$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/rp0FjWmZwmjxOUZ3r-iAJEBLerA.roa File: rp0FjWmZwmjxOUZ3r-iAJEBLerA.roa (raw, json) Hash identifier: m8e5TFl/spLsZGZqMy6ND48zQS/NXxdOVcP4G4K3/BM= Subject key identifier: AE:9D:05:8D:69:99:C2:68:F1:39:46:77:AF:E8:80:24:40:4B:7A:B0 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03AC Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rp0FjWmZwmjxOUZ3r-iAJEBLerA.roa Signing time: Thu 01 May 2025 01:40:26 +0000 ROA not before: Thu 01 May 2025 01:40:26 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 61.87.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:40:26 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=AE9D058D6999C268F1394677AFE88024404B7AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:13:4e:4e:da:80:3b:6a:5f:10:ad:1a:5c: ab:11:b5:cd:22:16:3c:fc:b8:64:56:af:2d:c2:f3: 8c:78:1c:66:dd:a8:3c:21:7e:39:b8:e1:e3:d3:7d: 0c:6b:d9:53:d0:7a:b7:77:6e:30:cf:51:43:cc:6e: 3f:26:98:0e:fd:06:3d:8c:29:83:3f:04:9b:53:95: 2d:04:b8:6c:04:38:87:64:97:6f:45:16:87:67:cc: e7:09:bc:d5:f8:02:f2:4c:00:0c:73:d4:3f:ea:69: d9:b9:ed:cd:3b:32:96:76:16:b5:e3:af:82:a5:a1: ea:e7:38:ea:16:a1:e9:ed:87:7b:b7:a9:48:c9:51: 2e:b9:61:30:4a:76:cc:ff:b7:37:0f:9e:4a:e1:fa: d7:2d:e6:13:a7:12:d2:c4:e7:97:d9:01:b2:0b:34: 2c:e0:7e:26:52:df:32:b1:21:b3:9d:f5:1f:dc:7e: 86:fa:0f:f1:94:c3:2a:01:dc:88:d7:1e:f8:47:7d: ec:2b:ee:a6:e3:99:b3:b4:0b:fa:4a:49:2c:70:0e: 34:1b:06:85:d6:53:e2:a9:01:89:b5:77:48:6a:75: 22:a8:16:b4:08:69:6d:36:a8:ae:52:1b:7e:a1:a7: 62:79:c2:ab:e9:3b:d4:12:29:fc:b7:5f:64:a4:45: 99:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9D:05:8D:69:99:C2:68:F1:39:46:77:AF:E8:80:24:40:4B:7A:B0 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rp0FjWmZwmjxOUZ3r-iAJEBLerA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.87.0.0/21 Signature Algorithm: sha256WithRSAEncryption 25:07:ec:af:c2:d1:d7:e2:d4:0f:c6:84:d7:81:73:1a:2e:26: 3e:4c:56:d7:0c:1c:7c:ce:8a:47:37:c6:65:f4:36:8b:94:07: d6:e2:96:63:dd:ad:83:9e:4e:a1:18:0c:48:7b:49:55:a2:fa: 57:93:21:09:33:f0:14:bf:16:3e:cc:16:04:6c:c4:6d:05:f4: 32:14:85:cb:ee:df:84:95:38:83:bb:04:7e:d8:4c:e2:8a:71: b0:74:ce:c9:ea:56:f7:06:f6:8d:a1:51:62:0b:b1:bb:21:59: 73:52:7e:96:8f:bd:9d:42:c6:ee:1a:ed:93:14:a3:9c:2d:21: 4b:a2:3c:20:c9:c2:c5:81:2a:30:90:a7:6b:66:5e:a0:f6:ea: d9:22:40:d2:98:b0:42:c1:80:c3:87:26:7f:ac:61:6f:57:5c: b5:47:a4:00:86:61:68:ec:c4:db:4b:0d:db:63:7a:9d:36:24: d3:63:08:db:b3:8d:c8:81:76:36:4c:d1:ee:f1:99:4d:d5:7a: 83:79:b7:5f:0c:6b:3b:4d:bc:b7:64:6a:24:cb:1f:2f:df:32: 8b:5c:3f:77:2f:71:d2:a5:18:1b:12:1f:89:97:cc:76:4d:91: 73:fa:2d:9b:9d:73:7e:24:0f:33:6c:63:80:8d:c5:d9:07:d9: ba:9f:12:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQwMjZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFFOUQwNThENjk5OUMy NjhGMTM5NDY3N0FGRTg4MDI0NDA0QjdBQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV6RNOTtqAO2pfEK0aXKsRtc0iFjz8uGRWry3C84x4HGbdqDwh fjm44ePTfQxr2VPQerd3bjDPUUPMbj8mmA79Bj2MKYM/BJtTlS0EuGwEOIdkl29F FodnzOcJvNX4AvJMAAxz1D/qadm57c07MpZ2FrXjr4KloernOOoWoenth3u3qUjJ US65YTBKdsz/tzcPnkrh+tct5hOnEtLE55fZAbILNCzgfiZS3zKxIbOd9R/cfob6 D/GUwyoB3IjXHvhHfewr7qbjmbO0C/pKSSxwDjQbBoXWU+KpAYm1d0hqdSKoFrQI aW02qK5SG36hp2J5wqvpO9QSKfy3X2SkRZkLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrp0FjWmZwmjxOUZ3r+iAJEBLerAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3JwMEZqV21ad21qeE9VWjNyLWlBSkVCTGVyQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9VwAwDQYJKoZIhvcNAQELBQADggEBACUH7K/C0dfi1A/GhNeBcxouJj5M VtcMHHzOikc3xmX0NouUB9bilmPdrYOeTqEYDEh7SVWi+leTIQkz8BS/Fj7MFgRs xG0F9DIUhcvu34SVOIO7BH7YTOKKcbB0zsnqVvcG9o2hUWILsbshWXNSfpaPvZ1C xu4a7ZMUo5wtIUuiPCDJwsWBKjCQp2tmXqD26tkiQNKYsELBgMOHJn+sYW9XXLVH pACGYWjsxNtLDdtjep02JNNjCNuzjciBdjZM0e7xmU3VeoN5t18MaztNvLdkaiTL Hy/fMotcP3cvcdKlGBsSH4mXzHZNkXP6LZudc34kDzNsY4CNxdkH2bqfErQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:28 2025 by rpki-client