$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yWd5HyjXceNkCLhoNCc7k8-T3AA.roa File: yWd5HyjXceNkCLhoNCc7k8-T3AA.roa (raw, json) Hash identifier: 70zp+uplno/760+1MEbXvWsQkud5AdlVPbLrUWLHmww= Subject key identifier: C9:67:79:1F:28:D7:71:E3:64:08:B8:68:34:27:3B:93:CF:93:DC:00 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0490 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yWd5HyjXceNkCLhoNCc7k8-T3AA.roa Signing time: Wed 01 Oct 2025 01:40:00 +0000 ROA not before: Wed 01 Oct 2025 01:40:00 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10013 IP address blocks: 210.159.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 1 01:40:00 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=C967791F28D771E36408B86834273B93CF93DC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:cf:99:e0:42:d7:5c:d2:07:4f:82:c8:51: 77:9d:7b:9b:a8:20:19:69:dc:4f:78:b5:5b:62:2d: 4b:a4:40:08:53:4c:f4:ab:ae:98:2d:1b:0b:c9:64: c0:64:8c:10:fb:b1:31:80:25:df:31:2e:a8:ac:16: ae:81:74:e7:7f:6f:29:37:14:c1:a0:89:f3:b5:65: 03:88:98:8b:e7:f0:0d:11:3e:44:9f:12:90:b8:b7: 89:c7:44:bf:d7:3f:bf:56:74:8e:b9:57:13:19:53: 9e:9f:52:af:6a:2a:bb:07:fb:20:46:79:71:4d:4d: d9:e5:1b:27:a3:6c:79:75:67:b2:ab:86:96:d7:72: 2d:dd:d7:83:ac:c0:5a:ba:35:60:64:bc:54:cc:e9: 2c:23:91:11:65:ec:d2:2d:39:14:90:69:2d:2a:c7: 25:67:90:10:30:75:1c:5f:61:f4:96:bb:bb:a5:85: b8:2c:02:50:92:fd:ba:71:48:84:8f:5d:fc:8a:56: d4:bd:8b:b3:10:11:ea:91:c1:ec:60:3c:38:de:d2: eb:90:8e:54:2c:61:31:b1:49:cb:d5:ea:3b:ef:b7: c0:b9:55:c2:9f:fd:37:47:b5:f5:30:3f:23:64:47: 9d:e2:b5:82:62:af:85:91:5e:b4:53:8c:b8:83:e7: c8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:79:1F:28:D7:71:E3:64:08:B8:68:34:27:3B:93:CF:93:DC:00 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yWd5HyjXceNkCLhoNCc7k8-T3AA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.159.160.0/20 Signature Algorithm: sha256WithRSAEncryption 8f:cd:4a:a3:c9:37:5a:27:dc:79:07:89:7c:f3:3a:02:a9:7a: 79:2f:d2:6c:a3:dd:de:07:67:2d:27:22:40:e4:1c:25:c6:75: 5c:47:e1:c7:c1:34:45:4d:a9:34:68:67:32:75:71:c4:63:d3: ac:58:03:1b:3d:0a:80:ba:e9:e4:c0:a7:a3:fa:cb:d8:a7:ff: 59:eb:84:dc:37:0d:3c:b8:b7:a2:f9:e2:75:21:20:08:0a:26: e1:2f:ea:e8:83:6b:da:72:22:a9:7a:d8:98:f4:93:b9:fa:94: 1a:02:9f:33:03:96:f6:07:aa:c2:30:ec:fa:24:39:6d:e6:23: dc:e6:fe:ec:8e:fd:25:d6:ba:4b:75:6e:0f:c2:e2:07:e4:62: e3:f2:38:16:6c:90:48:ab:65:48:18:67:fa:31:cc:20:3a:bf: 28:f9:fe:8b:33:fe:1e:16:af:24:be:43:ef:b4:cb:60:b1:56: ec:bd:3e:40:f8:e9:8e:9f:7e:1e:59:77:3b:4f:ee:cb:93:b7: 55:a0:52:80:ea:81:ae:12:9e:66:7c:29:90:19:6c:6f:ff:3c: 6d:fc:c6:5f:2c:97:c4:e5:a8:de:82:97:c7:ca:1a:ee:f0:67: d7:80:bb:c8:ed:33:74:39:14:13:a2:b7:26:68:d7:e0:60:27: 22:8b:ae:b2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw MTQwMDBaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5Njc3OTFGMjhENzcx RTM2NDA4Qjg2ODM0MjczQjkzQ0Y5M0RDMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwLc+Z4ELXXNIHT4LIUXede5uoIBlp3E94tVtiLUukQAhTTPSr rpgtGwvJZMBkjBD7sTGAJd8xLqisFq6BdOd/byk3FMGgifO1ZQOImIvn8A0RPkSf EpC4t4nHRL/XP79WdI65VxMZU56fUq9qKrsH+yBGeXFNTdnlGyejbHl1Z7KrhpbX ci3d14OswFq6NWBkvFTM6SwjkRFl7NItORSQaS0qxyVnkBAwdRxfYfSWu7ulhbgs AlCS/bpxSISPXfyKVtS9i7MQEeqRwexgPDje0uuQjlQsYTGxScvV6jvvt8C5VcKf /TdHtfUwPyNkR53itYJir4WRXrRTjLiD58gBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyWd5HyjXceNkCLhoNCc7k8+T3AAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3lXZDVIeWpYY2VOa0NMaG9OQ2M3azgtVDNBQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATSn6AwDQYJKoZIhvcNAQELBQADggEBAI/NSqPJN1on3HkHiXzzOgKpenkv 0myj3d4HZy0nIkDkHCXGdVxH4cfBNEVNqTRoZzJ1ccRj06xYAxs9CoC66eTAp6P6 y9in/1nrhNw3DTy4t6L54nUhIAgKJuEv6uiDa9pyIql62Jj0k7n6lBoCnzMDlvYH qsIw7PokOW3mI9zm/uyO/SXWukt1bg/C4gfkYuPyOBZskEirZUgYZ/oxzCA6vyj5 /osz/h4WryS+Q++0y2CxVuy9PkD46Y6ffh5ZdztP7suTt1WgUoDqga4SnmZ8KZAZ bG//PG38xl8sl8TlqN6Cl8fKGu7wZ9eAu8jtM3Q5FBOityZo1+BgJyKLrrI= -----END CERTIFICATE-----Generated at Wed Nov 5 20:21:55 2025 by rpki-client