$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/0dTu7i0QE1MmdwBmZwQht6Ip4vs.roa File: 0dTu7i0QE1MmdwBmZwQht6Ip4vs.roa (raw, json) Hash identifier: brxXRnxehaTeJPUvvAv2aJPjGavcr32h8KRoz9Bm7Gw= Subject key identifier: D1:D4:EE:EE:2D:10:13:53:26:77:00:66:67:04:21:B7:A2:29:E2:FB Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 3E Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/0dTu7i0QE1MmdwBmZwQht6Ip4vs.roa Signing time: Tue 01 Jul 2025 01:31:48 +0000 ROA not before: Tue 01 Jul 2025 01:31:48 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 24259 IP address blocks: 123.255.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Jul 1 01:31:48 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=D1D4EEEE2D10135326770066670421B7A229E2FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:a9:51:22:5b:97:4a:04:f4:91:b6:9c:8e: d1:09:28:35:60:f8:b2:61:f0:49:b5:5d:ee:d3:c8: 7b:93:31:ca:fe:4e:76:77:c4:f2:43:95:28:2c:9d: 10:0e:f3:33:76:4e:3f:38:97:9e:b2:09:6b:09:1d: 37:a0:06:4d:3b:58:6a:c0:6d:d7:e7:16:45:fe:c5: c0:90:68:6c:23:0d:cf:a8:63:93:4c:43:44:94:1a: 80:7f:d9:bc:4f:45:58:cc:fc:16:62:51:72:4f:a1: 1f:26:ab:75:a2:4c:b1:c9:ef:51:6c:28:a1:9c:ac: 65:09:0a:c3:6d:1f:c8:5e:a9:4f:d6:f1:f1:c2:69: a9:9f:2c:f4:d9:8d:89:03:cd:77:7c:3e:23:15:93: 46:0a:df:d7:e2:08:84:c1:eb:e5:07:c0:d0:dc:59: 73:6e:0e:58:ff:6c:15:cf:9d:57:ad:f0:b8:18:6a: c8:97:7f:e5:a9:96:64:7c:2e:c9:9d:c0:24:31:0e: 9e:e5:ef:0b:6d:5d:c6:c4:80:37:ed:bf:f4:ef:aa: 77:78:04:01:05:62:c8:be:37:6d:e8:6a:f7:b6:6e: dd:ff:52:b6:85:b6:d7:4f:4a:49:52:bf:28:de:e3: 28:5b:0b:cc:65:4a:76:08:f4:05:5a:13:ef:46:dc: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D4:EE:EE:2D:10:13:53:26:77:00:66:67:04:21:B7:A2:29:E2:FB X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/0dTu7i0QE1MmdwBmZwQht6Ip4vs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.255.232.0/21 Signature Algorithm: sha256WithRSAEncryption 04:e4:68:e6:22:ee:80:d3:45:e6:ac:23:9b:c0:f3:29:aa:e2: 2c:33:7d:a8:25:ab:4d:68:58:e7:1e:de:23:97:e9:07:55:8f: 1d:68:78:07:49:63:63:99:f0:8b:70:4e:d5:2a:13:36:f2:03: 59:69:d7:bc:88:47:b4:98:53:5a:6d:bb:41:be:c8:4e:dd:74: 4c:67:ba:7c:c5:8e:59:49:09:b6:96:94:22:03:cc:f4:52:3d: f1:8b:75:66:63:82:df:23:3d:50:4e:25:54:fb:ef:d6:67:fd: 80:5c:32:07:fb:cd:d1:cb:ae:72:95:7f:46:bf:eb:82:1b:5f: 53:e9:95:51:87:d0:83:de:46:42:7b:3c:f0:ca:12:a1:09:8e: 43:cb:6c:4b:8e:d5:96:45:88:08:4b:6f:2e:59:9a:0e:b3:b0: 40:e2:3f:5e:c6:2e:f9:15:7a:92:d2:98:d2:51:3a:0e:3e:96: bc:8b:33:2e:d1:c3:eb:82:f3:98:0f:47:85:bc:3a:5d:ba:2f: 6f:c1:44:d8:ae:f9:d7:e7:7d:6c:82:53:4c:14:21:42:51:ec: a6:52:70:c6:be:12:10:60:89:c6:bc:39:f8:0a:52:d2:1c:85: 6c:f8:2b:84:74:d0:24:ed:7f:cc:4c:b9:be:a8:d8:1d:43:e8: 5f:98:a8:b0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI1MDcwMTAx MzE0OFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRDFENEVFRUUyRDEwMTM1 MzI2NzcwMDY2NjcwNDIxQjdBMjI5RTJGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMxYqVEiW5dKBPSRtpyO0QkoNWD4smHwSbVd7tPIe5Mxyv5OdnfE 8kOVKCydEA7zM3ZOPziXnrIJawkdN6AGTTtYasBt1+cWRf7FwJBobCMNz6hjk0xD RJQagH/ZvE9FWMz8FmJRck+hHyardaJMscnvUWwooZysZQkKw20fyF6pT9bx8cJp qZ8s9NmNiQPNd3w+IxWTRgrf1+IIhMHr5QfA0NxZc24OWP9sFc+dV63wuBhqyJd/ 5amWZHwuyZ3AJDEOnuXvC21dxsSAN+2/9O+qd3gEAQViyL43behq97Zu3f9StoW2 109KSVK/KN7jKFsLzGVKdgj0BVoT70bcZF8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTR1O7uLRATUyZ3AGZnBCG3oini+zAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvMGRUdTdpMFFFMU1tZHdCbVp3UWh0NklwNHZzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3v/6DANBgkqhkiG9w0BAQsFAAOCAQEABORo5iLugNNF5qwjm8DzKariLDN9 qCWrTWhY5x7eI5fpB1WPHWh4B0ljY5nwi3BO1SoTNvIDWWnXvIhHtJhTWm27Qb7I Tt10TGe6fMWOWUkJtpaUIgPM9FI98Yt1ZmOC3yM9UE4lVPvv1mf9gFwyB/vN0cuu cpV/Rr/rghtfU+mVUYfQg95GQns88MoSoQmOQ8tsS47VlkWICEtvLlmaDrOwQOI/ XsYu+RV6ktKY0lE6Dj6WvIszLtHD64LzmA9Hhbw6Xbovb8FE2K751+d9bIJTTBQh QlHsplJwxr4SEGCJxrw5+ApS0hyFbPgrhHTQJO1/zEy5vqjYHUPoX5iosA== -----END CERTIFICATE-----Generated at Thu Nov 6 04:35:44 2025 by rpki-client