$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XpGzkb7iDnnI2j_l0Ad6ZMjPmyc.roa File: XpGzkb7iDnnI2j_l0Ad6ZMjPmyc.roa (raw, json) Hash identifier: Q8PCYj9p6uiFCafymVpqI0OcgmEleSM4hXV9IMoENcg= Subject key identifier: 5E:91:B3:91:BE:E2:0E:79:C8:DA:3F:E5:D0:07:7A:64:C8:CF:9B:27 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0453 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XpGzkb7iDnnI2j_l0Ad6ZMjPmyc.roa Signing time: Mon 01 Sep 2025 01:34:00 +0000 ROA not before: Mon 01 Sep 2025 01:34:00 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 10013 IP address blocks: 27.133.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 05:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:34:00 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=5E91B391BEE20E79C8DA3FE5D0077A64C8CF9B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:34:ca:98:46:78:d4:57:80:6c:f4:8e:2b: 9f:40:a1:0f:bc:25:47:ba:23:b3:6c:b4:db:f2:98: 33:09:cd:6f:de:d8:16:96:cf:80:2e:51:19:63:01: 7f:a8:02:49:1a:5d:98:40:c0:2b:8a:92:e3:80:c0: fa:b6:f5:71:d3:27:ed:1f:45:c7:4a:56:f4:43:b0: 8c:f3:64:63:bb:3f:36:f4:90:2c:5b:c1:f4:c2:15: 50:d4:3d:95:4a:45:fa:8f:a6:d8:d2:a3:fb:9b:69: 53:c3:01:06:a7:89:e4:60:10:80:5d:72:f9:71:38: 4e:5d:86:1c:af:b4:95:33:05:30:45:97:d0:09:f5: 17:ca:ae:2d:0f:84:b8:e7:11:1c:91:ed:64:d8:ab: c6:99:76:9a:de:59:5a:40:0b:f9:6f:d5:91:e0:3c: a8:ab:14:76:91:19:f5:86:05:2b:17:6d:42:e4:97: c0:65:f6:a8:ed:82:8d:f4:41:a5:83:a4:40:db:5d: a5:3e:fb:14:b4:76:1b:12:22:a3:11:71:30:4b:de: e2:cf:7a:68:08:b5:c3:9d:e7:eb:d7:7a:5b:2f:05: 20:34:5b:c2:cf:08:15:74:0c:43:29:81:bd:ac:8a: eb:5a:76:e3:9e:50:1e:cb:bf:24:87:1a:b5:1e:07: 11:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:91:B3:91:BE:E2:0E:79:C8:DA:3F:E5:D0:07:7A:64:C8:CF:9B:27 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XpGzkb7iDnnI2j_l0Ad6ZMjPmyc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.133.16.0/21 Signature Algorithm: sha256WithRSAEncryption 3e:d2:8a:3e:3f:a7:a4:d1:a1:3d:34:14:94:e1:f6:d7:b7:3f: 8a:73:36:dd:21:11:da:98:d1:41:a4:7f:8f:b6:e9:56:e6:91: 5a:6c:14:da:37:6d:a7:3c:d2:50:49:51:3c:a9:49:21:f0:60: a0:4e:53:93:3a:ee:76:eb:53:51:48:9a:55:c7:a2:ce:15:f0: 4a:df:45:15:81:b2:07:e0:64:b3:a5:96:ac:55:42:1b:2f:0c: b2:91:d5:47:e6:c6:11:89:88:6b:8c:60:58:58:6b:75:76:08: a7:cf:f6:e4:5f:69:64:08:d5:df:2c:aa:45:77:3d:4f:2b:e8: 30:38:d4:4e:3d:33:57:a0:e3:09:78:3e:b7:1b:47:c5:9e:d9: c9:8e:58:52:24:d0:78:86:41:a1:6c:b1:16:c3:78:00:66:71: 86:01:c0:54:81:3c:3e:c5:77:a3:ed:9b:4b:6d:a0:3d:10:78: a3:ae:9c:51:e7:89:60:8f:d4:00:be:ee:9e:ad:dc:01:87:97: 13:83:3f:47:b1:e6:20:26:74:1d:2e:f9:66:76:5a:df:d8:ad: 92:bc:a7:31:7a:25:a6:c4:bc:f3:9b:81:07:f9:09:cf:e9:9d: 74:cb:9e:ba:f4:10:d5:81:64:dd:d9:7d:45:08:91:77:4c:30: ce:51:83:41 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTM0MDBaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFOTFCMzkxQkVFMjBF NzlDOERBM0ZFNUQwMDc3QTY0QzhDRjlCMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCVDTKmEZ41FeAbPSOK59AoQ+8JUe6I7NstNvymDMJzW/e2BaW z4AuURljAX+oAkkaXZhAwCuKkuOAwPq29XHTJ+0fRcdKVvRDsIzzZGO7Pzb0kCxb wfTCFVDUPZVKRfqPptjSo/ubaVPDAQanieRgEIBdcvlxOE5dhhyvtJUzBTBFl9AJ 9RfKri0PhLjnERyR7WTYq8aZdpreWVpAC/lv1ZHgPKirFHaRGfWGBSsXbULkl8Bl 9qjtgo30QaWDpEDbXaU++xS0dhsSIqMRcTBL3uLPemgItcOd5+vXelsvBSA0W8LP CBV0DEMpgb2siutaduOeUB7LvySHGrUeBxFJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXpGzkb7iDnnI2j/l0Ad6ZMjPmycwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1hwR3prYjdpRG5uSTJqX2wwQWQ2Wk1qUG15Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMbhRAwDQYJKoZIhvcNAQELBQADggEBAD7Sij4/p6TRoT00FJTh9te3P4pz Nt0hEdqY0UGkf4+26VbmkVpsFNo3bac80lBJUTypSSHwYKBOU5M67nbrU1FImlXH os4V8ErfRRWBsgfgZLOllqxVQhsvDLKR1UfmxhGJiGuMYFhYa3V2CKfP9uRfaWQI 1d8sqkV3PU8r6DA41E49M1eg4wl4PrcbR8We2cmOWFIk0HiGQaFssRbDeABmcYYB wFSBPD7Fd6Ptm0ttoD0QeKOunFHniWCP1AC+7p6t3AGHlxODP0ex5iAmdB0u+WZ2 Wt/YrZK8pzF6JabEvPObgQf5Cc/pnXTLnrr0ENWBZN3ZfUUIkXdMMM5Rg0E= -----END CERTIFICATE-----Generated at Wed Sep 10 09:12:38 2025 by rpki-client