$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VafWKiHVm6WnslVF3X3Q-V9p3uc.roa File: VafWKiHVm6WnslVF3X3Q-V9p3uc.roa (raw, json) Hash identifier: WU428hA64S7zDP11R+n9SOfRwD+1DEwF0gBCXB3e9kc= Subject key identifier: 55:A7:D6:2A:21:D5:9B:A5:A7:B2:55:45:DD:7D:D0:F9:5F:69:DE:E7 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0451 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VafWKiHVm6WnslVF3X3Q-V9p3uc.roa Signing time: Mon 01 Sep 2025 01:34:00 +0000 ROA not before: Mon 01 Sep 2025 01:34:00 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 10013 IP address blocks: 27.133.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 05:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:34:00 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=55A7D62A21D59BA5A7B25545DD7DD0F95F69DEE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:28:ef:fb:02:76:2f:58:21:b7:47:d8:d1: 4a:6d:13:1d:76:52:3e:e4:b2:1f:c9:e9:a6:e1:7c: ff:fd:85:d7:b4:33:6f:41:4b:ec:ff:b5:70:1e:89: a5:e5:6c:b5:a5:db:40:b2:ad:aa:78:25:d8:7a:fc: d9:d4:fe:a6:c6:42:d8:c6:7c:0b:48:c4:99:6d:72: ca:ff:72:76:fe:d5:a2:85:8a:f6:eb:d5:14:a7:1c: 50:4f:2f:2f:7a:70:c4:7d:f1:3f:65:d3:d9:e1:19: 83:ef:6d:dd:8e:47:f4:1a:b1:c2:8a:67:94:d4:28: 1b:26:d8:ec:3a:67:44:3c:6b:94:db:63:4a:c4:63: ae:ce:b0:d3:f1:8a:10:1d:bf:5d:12:66:c9:1b:3c: 34:07:c7:47:3f:85:ba:12:36:1b:f6:d9:2b:a2:f9: 35:e5:c3:54:ec:9f:a8:bc:2c:17:fc:09:96:ec:8f: eb:f4:0b:c0:f0:9b:16:00:95:0e:c7:87:97:f3:2a: 6d:c3:95:56:07:17:b6:8b:c7:d5:b0:df:a7:01:a6: d0:a3:50:11:8d:81:54:88:a6:56:63:9f:f0:d0:c7: 78:5f:09:da:49:6b:08:0c:72:fb:b6:65:f4:60:d4: 87:44:bc:9f:dc:c3:99:d2:58:ed:9e:a7:de:71:b2: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A7:D6:2A:21:D5:9B:A5:A7:B2:55:45:DD:7D:D0:F9:5F:69:DE:E7 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VafWKiHVm6WnslVF3X3Q-V9p3uc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.133.0.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:55:bb:5b:64:2f:41:43:79:25:bb:89:ac:0e:b0:01:97:df: 18:c2:e2:7c:cc:9c:22:60:4b:42:58:57:56:02:df:02:10:c4: af:71:38:0d:cc:86:9b:65:9f:de:e9:d2:f9:c8:d2:be:99:e2: 17:08:96:e6:c6:6c:70:c2:44:23:96:19:6a:86:a5:dc:dc:88: ee:06:67:01:73:5c:e9:d6:85:5d:ff:01:90:c3:d4:76:03:6d: a7:a5:fe:f0:eb:b6:55:5c:5c:16:83:10:23:34:02:6f:9f:90: e6:a4:33:a9:33:35:75:eb:c2:44:53:7c:e3:0f:7e:56:5a:05: b1:85:15:14:96:c9:ba:d0:98:3d:ee:0e:d3:fc:41:bd:18:dd: ab:6f:11:63:7d:41:15:20:75:7a:45:51:9d:59:95:6a:73:03: 05:32:3c:2b:6e:41:8b:7f:a2:da:48:35:8f:27:43:05:e9:28: 8d:24:6a:71:9e:e0:c6:e2:37:17:06:cb:0c:ce:f9:77:7e:cc: 50:55:60:b3:4f:d4:19:0a:09:fa:e5:05:c0:df:f6:e7:3b:32: f3:83:6e:3e:aa:63:4b:86:6f:55:c5:12:9d:f0:a9:30:7e:ab: 31:81:33:54:36:97:e7:40:5c:b9:45:1a:a3:4e:ea:22:7f:2d: 27:39:db:4c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTM0MDBaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU1QTdENjJBMjFENTlC QTVBN0IyNTU0NUREN0REMEY5NUY2OURFRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQConCjv+wJ2L1ght0fY0UptEx12Uj7ksh/J6abhfP/9hde0M29B S+z/tXAeiaXlbLWl20Cyrap4Jdh6/NnU/qbGQtjGfAtIxJltcsr/cnb+1aKFivbr 1RSnHFBPLy96cMR98T9l09nhGYPvbd2OR/QascKKZ5TUKBsm2Ow6Z0Q8a5TbY0rE Y67OsNPxihAdv10SZskbPDQHx0c/hboSNhv22Sui+TXlw1Tsn6i8LBf8CZbsj+v0 C8DwmxYAlQ7Hh5fzKm3DlVYHF7aLx9Ww36cBptCjUBGNgVSIplZjn/DQx3hfCdpJ awgMcvu2ZfRg1IdEvJ/cw5nSWO2ep95xslXpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVafWKiHVm6WnslVF3X3Q+V9p3ucwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1ZhZldLaUhWbTZXbnNsVkYzWDNRLVY5cDN1Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMbhQAwDQYJKoZIhvcNAQELBQADggEBAFxVu1tkL0FDeSW7iawOsAGX3xjC 4nzMnCJgS0JYV1YC3wIQxK9xOA3Mhptln97p0vnI0r6Z4hcIlubGbHDCRCOWGWqG pdzciO4GZwFzXOnWhV3/AZDD1HYDbael/vDrtlVcXBaDECM0Am+fkOakM6kzNXXr wkRTfOMPflZaBbGFFRSWybrQmD3uDtP8Qb0Y3atvEWN9QRUgdXpFUZ1ZlWpzAwUy PCtuQYt/otpINY8nQwXpKI0kanGe4MbiNxcGywzO+Xd+zFBVYLNP1BkKCfrlBcDf 9uc7MvODbj6qY0uGb1XFEp3wqTB+qzGBM1Q2l+dAXLlFGqNO6iJ/LSc520w= -----END CERTIFICATE-----Generated at Wed Sep 10 09:12:41 2025 by rpki-client