$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/3eDlGESC4_7I80sIBeRM66L9j4E.roa File: 3eDlGESC4_7I80sIBeRM66L9j4E.roa (raw, json) Hash identifier: 74LU3GtP3z6/BKvFX58o7sX6dplMjocC8aIRDxxYpzc= Subject key identifier: DD:E0:E5:18:44:82:E3:FE:C8:F3:4B:08:05:E4:4C:EB:A2:FD:8F:81 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 044A Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3eDlGESC4_7I80sIBeRM66L9j4E.roa Signing time: Mon 01 Sep 2025 01:33:55 +0000 ROA not before: Mon 01 Sep 2025 01:33:55 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 4686 IP address blocks: 124.255.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 14:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:33:55 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=DDE0E5184482E3FEC8F34B0805E44CEBA2FD8F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:5d:5d:28:7b:09:60:c5:c5:47:00:ac:fc: a3:27:34:40:25:22:bb:f9:3a:8f:7e:85:ca:38:a2: a7:fb:a1:d1:a3:9c:d0:86:45:f8:07:dd:85:33:e0: 72:be:53:93:c5:4c:5a:10:29:d2:9e:97:d5:a1:d1: a0:0c:f9:a0:a6:e0:62:9b:c6:1b:ad:25:24:59:61: ca:51:92:4f:33:ec:0e:76:7a:2e:96:bf:50:71:85: 1e:98:ff:6d:58:5d:83:5a:ae:4c:b8:55:05:db:ea: fe:4b:32:84:c3:cf:af:15:ea:f8:77:4d:2a:31:55: 48:15:4a:b8:a1:86:55:c6:0d:28:3e:b1:ae:38:a5: 31:dd:62:34:61:14:10:c0:7a:71:13:54:31:16:02: 75:fc:72:37:92:9b:7c:6a:c9:0e:77:24:e7:2c:d5: 3a:d1:b2:37:66:fa:21:8a:99:17:1b:77:8a:bb:f6: c3:d2:a4:4b:76:c9:71:05:64:41:4e:d8:d7:71:e4: f1:c5:fe:17:36:cd:b2:7d:7a:8f:68:fc:fa:43:22: bd:2a:35:51:2e:2c:3a:5f:96:e9:90:1e:60:72:89: d5:2e:d7:18:ac:c0:e4:08:82:5f:bd:06:4e:73:57: f8:29:1d:51:66:cc:7d:bd:3c:58:4e:c2:96:b9:1b: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E0:E5:18:44:82:E3:FE:C8:F3:4B:08:05:E4:4C:EB:A2:FD:8F:81 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3eDlGESC4_7I80sIBeRM66L9j4E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.255.208.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:f8:ef:f3:f0:1e:01:db:76:06:31:88:87:62:b8:22:da:aa: 93:cf:cb:f0:fe:9a:f0:6e:1c:9c:4c:03:d3:08:ac:1a:f9:f6: 4b:93:6b:3d:91:a6:39:0c:7d:5a:af:30:82:00:d4:bd:f2:95: a5:52:e3:f0:b4:ee:c6:0b:f8:38:7f:9e:49:e3:f7:71:f1:3e: c1:c3:64:25:2d:30:db:dc:f3:0d:fb:23:d7:20:47:17:d7:b1: 25:7e:e6:03:16:b5:e2:92:31:d7:b2:74:17:b5:b9:88:81:47: e3:8f:7c:3a:bd:fb:70:3d:42:24:ee:f0:90:fa:1d:0f:96:5f: 5d:3a:31:f9:41:d8:06:6c:4b:76:fc:c2:50:56:a5:86:db:49: 2c:60:2d:3e:9b:92:2f:06:ef:4e:59:c2:16:cd:2c:29:42:ac: 1b:57:27:ac:b7:82:3e:6c:e9:0d:f0:d8:ca:ff:2a:e0:61:6f: 05:ae:8a:d9:5c:f9:62:94:91:ed:02:23:7b:cc:16:82:ed:e7: c0:e7:99:e5:ab:f5:dd:62:de:3a:40:b9:8d:7b:86:ed:92:77: ad:f7:4d:1e:70:25:7f:e7:d6:6b:f9:a1:36:5a:a6:47:02:2e: 51:2c:66:04:45:71:7a:03:ff:d5:bf:d1:c0:b4:70:5b:8c:f6: ed:e0:f2:32 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTMzNTVaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERERTBFNTE4NDQ4MkUz RkVDOEYzNEIwODA1RTQ0Q0VCQTJGRDhGODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrq11dKHsJYMXFRwCs/KMnNEAlIrv5Oo9+hco4oqf7odGjnNCG RfgH3YUz4HK+U5PFTFoQKdKel9Wh0aAM+aCm4GKbxhutJSRZYcpRkk8z7A52ei6W v1BxhR6Y/21YXYNarky4VQXb6v5LMoTDz68V6vh3TSoxVUgVSrihhlXGDSg+sa44 pTHdYjRhFBDAenETVDEWAnX8cjeSm3xqyQ53JOcs1TrRsjdm+iGKmRcbd4q79sPS pEt2yXEFZEFO2Ndx5PHF/hc2zbJ9eo9o/PpDIr0qNVEuLDpflumQHmByidUu1xis wOQIgl+9Bk5zV/gpHVFmzH29PFhOwpa5G8o7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3eDlGESC4/7I80sIBeRM66L9j4EwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzNlRGxHRVNDNF83STgwc0lCZVJNNjZMOWo0RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR8/9AwDQYJKoZIhvcNAQELBQADggEBACv47/PwHgHbdgYxiIdiuCLaqpPP y/D+mvBuHJxMA9MIrBr59kuTaz2RpjkMfVqvMIIA1L3ylaVS4/C07sYL+Dh/nknj 93HxPsHDZCUtMNvc8w37I9cgRxfXsSV+5gMWteKSMdeydBe1uYiBR+OPfDq9+3A9 QiTu8JD6HQ+WX106MflB2AZsS3b8wlBWpYbbSSxgLT6bki8G705ZwhbNLClCrBtX J6y3gj5s6Q3w2Mr/KuBhbwWuitlc+WKUke0CI3vMFoLt58DnmeWr9d1i3jpAuY17 hu2Sd633TR5wJX/n1mv5oTZapkcCLlEsZgRFcXoD/9W/0cC0cFuM9u3g8jI= -----END CERTIFICATE-----Generated at Wed Sep 10 15:27:11 2025 by rpki-client