$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OTfq9K-BcKFS6o838YwPZPO53CA.roa File: OTfq9K-BcKFS6o838YwPZPO53CA.roa (raw, json) Hash identifier: qAV9Osoi9Wy2CpeP5vnJaCw71QAC0qjht8R428HeblU= Subject key identifier: 39:37:EA:F4:AF:81:70:A1:52:EA:8F:37:F1:8C:0F:64:F3:B9:DC:20 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 045D Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OTfq9K-BcKFS6o838YwPZPO53CA.roa Signing time: Mon 01 Sep 2025 01:34:07 +0000 ROA not before: Mon 01 Sep 2025 01:34:07 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 10013 IP address blocks: 49.242.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 05:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:34:07 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=3937EAF4AF8170A152EA8F37F18C0F64F3B9DC20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:df:76:59:7e:96:17:fc:ee:75:5a:cb:0e: a9:9f:cf:ae:06:ce:b7:2f:2b:3e:d0:90:51:89:7d: c8:27:9e:0d:3a:e8:67:e4:48:39:23:ab:36:8e:c4: 52:fc:4e:82:0a:01:72:25:77:1a:bd:84:51:ad:2a: 00:14:e7:4a:fe:39:9f:02:e5:7c:49:f4:ec:2c:aa: ae:78:5e:98:d3:8d:cd:60:7f:ae:2c:05:99:17:41: 10:be:b0:67:7c:31:ae:7f:48:1a:53:2c:d0:25:dc: 2f:c2:87:12:9e:a7:04:d9:29:40:09:4a:4b:92:bb: 3a:6e:89:33:d1:9b:17:d9:cb:26:a5:ab:3e:14:2d: f8:1e:2c:82:5f:5b:be:e1:c5:2b:97:d7:7e:f7:83: 04:66:28:84:d1:e7:02:dd:e7:f5:67:12:04:5f:91: 94:17:30:49:4c:06:f7:6a:f6:b4:dd:f7:48:16:10: 6d:cf:5e:7c:43:b5:8d:bf:6e:88:6e:da:b3:71:17: e5:69:40:9f:1c:44:b2:6e:60:8a:cc:f1:a5:f4:55: c7:7f:f6:f1:48:ae:94:4c:cc:58:e4:ea:86:fd:83: 9a:84:0b:7b:70:16:40:9a:e5:1f:d7:e3:a1:1b:ba: ca:b2:5c:33:76:25:d0:9e:bc:57:c6:71:10:7d:38: f0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:37:EA:F4:AF:81:70:A1:52:EA:8F:37:F1:8C:0F:64:F3:B9:DC:20 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OTfq9K-BcKFS6o838YwPZPO53CA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.242.0.0/18 Signature Algorithm: sha256WithRSAEncryption 23:32:83:ea:ad:a8:23:e0:2d:ab:d7:b5:6a:05:9a:da:fb:2e: 66:d1:d7:ee:c4:b3:41:a2:da:67:a4:47:25:71:9b:09:3d:3c: df:2d:72:18:41:44:07:a7:10:0b:d6:bd:ff:e7:a7:c3:74:73: be:74:da:78:fa:fa:05:c9:f3:6d:ce:48:3d:c9:da:1e:cd:f6: 69:d3:ee:c4:fb:06:02:3d:89:db:e9:ec:2c:84:7b:bc:be:67: 36:b6:46:d2:97:c4:a5:46:83:72:70:fa:e2:dd:ca:1f:98:85: 8a:7f:25:a7:48:87:dc:bc:b0:15:93:1d:71:a9:03:c7:30:1f: 9f:fc:82:4b:83:98:0f:4a:e9:73:d9:bf:ac:94:4e:e1:b8:d0: 73:56:2f:1f:fe:ff:84:27:ab:6f:fb:17:60:70:f5:16:d2:1a: 95:7c:2d:e8:7f:da:ef:c0:20:a5:b9:23:f4:c8:d8:fa:e3:f8: 5f:a9:01:c9:87:9a:9c:4a:e8:36:96:60:f0:9d:07:bc:86:43: 0d:08:3f:2d:63:32:c1:83:b0:30:b3:98:b6:d1:32:26:84:73: 73:4f:91:04:af:d2:c1:c1:5c:99:50:36:98:61:87:24:9a:f4: 97:7c:73:c8:50:d3:b4:40:d4:67:de:b3:0a:a9:0c:88:df:0f: f2:e4:95:c8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTM0MDdaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5MzdFQUY0QUY4MTcw QTE1MkVBOEYzN0YxOEMwRjY0RjNCOURDMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCowd92WX6WF/zudVrLDqmfz64GzrcvKz7QkFGJfcgnng066Gfk SDkjqzaOxFL8ToIKAXIldxq9hFGtKgAU50r+OZ8C5XxJ9Owsqq54XpjTjc1gf64s BZkXQRC+sGd8Ma5/SBpTLNAl3C/ChxKepwTZKUAJSkuSuzpuiTPRmxfZyyalqz4U LfgeLIJfW77hxSuX1373gwRmKITR5wLd5/VnEgRfkZQXMElMBvdq9rTd90gWEG3P XnxDtY2/bohu2rNxF+VpQJ8cRLJuYIrM8aX0Vcd/9vFIrpRMzFjk6ob9g5qEC3tw FkCa5R/X46EbusqyXDN2JdCevFfGcRB9OPDHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOTfq9K+BcKFS6o838YwPZPO53CAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L09UZnE5Sy1CY0tGUzZvODM4WXdQWlBPNTNDQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYx8gAwDQYJKoZIhvcNAQELBQADggEBACMyg+qtqCPgLavXtWoFmtr7LmbR 1+7Es0Gi2mekRyVxmwk9PN8tchhBRAenEAvWvf/np8N0c7502nj6+gXJ823OSD3J 2h7N9mnT7sT7BgI9idvp7CyEe7y+Zza2RtKXxKVGg3Jw+uLdyh+YhYp/JadIh9y8 sBWTHXGpA8cwH5/8gkuDmA9K6XPZv6yUTuG40HNWLx/+/4Qnq2/7F2Bw9RbSGpV8 Leh/2u/AIKW5I/TI2Prj+F+pAcmHmpxK6DaWYPCdB7yGQw0IPy1jMsGDsDCzmLbR MiaEc3NPkQSv0sHBXJlQNphhhySa9Jd8c8hQ07RA1GfeswqpDIjfD/Lklcg= -----END CERTIFICATE-----Generated at Wed Sep 10 09:12:23 2025 by rpki-client