJ0q7PocKCSOI7qPpg.roa Signing time: Wed 01 Oct 2025 01:43:38 +0000 ROA not before: Wed 01 Oct 2025 01:43:38 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 221.121.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:43:38 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=93C9B81309BB1ED274ABB3E870A092388EEA3E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8e:42:98:aa:72:ba:72:cb:ef:b1:72:7e:9a: b7:de:dd:ae:04:94:a6:7a:16:3c:f7:88:01:cd:01: 58:45:59:f3:dc:16:34:61:6f:68:5f:0c:58:11:cf: c7:42:3b:ca:71:b2:dd:19:82:90:93:cc:5b:7b:91: 72:57:1e:80:9a:e6:fe:1f:19:2c:b2:05:8b:9a:eb: a5:0b:42:f7:b8:64:a1:e2:83:60:93:24:8a:50:1e: ea:8c:f4:59:a2:01:dd:44:9c:7d:02:47:fe:1f:3f: 20:0b:85:17:76:29:d6:ba:6a:a5:5c:d4:a2:28:ca: ee:a0:89:57:43:b4:4e:af:c9:af:e1:dc:0d:56:f9: b6:f4:e1:d8:83:22:11:f6:3b:8f:df:35:9b:4a:f6: ff:12:62:ae:e8:e9:92:0a:79:4a:36:bc:94:76:d0: 28:90:8e:b3:25:79:22:9c:b4:73:81:81:2f:6a:1f: 0c:e5:13:c1:b0:53:1a:0b:22:fa:86:96:fc:7f:65: fa:4b:61:e3:99:a4:a8:52:8d:b6:9c:ba:c0:1e:a1: d7:f9:7d:e0:35:f8:17:91:4c:46:4c:ea:60:89:c8: fe:79:89:03:2d:ab:b1:3b:a0:65:3d:c7:07:b8:fc: 58:b0:06:66:19:ac:2d:3c:28:a7:8a:18:10:fb:5a: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C9:B8:13:09:BB:1E:D2:74:AB:B3:E8:70:A0:92:38:8E:EA:3E:98 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/k8m4Ewm7HtJ0q7PocKCSOI7qPpg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.121.160.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:13:ab:67:4d:02:90:18:68:60:81:5f:08:6e:bf:bc:2b:ce: bc:b1:80:ba:dd:20:0f:fa:2d:7d:1b:cf:d0:e8:c2:73:dd:77: 14:59:6e:05:70:82:0c:cb:bf:36:71:52:dd:87:6f:6b:ff:cf: ae:d8:c4:9c:dd:40:1d:fa:13:a4:26:93:b3:94:96:66:be:5b: 77:07:03:7d:ea:a4:5e:5d:ec:56:f1:8d:71:94:0c:f6:8d:58: 5f:bc:25:f2:f8:9b:4b:3b:eb:29:09:c2:87:57:f6:cb:8f:37: 3e:6e:ef:84:d0:33:4e:77:a8:24:de:5f:54:99:88:b6:9f:20: af:58:20:02:dc:4a:47:66:82:cb:b5:e9:a7:cd:28:54:f3:5e: fd:7f:b0:43:63:be:0d:1b:d5:e4:8c:15:0b:bd:c7:67:3e:d2: fc:2b:6b:ea:e1:08:05:e8:db:a0:ac:d3:50:18:82:7f:a7:81: 0b:ae:2a:cc:1b:c3:cc:2d:50:f2:2f:e8:4c:0d:5f:4b:57:0e: 99:cd:3d:da:90:00:85:13:a6:f7:8c:89:d7:6b:02:2c:cb:da: 0d:9a:57:b8:ea:62:29:c3:2a:bf:bc:6d:4f:26:91:6f:a1:7c: 59:49:65:5d:8c:83:e2:69:c1:ae:39:b4:09:fb:b9:97:6a:0d: b8:a2:36:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTQzMzhaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzQzlCODEzMDlCQjFF RDI3NEFCQjNFODcwQTA5MjM4OEVFQTNFOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2jkKYqnK6csvvsXJ+mrfe3a4ElKZ6Fjz3iAHNAVhFWfPcFjRh b2hfDFgRz8dCO8pxst0ZgpCTzFt7kXJXHoCa5v4fGSyyBYua66ULQve4ZKHig2CT JIpQHuqM9FmiAd1EnH0CR/4fPyALhRd2Kda6aqVc1KIoyu6giVdDtE6vya/h3A1W +bb04diDIhH2O4/fNZtK9v8SYq7o6ZIKeUo2vJR20CiQjrMleSKctHOBgS9qHwzl E8GwUxoLIvqGlvx/ZfpLYeOZpKhSjbacusAeodf5feA1+BeRTEZM6mCJyP55iQMt q7E7oGU9xwe4/FiwBmYZrC08KKeKGBD7WlidAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUk8m4Ewm7HtJ0q7PocKCSOI7qPpgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2s4bTRFd203SHRKMHE3UG9jS0NTT0k3cVBwZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATdeaAwDQYJKoZIhvcNAQELBQADggEBAJ8Tq2dNApAYaGCBXwhuv7wrzryx gLrdIA/6LX0bz9DownPddxRZbgVwggzLvzZxUt2Hb2v/z67YxJzdQB36E6Qmk7OU lma+W3cHA33qpF5d7FbxjXGUDPaNWF+8JfL4m0s76ykJwodX9suPNz5u74TQM053 qCTeX1SZiLafIK9YIALcSkdmgsu16afNKFTzXv1/sENjvg0b1eSMFQu9x2c+0vwr a+rhCAXo26Cs01AYgn+ngQuuKswbw8wtUPIv6EwNX0tXDpnNPdqQAIUTpveMiddr AizL2g2aV7jqYinDKr+8bU8mkW+hfFlJZV2Mg+Jpwa45tAn7uZdqDbiiNuA= -----END CERTIFICATE-----Generated at Wed Nov 5 19:09:13 2025 by rpki-client