$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/aiSlkD75Lpc2yCdjDfJBOWzA8os.roa File: aiSlkD75Lpc2yCdjDfJBOWzA8os.roa (raw, json) Hash identifier: /BEswYDe3cjv22G3uCj/N31fDxR9iwFtXJWwtkk9x6M= Subject key identifier: 6A:24:A5:90:3E:F9:2E:97:36:C8:27:63:0D:F2:41:39:6C:C0:F2:8B Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0458 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/aiSlkD75Lpc2yCdjDfJBOWzA8os.roa Signing time: Mon 01 Sep 2025 01:34:03 +0000 ROA not before: Mon 01 Sep 2025 01:34:03 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 10013 IP address blocks: 27.135.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 05:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:34:03 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=6A24A5903EF92E9736C827630DF241396CC0F28B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:21:fc:0e:ff:a9:39:93:6e:05:16:c9:f9: 38:0d:ea:79:ab:d2:5d:5b:0a:ce:3b:d2:cd:de:1b: d8:c2:07:ff:f2:45:d3:e0:2e:69:18:d1:9d:c1:ac: 4d:7f:f1:47:a5:ce:71:75:8a:30:32:26:62:bd:b3: eb:52:62:bc:e1:ec:ef:eb:c8:37:2a:2d:fe:52:9c: a1:45:fe:61:81:ce:a8:71:a2:30:a6:cf:25:12:ec: de:12:08:f4:5c:71:a9:72:78:9e:18:b4:61:a3:51: e7:63:8d:f3:cc:bb:4c:94:0b:55:21:d4:8e:fe:be: 4b:da:6e:43:bc:60:c0:76:f8:92:d7:82:aa:5b:ce: f6:46:48:cf:7e:c6:65:c6:cb:7a:02:d2:e3:d7:d9: 8e:fb:65:8f:8e:b1:c2:94:90:2c:84:fc:d2:56:06: f4:80:b9:73:19:39:96:8a:56:e4:9a:1b:c8:74:84: a4:08:38:10:fe:f7:bd:4e:f8:e3:a9:8f:53:8d:6b: 7c:9b:1e:ca:e5:9d:a1:bc:00:bf:a7:95:d2:5a:97: a0:b6:a1:65:fd:8a:13:e7:5e:04:55:cb:e5:2b:16: b5:fd:74:e7:4b:f3:af:1d:f2:6e:d1:84:1a:32:42: 59:79:65:c6:ab:f5:9c:68:eb:16:83:08:a6:8a:70: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:24:A5:90:3E:F9:2E:97:36:C8:27:63:0D:F2:41:39:6C:C0:F2:8B X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/aiSlkD75Lpc2yCdjDfJBOWzA8os.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.135.74.0/23 Signature Algorithm: sha256WithRSAEncryption 06:0e:3a:f3:28:a8:5b:58:ee:47:e8:5c:28:44:89:ea:8f:59: e8:95:78:78:c8:64:fa:77:88:0f:f2:bb:15:c1:34:14:d6:a6: 3f:5a:0b:38:f3:e2:2c:40:d1:c9:6b:4c:1f:a5:b2:b6:e1:6d: 45:87:06:34:df:98:09:f2:a4:60:c0:e7:8b:65:36:4b:3a:73: a5:68:ca:41:3b:e9:88:8e:0d:da:95:9d:9d:82:bb:d6:60:ec: 9b:f5:14:9d:f1:2a:85:d4:00:c1:8d:0b:ec:e5:84:8f:da:78: 18:f6:da:3f:79:a0:cc:bf:7c:06:df:8c:a7:d3:54:39:f3:11: e5:1e:0c:69:41:49:cb:04:87:59:50:fa:21:9c:fe:c2:d0:e2: e1:2e:e9:d1:8f:4b:00:66:22:9e:63:23:99:63:f8:b3:d8:5b: 96:22:09:ec:93:08:aa:96:e4:39:06:2e:a1:0d:77:37:bf:0f: a8:7f:b7:5d:cc:44:e4:8f:78:fc:60:75:90:f7:50:e6:28:4d: 7f:ba:0f:f4:54:b6:82:10:ce:95:14:ed:7e:a8:eb:e1:2f:f2: 9a:e2:49:fd:52:2b:f0:c9:51:7b:c9:45:c5:38:ea:55:03:71: 19:77:72:b2:6f:1a:41:36:8b:a7:9b:93:39:8f:f7:df:35:54: a5:5e:28:55 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTM0MDNaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZBMjRBNTkwM0VGOTJF OTczNkM4Mjc2MzBERjI0MTM5NkNDMEYyOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs0CH8Dv+pOZNuBRbJ+TgN6nmr0l1bCs470s3eG9jCB//yRdPg LmkY0Z3BrE1/8UelznF1ijAyJmK9s+tSYrzh7O/ryDcqLf5SnKFF/mGBzqhxojCm zyUS7N4SCPRccalyeJ4YtGGjUedjjfPMu0yUC1Uh1I7+vkvabkO8YMB2+JLXgqpb zvZGSM9+xmXGy3oC0uPX2Y77ZY+OscKUkCyE/NJWBvSAuXMZOZaKVuSaG8h0hKQI OBD+971O+OOpj1ONa3ybHsrlnaG8AL+nldJal6C2oWX9ihPnXgRVy+UrFrX9dOdL 868d8m7RhBoyQll5Zcar9Zxo6xaDCKaKcAqtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUaiSlkD75Lpc2yCdjDfJBOWzA8oswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2FpU2xrRDc1THBjMnlDZGpEZkpCT1d6QThvcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEbh0owDQYJKoZIhvcNAQELBQADggEBAAYOOvMoqFtY7kfoXChEieqPWeiV eHjIZPp3iA/yuxXBNBTWpj9aCzjz4ixA0clrTB+lsrbhbUWHBjTfmAnypGDA54tl Nks6c6VoykE76YiODdqVnZ2Cu9Zg7Jv1FJ3xKoXUAMGNC+zlhI/aeBj22j95oMy/ fAbfjKfTVDnzEeUeDGlBScsEh1lQ+iGc/sLQ4uEu6dGPSwBmIp5jI5lj+LPYW5Yi CeyTCKqW5DkGLqENdze/D6h/t13MROSPePxgdZD3UOYoTX+6D/RUtoIQzpUU7X6o 6+Ev8priSf1SK/DJUXvJRcU46lUDcRl3crJvGkE2i6ebkzmP9981VKVeKFU= -----END CERTIFICATE-----Generated at Wed Sep 10 09:10:14 2025 by rpki-client