$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xrNjkdgts4hlY5Qxi94xkiMFXCA.roa File: xrNjkdgts4hlY5Qxi94xkiMFXCA.roa (raw, json) Hash identifier: 1VK+/t9oT9rBSElaAD/SeJVKozvTyA0NoLgoA4Z1hlc= Subject key identifier: C6:B3:63:91:D8:2D:B3:88:65:63:94:31:8B:DE:31:92:23:05:5C:20 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0373 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xrNjkdgts4hlY5Qxi94xkiMFXCA.roa Signing time: Thu 01 May 2025 01:33:29 +0000 ROA not before: Thu 01 May 2025 01:33:29 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 122.145.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:29 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=C6B36391D82DB388656394318BDE319223055C20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:18:f4:cc:bb:d2:b7:d9:8f:fa:55:7f:c9: fa:48:eb:37:c2:c1:ac:14:e6:82:55:57:fe:77:a3: 31:1b:af:ff:e0:1f:70:b7:99:25:38:fa:6d:e9:08: bc:04:ad:6a:ac:d3:43:9c:0e:5f:74:1c:d7:b4:ea: 7c:62:41:68:c4:17:68:b2:50:1b:70:73:0c:da:b9: 95:68:c9:13:b4:a9:43:23:a7:79:15:f8:b7:9f:cb: c2:f4:de:e2:a7:f3:73:26:24:9c:b3:c1:3c:61:56: e0:3e:54:ea:58:a9:04:4f:52:5c:cc:0c:b0:d8:75: 63:d8:9b:c0:b3:db:9d:49:4f:29:10:3d:85:d0:5e: 3d:2e:53:c1:6a:08:0e:4a:53:88:63:8a:cc:ca:00: 17:04:19:19:c0:5e:4c:96:66:af:19:6c:47:8e:07: e5:5e:5d:6a:1f:18:b3:94:66:db:ad:46:3b:df:c3: b1:b5:67:17:f8:ef:05:56:42:75:03:0c:cc:e6:71: e6:f0:c7:9f:fa:11:17:01:0b:ea:6e:ea:28:5e:b7: 93:16:d9:8c:ae:a3:67:da:e2:5a:c1:8a:fc:a7:a1: 64:3e:55:38:7e:ba:f3:0e:16:46:7e:44:25:a0:09: e1:71:0c:f1:0a:75:ee:ad:30:ce:0b:6a:89:48:9a: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B3:63:91:D8:2D:B3:88:65:63:94:31:8B:DE:31:92:23:05:5C:20 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xrNjkdgts4hlY5Qxi94xkiMFXCA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.145.40.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:cd:54:64:8c:dd:ee:ca:0e:d4:3e:b8:09:0a:91:36:f1:07: fc:4c:77:db:2e:7f:11:c3:8f:f5:af:61:e1:ea:1c:5e:7e:c5: fc:c0:90:4e:b9:e5:ab:51:9e:0b:ec:2a:7b:ca:c5:0e:2b:a7: 36:9f:a2:71:cc:2c:11:9c:1d:83:49:52:a8:67:05:d0:eb:ba: 1a:aa:01:68:fe:fb:00:b8:a1:83:33:71:a7:1a:f7:a2:2d:89: da:a2:8d:c5:24:ac:e7:36:dd:bc:aa:b9:e7:a9:29:99:4b:2a: 7b:64:94:a9:c0:97:69:c6:23:e4:2c:c8:68:48:a0:99:81:cb: e4:b0:24:f2:c4:22:42:79:2a:aa:8e:6e:ae:ca:55:09:e1:49: 44:50:50:5e:7f:92:cb:b3:fd:05:41:1e:b4:57:5e:8f:a1:d5: d0:03:50:ec:9f:c5:0f:96:b5:4a:a5:11:4f:d7:dd:2c:8f:d0: 2a:e8:37:9b:2c:57:84:1b:15:89:10:42:d1:01:bf:93:4d:4a: 90:47:61:57:29:74:7d:93:40:f2:e7:72:b0:db:24:15:ad:09: 49:19:87:95:86:a7:da:83:ee:7a:93:b4:4a:02:e9:a2:c8:5b: 79:18:12:1e:19:01:e2:c6:7d:6a:26:dd:b1:8b:59:9d:8e:1c: a6:06:7a:85 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMjlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM2QjM2MzkxRDgyREIz ODg2NTYzOTQzMThCREUzMTkyMjMwNTVDMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf3Bj0zLvSt9mP+lV/yfpI6zfCwawU5oJVV/53ozEbr//gH3C3 mSU4+m3pCLwErWqs00OcDl90HNe06nxiQWjEF2iyUBtwcwzauZVoyRO0qUMjp3kV +Lefy8L03uKn83MmJJyzwTxhVuA+VOpYqQRPUlzMDLDYdWPYm8Cz251JTykQPYXQ Xj0uU8FqCA5KU4hjiszKABcEGRnAXkyWZq8ZbEeOB+VeXWofGLOUZtutRjvfw7G1 Zxf47wVWQnUDDMzmcebwx5/6ERcBC+pu6ihet5MW2Yyuo2fa4lrBivynoWQ+VTh+ uvMOFkZ+RCWgCeFxDPEKde6tMM4LaolImndDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxrNjkdgts4hlY5Qxi94xkiMFXCAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3hyTmprZGd0czRobFk1UXhpOTR4a2lNRlhDQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN6kSgwDQYJKoZIhvcNAQELBQADggEBAE/NVGSM3e7KDtQ+uAkKkTbxB/xM d9sufxHDj/WvYeHqHF5+xfzAkE655atRngvsKnvKxQ4rpzafonHMLBGcHYNJUqhn BdDruhqqAWj++wC4oYMzcaca96ItidqijcUkrOc23byqueepKZlLKntklKnAl2nG I+QsyGhIoJmBy+SwJPLEIkJ5KqqObq7KVQnhSURQUF5/ksuz/QVBHrRXXo+h1dAD UOyfxQ+WtUqlEU/X3SyP0CroN5ssV4QbFYkQQtEBv5NNSpBHYVcpdH2TQPLncrDb JBWtCUkZh5WGp9qD7nqTtEoC6aLIW3kYEh4ZAeLGfWom3bGLWZ2OHKYGeoU= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:24 2025 by rpki-client