$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lNnc04ehkA6LsqpTSdJTfJMBsBo.roa File: lNnc04ehkA6LsqpTSdJTfJMBsBo.roa (raw, json) Hash identifier: qCExiFPUUuf7suu4jKZ6l5Z9HMw9kZx3ZhszDb7fn20= Subject key identifier: 94:D9:DC:D3:87:A1:90:0E:8B:B2:AA:53:49:D2:53:7C:93:01:B0:1A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0474 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lNnc04ehkA6LsqpTSdJTfJMBsBo.roa Signing time: Wed 01 Oct 2025 01:34:51 +0000 ROA not before: Wed 01 Oct 2025 01:34:51 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 111.235.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:34:51 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=94D9DCD387A1900E8BB2AA5349D2537C9301B01A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bd:7b:2a:78:e0:08:18:81:d3:ea:60:49:7c: 91:1e:50:4d:e4:35:df:46:70:cd:14:6e:ea:4c:ea: 9a:64:49:79:ad:9f:98:52:3d:69:33:f4:0e:b0:61: b3:34:81:df:cb:4f:6a:d7:d4:7e:33:e6:c7:ca:b1: 75:c6:95:d5:25:c4:18:7c:3a:7a:f0:21:19:31:51: 87:4d:01:15:38:99:60:47:5d:37:c7:c6:9d:25:73: cb:c9:c7:ab:c9:6e:31:43:99:a2:8c:b7:b0:30:b3: 6b:0a:de:0f:c1:bf:9a:95:25:97:71:b3:75:29:d3: 42:32:f5:fd:71:a7:ed:2b:96:f6:bf:8d:07:df:48: 6c:a7:bb:46:34:20:f5:95:3a:87:71:91:1a:04:f8: 56:e6:65:d0:bd:c0:09:af:73:d6:13:5a:73:59:2b: d0:81:1c:9a:6c:ac:db:b9:23:8a:43:a6:29:cd:89: bb:48:8a:1a:bc:29:bd:56:9f:28:5a:75:c0:11:e2: 02:a8:ed:da:d2:28:7c:b9:f8:d4:e5:7c:4c:b1:d2: 17:8e:1f:3e:78:16:78:25:c9:2f:0a:3a:80:55:31: f8:f8:94:e9:fa:19:06:4a:69:4d:75:d7:e4:fd:d2: 2c:95:79:99:c4:69:e7:3c:cd:6d:ff:df:fb:b2:25: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D9:DC:D3:87:A1:90:0E:8B:B2:AA:53:49:D2:53:7C:93:01:B0:1A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lNnc04ehkA6LsqpTSdJTfJMBsBo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.235.38.0/24 Signature Algorithm: sha256WithRSAEncryption 64:c2:47:bf:ff:53:b8:e6:6d:d0:c9:cd:fe:96:3b:2c:bf:9c: f9:51:0f:0d:33:62:8d:81:72:0c:33:81:21:e6:27:44:f7:94: 50:71:f7:b4:88:e2:04:d9:96:55:97:8e:36:46:22:68:05:14: 35:24:ca:41:f9:29:71:3e:48:8c:d7:ed:f0:ae:21:44:f8:e2: a0:ce:da:80:93:90:5e:7e:60:96:e6:e5:42:29:db:f2:22:67: c6:59:54:00:d4:bf:32:4e:7e:ea:eb:26:18:c4:64:63:d4:89: f2:84:7d:d3:86:c6:8b:11:94:2f:4a:bd:d9:da:f1:f7:d0:06: cb:ef:c4:70:cc:2a:97:11:b8:7c:c8:c1:b6:8a:51:9e:08:21: c2:b4:83:b8:26:91:81:51:49:a9:37:41:22:81:11:07:66:01: 79:22:8c:47:d5:74:98:b4:52:bb:39:35:8f:cb:af:34:b9:5d: 92:7f:ca:67:7a:8e:a3:fa:46:57:a0:ed:2d:6b:5a:bb:a7:ee: 3e:72:b0:f7:35:c2:97:7b:01:61:bd:fc:0e:c5:e4:ca:c2:61: 37:ed:2f:92:8f:ed:2a:f8:ac:6c:56:64:38:b9:db:a0:d0:96: 87:eb:3a:53:3c:30:df:3a:ac:d5:b4:61:fb:14:34:84:17:ee: 33:aa:31:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTM0NTFaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0RDlEQ0QzODdBMTkw MEU4QkIyQUE1MzQ5RDI1MzdDOTMwMUIwMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlvXsqeOAIGIHT6mBJfJEeUE3kNd9GcM0UbupM6ppkSXmtn5hS PWkz9A6wYbM0gd/LT2rX1H4z5sfKsXXGldUlxBh8OnrwIRkxUYdNARU4mWBHXTfH xp0lc8vJx6vJbjFDmaKMt7Aws2sK3g/Bv5qVJZdxs3Up00Iy9f1xp+0rlva/jQff SGynu0Y0IPWVOodxkRoE+FbmZdC9wAmvc9YTWnNZK9CBHJpsrNu5I4pDpinNibtI ihq8Kb1WnyhadcAR4gKo7drSKHy5+NTlfEyx0heOHz54FnglyS8KOoBVMfj4lOn6 GQZKaU111+T90iyVeZnEaec8zW3/3/uyJW+FAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlNnc04ehkA6LsqpTSdJTfJMBsBowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2xObmMwNGVoa0E2THNxcFRTZEpUZkpNQnNCby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABv6yYwDQYJKoZIhvcNAQELBQADggEBAGTCR7//U7jmbdDJzf6WOyy/nPlR Dw0zYo2BcgwzgSHmJ0T3lFBx97SI4gTZllWXjjZGImgFFDUkykH5KXE+SIzX7fCu IUT44qDO2oCTkF5+YJbm5UIp2/IiZ8ZZVADUvzJOfurrJhjEZGPUifKEfdOGxosR lC9Kvdna8ffQBsvvxHDMKpcRuHzIwbaKUZ4IIcK0g7gmkYFRSak3QSKBEQdmAXki jEfVdJi0Urs5NY/LrzS5XZJ/ymd6jqP6Rleg7S1rWrun7j5ysPc1wpd7AWG9/A7F 5MrCYTftL5KP7Sr4rGxWZDi526DQlofrOlM8MN86rNW0YfsUNIQX7jOqMdU= -----END CERTIFICATE-----Generated at Wed Nov 5 20:32:06 2025 by rpki-client