$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/DNGsxgJcYAF1GoooEJH5DhK4XVk.roa File: DNGsxgJcYAF1GoooEJH5DhK4XVk.roa (raw, json) Hash identifier: TiJfYy1mOUG4j6zN8EP5xtYONf+2Jh7gIA1xUqIc7EY= Subject key identifier: 0C:D1:AC:C6:02:5C:60:01:75:1A:8A:28:10:91:F9:0E:12:B8:5D:59 Certificate issuer: /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05 Certificate serial: 2D Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/DNGsxgJcYAF1GoooEJH5DhK4XVk.roa Signing time: Mon 01 Sep 2025 01:34:21 +0000 ROA not before: Mon 01 Sep 2025 01:34:21 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 63800 IP address blocks: 103.131.151.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 15:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05 Validity Not Before: Sep 1 01:34:21 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=0CD1ACC6025C6001751A8A281091F90E12B85D59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f1:45:0d:a0:92:15:4d:72:58:8b:86:66:05: c4:0f:3f:74:cc:18:c9:9a:3a:15:af:8d:b2:49:cd: 42:7f:60:ad:02:94:f8:84:9c:ff:c1:8d:ce:de:94: 6b:4b:8a:c4:be:6c:bf:1a:28:e1:30:59:3b:1a:c4: 5f:35:61:50:37:6f:80:c9:9d:19:8b:2a:e3:2f:18: 0c:58:7f:45:8d:cd:c7:de:9a:dd:94:9e:23:56:33: 02:63:f9:8d:2c:a9:8f:24:ee:8c:0c:36:e2:5d:96: a6:ef:89:fb:04:28:40:63:e2:e8:d2:67:3e:a7:ee: f7:64:46:0f:12:9a:ee:1d:58:04:92:e5:4e:6e:93: 32:57:20:bb:5b:c8:a1:ca:16:46:8f:82:66:83:6b: d3:36:16:fc:9b:55:41:88:01:cc:a3:01:47:c9:58: 2f:34:4b:b9:a1:2b:1a:fe:f5:7b:07:b8:65:17:17: eb:f6:a0:eb:83:bb:97:27:85:69:73:99:09:c9:97: eb:70:8c:8c:94:53:43:89:ea:9b:64:57:c8:14:a1: 60:25:ed:f5:f3:40:4a:7e:0b:dc:85:06:bf:b3:54: 74:42:8b:0c:6d:5d:e9:f9:4e:0d:6d:41:51:cd:43: 0f:e4:c5:12:df:c3:07:59:ea:dc:04:f2:a0:21:ed: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D1:AC:C6:02:5C:60:01:75:1A:8A:28:10:91:F9:0E:12:B8:5D:59 X509v3 Authority Key Identifier: keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/DNGsxgJcYAF1GoooEJH5DhK4XVk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.151.0/24 Signature Algorithm: sha256WithRSAEncryption 11:d3:05:52:35:29:9d:5b:48:47:c8:49:45:b5:9e:f6:a4:aa: c6:40:f0:22:0d:80:85:13:c5:3f:22:cc:83:0e:52:b2:1d:24: e6:a5:ac:51:1b:39:b6:39:ab:f9:e7:c2:e7:56:1d:e4:cd:82: b9:09:2b:55:e2:ed:f5:00:13:58:30:b1:2d:29:1a:5c:a2:15: 32:d5:38:c7:05:be:f5:49:c4:81:bb:05:0d:3c:f4:d0:fd:19: 73:e1:d1:ea:d6:ba:ff:0b:4e:64:85:2e:93:72:78:93:a0:e9: 54:7c:7b:be:f0:23:90:1b:35:67:b9:b2:b6:74:69:8f:82:b9: 23:89:5a:11:7d:59:00:63:49:6d:f0:f2:60:70:0c:51:77:e8: dc:9f:06:67:4f:0c:8f:c2:cf:11:27:1e:92:f9:1b:e2:51:ea: e0:00:7b:e0:3e:69:47:66:ae:ef:43:25:95:f5:0c:3a:32:48: bd:23:e9:f2:53:d7:e8:16:a4:13:9d:57:cd:7b:1b:2e:6e:32: 28:4d:47:62:c7:8c:37:98:2a:c7:b0:1b:1a:91:32:16:12:87: ae:47:d1:d4:f5:47:36:ee:24:9b:7d:c1:2e:ae:4c:70:33:24: a5:10:0a:2a:10:14:59:78:59:c0:1b:fe:5d:bd:3f:9e:29:ae: ae:98:ee:b9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNTBF ODI5NzVEODI5MUM0NEFBN0U1M0VBMTUxMjRGMEVFQTIwQjA1MB4XDTI1MDkwMTAx MzQyMVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMENEMUFDQzYwMjVDNjAw MTc1MUE4QTI4MTA5MUY5MEUxMkI4NUQ1OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPDxRQ2gkhVNcliLhmYFxA8/dMwYyZo6Fa+NsknNQn9grQKU+ISc /8GNzt6Ua0uKxL5svxoo4TBZOxrEXzVhUDdvgMmdGYsq4y8YDFh/RY3Nx96a3ZSe I1YzAmP5jSypjyTujAw24l2Wpu+J+wQoQGPi6NJnPqfu92RGDxKa7h1YBJLlTm6T Mlcgu1vIocoWRo+CZoNr0zYW/JtVQYgBzKMBR8lYLzRLuaErGv71ewe4ZRcX6/ag 64O7lyeFaXOZCcmX63CMjJRTQ4nqm2RXyBShYCXt9fNASn4L3IUGv7NUdEKLDG1d 6flODW1BUc1DD+TFEt/DB1nq3ATyoCHt8f0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBQM0azGAlxgAXUaiigQkfkOErhdWTAfBgNVHSMEGDAWgBQlDoKXXYKRxEqn5T6h USTw7qILBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMTQvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4TzZpQ3dVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4 TzZpQ3dVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjE0L0ROR3N4Z0pjWUFGMUdvb29FSkg1RGhLNFhWay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABng5cwDQYJKoZIhvcNAQELBQADggEBABHTBVI1KZ1bSEfISUW1nvak qsZA8CINgIUTxT8izIMOUrIdJOalrFEbObY5q/nnwudWHeTNgrkJK1Xi7fUAE1gw sS0pGlyiFTLVOMcFvvVJxIG7BQ089ND9GXPh0erWuv8LTmSFLpNyeJOg6VR8e77w I5AbNWe5srZ0aY+CuSOJWhF9WQBjSW3w8mBwDFF36NyfBmdPDI/CzxEnHpL5G+JR 6uAAe+A+aUdmru9DJZX1DDoySL0j6fJT1+gWpBOdV817Gy5uMihNR2LHjDeYKsew GxqRMhYSh65H0dT1RzbuJJt9wS6uTHAzJKUQCioQFFl4WcAb/l29P54prq6Y7rk= -----END CERTIFICATE-----Generated at Tue Sep 9 17:42:20 2025 by rpki-client