$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lAi7WVoAwJy-dRL_FvcVnj46Tow.roa File: lAi7WVoAwJy-dRL_FvcVnj46Tow.roa (raw, json) Hash identifier: BdZ9Talox7ye/sxIOX/hmmDsaYqPD1BdRIMu5x8ubX0= Subject key identifier: 94:08:BB:59:5A:00:C0:9C:BE:75:12:FF:16:F7:15:9E:3E:3A:4E:8C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0366 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lAi7WVoAwJy-dRL_FvcVnj46Tow.roa Signing time: Thu 01 May 2025 01:33:23 +0000 ROA not before: Thu 01 May 2025 01:33:23 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 27.120.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 870 (0x366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:23 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9408BB595A00C09CBE7512FF16F7159E3E3A4E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:78:cc:f3:d7:25:d7:1f:1a:61:4f:4b:ce: 31:ce:8d:80:6a:2f:14:22:25:f2:de:45:7a:47:9e: 77:47:53:02:d4:4c:f0:d8:53:7f:39:d7:38:b7:70: d8:e2:9c:a4:cf:c2:f1:34:87:80:a1:8c:b7:13:ec: b0:8f:9b:90:ed:c5:99:72:64:06:4d:cf:4d:4b:57: b3:f8:05:c1:e5:ff:1f:50:d7:08:c6:d8:a6:a8:02: 57:c1:44:d2:d2:4f:bd:35:21:7d:10:d9:02:23:68: aa:4c:44:c4:d0:ac:e3:31:79:3e:09:ce:c4:3a:f6: 3a:1b:47:43:85:11:d1:d2:d1:91:c6:8e:91:38:be: c0:64:7e:d1:fd:3c:f2:4a:8b:e5:d5:4a:50:91:1a: 92:d7:af:1d:83:11:76:f6:b5:8c:ad:e3:e4:64:73: f0:6f:53:8f:44:8d:0d:1b:e8:fe:99:20:df:0e:4b: 83:1d:72:3f:01:cd:72:8c:44:4d:b0:97:d1:be:1a: 34:f3:3b:13:8f:90:77:ba:a0:ea:ea:31:44:de:28: 15:a4:08:40:fb:a2:a1:52:00:a0:12:cc:f1:31:e6: d7:3f:35:f5:44:b3:c5:a3:8b:b4:d2:8e:a8:34:87: 1b:a1:63:d1:a4:ec:8f:36:84:2a:aa:48:aa:d8:4d: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:08:BB:59:5A:00:C0:9C:BE:75:12:FF:16:F7:15:9E:3E:3A:4E:8C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lAi7WVoAwJy-dRL_FvcVnj46Tow.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.120.192.0/18 Signature Algorithm: sha256WithRSAEncryption 34:82:24:51:fc:5b:a2:48:b6:c4:67:db:bb:68:84:e6:57:d4: d2:41:b1:d3:84:85:a7:e7:85:91:df:b5:72:75:3f:15:c1:9a: ca:f4:b0:b6:28:2f:44:74:55:7a:83:3f:d0:55:28:73:34:8f: 33:71:99:70:e3:d9:e4:d8:65:cc:62:4d:92:77:c2:e7:ef:a9: a9:07:96:6a:a2:a1:92:79:c1:20:11:ac:f1:20:e3:34:a9:79: 5f:1c:bc:66:00:81:0a:f4:da:5e:be:c5:80:90:8f:91:94:4f: 09:e3:71:a5:8d:a3:3d:6b:45:b6:07:03:9d:e5:cc:f2:74:42: 26:4a:0d:7c:fd:08:3a:a5:fa:0e:78:73:02:c5:ef:6b:c3:01: f5:b1:31:ec:44:bc:db:c5:0c:bb:68:b8:24:d2:46:34:cb:1b: eb:73:76:2f:54:84:1d:87:2e:77:5f:fa:94:58:a6:5e:0e:55: 33:df:28:6d:10:6e:f2:0a:75:01:9d:72:e2:f4:ba:3f:bd:39: 08:b5:09:8c:22:b6:0d:1b:ac:d9:23:f6:6e:f3:35:04:40:82: d3:a9:b0:0a:0f:ff:59:46:7e:ef:d6:b2:f7:d4:5b:f5:0b:a3: 6a:d6:7b:87:7d:88:9d:61:ff:28:cf:3d:35:03:21:7c:23:e6: 22:48:9f:9a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMjNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk0MDhCQjU5NUEwMEMw OUNCRTc1MTJGRjE2RjcxNTlFM0UzQTRFOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEKnjM89cl1x8aYU9LzjHOjYBqLxQiJfLeRXpHnndHUwLUTPDY U3851zi3cNjinKTPwvE0h4ChjLcT7LCPm5DtxZlyZAZNz01LV7P4BcHl/x9Q1wjG 2KaoAlfBRNLST701IX0Q2QIjaKpMRMTQrOMxeT4JzsQ69jobR0OFEdHS0ZHGjpE4 vsBkftH9PPJKi+XVSlCRGpLXrx2DEXb2tYyt4+Rkc/BvU49EjQ0b6P6ZIN8OS4Md cj8BzXKMRE2wl9G+GjTzOxOPkHe6oOrqMUTeKBWkCED7oqFSAKASzPEx5tc/NfVE s8Wji7TSjqg0hxuhY9Gk7I82hCqqSKrYTeFjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlAi7WVoAwJy+dRL/FvcVnj46TowwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2xBaTdXVm9Bd0p5LWRSTF9GdmNWbmo0NlRvdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYbeMAwDQYJKoZIhvcNAQELBQADggEBADSCJFH8W6JItsRn27tohOZX1NJB sdOEhafnhZHftXJ1PxXBmsr0sLYoL0R0VXqDP9BVKHM0jzNxmXDj2eTYZcxiTZJ3 wufvqakHlmqioZJ5wSARrPEg4zSpeV8cvGYAgQr02l6+xYCQj5GUTwnjcaWNoz1r RbYHA53lzPJ0QiZKDXz9CDql+g54cwLF72vDAfWxMexEvNvFDLtouCTSRjTLG+tz di9UhB2HLndf+pRYpl4OVTPfKG0QbvIKdQGdcuL0uj+9OQi1CYwitg0brNkj9m7z NQRAgtOpsAoP/1lGfu/WsvfUW/ULo2rWe4d9iJ1h/yjPPTUDIXwj5iJIn5o= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:40 2025 by rpki-client