$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ocZ8n7Y1eRKWw8lkyjl_eksNoU8.roa File: ocZ8n7Y1eRKWw8lkyjl_eksNoU8.roa (raw, json) Hash identifier: 0Hm1MwGNeJJ+g4cHsj1cHd/unD+sznV6tjUcWT4JZfg= Subject key identifier: A1:C6:7C:9F:B6:35:79:12:96:C3:C9:64:CA:39:7F:7A:4B:0D:A1:4F Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 045B Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ocZ8n7Y1eRKWw8lkyjl_eksNoU8.roa Signing time: Mon 01 Sep 2025 01:34:05 +0000 ROA not before: Mon 01 Sep 2025 01:34:05 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 10013 IP address blocks: 36.52.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:34:05 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=A1C67C9FB635791296C3C964CA397F7A4B0DA14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:85:e7:ff:7d:47:60:98:9d:58:2e:25:b0: 59:fd:09:00:2f:7e:72:e6:3a:1c:d1:3b:40:bd:05: 32:31:11:9d:30:5a:d2:a5:96:bd:3c:fa:12:e2:ca: a6:d4:a0:c8:35:17:52:c8:94:24:08:1a:45:bc:9a: c8:ba:3d:a4:64:12:76:ab:31:08:cb:1a:32:26:78: 32:2d:0a:d6:17:6d:84:d0:5f:9e:f4:b1:2c:0f:21: a0:5c:37:c7:3b:76:d6:6f:87:91:ee:0a:85:f8:18: 0a:45:d9:f8:82:24:e3:24:f9:09:4d:22:0e:c1:47: 15:c6:a5:8d:7b:23:ff:af:56:c1:e7:f5:07:5a:f3: ba:48:bc:6f:e5:c0:2a:66:5c:e3:ad:00:5c:55:26: 5c:f3:29:37:e1:37:84:c7:88:b1:8c:82:9d:10:50: 3a:88:0a:1e:cf:bc:57:6e:c7:e3:11:e6:66:a7:b1: 53:ba:08:e0:82:37:d9:c9:8d:6a:12:f2:e2:d1:48: 60:e6:7a:ef:4f:1f:4d:f2:40:51:83:ce:cf:57:9e: a1:8a:46:20:38:c6:10:b7:76:8b:fc:85:38:28:c3: cb:55:de:cb:81:38:88:78:2a:e5:4b:2a:67:0d:93: d4:8b:1c:1e:cb:77:26:eb:a8:df:70:94:ba:94:90: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C6:7C:9F:B6:35:79:12:96:C3:C9:64:CA:39:7F:7A:4B:0D:A1:4F X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ocZ8n7Y1eRKWw8lkyjl_eksNoU8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.220.0/23 Signature Algorithm: sha256WithRSAEncryption 85:51:ce:91:aa:fb:d2:d6:be:da:6e:6a:32:20:fa:f4:d8:ca: bc:84:3d:36:76:e6:fe:6e:3f:30:6a:f5:43:18:be:4d:07:20: 3a:48:6f:de:da:67:bb:90:16:a1:ad:bd:c4:1a:da:84:c5:d6: d1:d7:92:60:7b:e0:ff:1e:29:06:d8:b3:2b:f0:18:04:8b:d0: 02:21:5c:2f:ef:67:87:8d:57:89:e9:80:9c:6d:1b:10:97:8c: 0d:79:0f:5c:2c:80:0f:32:58:d5:27:2e:0d:e3:9a:09:79:c6: 11:2c:7b:9c:93:80:d1:13:62:40:c3:2a:84:20:5d:5c:c8:55: e1:29:c4:53:b6:2a:98:e7:bd:6f:85:e3:fb:f5:e5:50:f1:c3: 8d:ea:d2:a0:20:96:da:f6:fd:6b:b6:24:76:be:16:28:ce:e3: a0:13:fe:d7:8f:d2:9f:fc:f5:9a:02:bf:49:ad:3a:80:fb:5f: 2d:ef:97:11:87:af:a5:0d:24:f9:7f:42:c7:48:b5:ed:3e:3b: 8d:f2:e2:9d:06:42:e1:27:5c:6e:9a:93:60:64:7c:67:9c:d2: 53:19:2d:b2:3c:23:95:07:28:1c:77:f1:0c:ea:d5:0d:92:cc: db:ca:10:0c:9a:fa:03:a7:f7:d5:7c:5c:ce:f6:eb:54:62:af: 57:20:4f:57 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTM0MDVaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEExQzY3QzlGQjYzNTc5 MTI5NkMzQzk2NENBMzk3RjdBNEIwREExNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC61IXn/31HYJidWC4lsFn9CQAvfnLmOhzRO0C9BTIxEZ0wWtKl lr08+hLiyqbUoMg1F1LIlCQIGkW8msi6PaRkEnarMQjLGjImeDItCtYXbYTQX570 sSwPIaBcN8c7dtZvh5HuCoX4GApF2fiCJOMk+QlNIg7BRxXGpY17I/+vVsHn9Qda 87pIvG/lwCpmXOOtAFxVJlzzKTfhN4THiLGMgp0QUDqICh7PvFdux+MR5mansVO6 COCCN9nJjWoS8uLRSGDmeu9PH03yQFGDzs9XnqGKRiA4xhC3dov8hTgow8tV3suB OIh4KuVLKmcNk9SLHB7LdybrqN9wlLqUkIqpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUocZ8n7Y1eRKWw8lkyjl/eksNoU8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L29jWjhuN1kxZVJLV3c4bGt5amxfZWtzTm9VOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEkNNwwDQYJKoZIhvcNAQELBQADggEBAIVRzpGq+9LWvtpuajIg+vTYyryE PTZ25v5uPzBq9UMYvk0HIDpIb97aZ7uQFqGtvcQa2oTF1tHXkmB74P8eKQbYsyvw GASL0AIhXC/vZ4eNV4npgJxtGxCXjA15D1wsgA8yWNUnLg3jmgl5xhEse5yTgNET YkDDKoQgXVzIVeEpxFO2KpjnvW+F4/v15VDxw43q0qAgltr2/Wu2JHa+FijO46AT /teP0p/89ZoCv0mtOoD7Xy3vlxGHr6UNJPl/QsdIte0+O43y4p0GQuEnXG6ak2Bk fGec0lMZLbI8I5UHKBx38Qzq1Q2SzNvKEAya+gOn99V8XM7261Rir1cgT1c= -----END CERTIFICATE-----Generated at Wed Nov 5 20:33:39 2025 by rpki-client