$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vXU1lu3_WXj9cKyIOwc5RVj2nII.roa File: vXU1lu3_WXj9cKyIOwc5RVj2nII.roa (raw, json) Hash identifier: CxA6zQGwPSwM5AChWv5p1rNVCOkxq1k7Djh582655vI= Subject key identifier: BD:75:35:96:ED:FF:59:78:FD:70:AC:88:3B:07:39:45:58:F6:9C:82 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 045F Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vXU1lu3_WXj9cKyIOwc5RVj2nII.roa Signing time: Mon 01 Sep 2025 01:34:08 +0000 ROA not before: Mon 01 Sep 2025 01:34:08 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 10013 IP address blocks: 59.156.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 05:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:34:08 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=BD753596EDFF5978FD70AC883B07394558F69C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:a6:a8:a8:ec:fc:d1:ed:ab:16:71:ca:80: b1:3f:b3:32:8a:6e:7d:05:dc:43:1e:4b:41:7f:3b: ec:e0:6a:db:f5:9c:fa:81:e7:7c:4b:a3:5f:66:c7: 91:99:ae:25:f3:5c:64:07:e3:49:cc:14:c0:7d:6c: 0a:a9:2f:1b:3d:2a:03:4d:65:4d:38:20:fe:30:e2: 46:d7:92:2b:62:97:51:a1:16:75:b8:69:bf:26:48: 5b:be:eb:00:64:72:bb:87:4d:a7:1c:05:1b:b8:e1: c3:f9:0f:c7:21:a1:19:d4:5c:78:38:9b:e2:91:f9: 39:73:e4:45:fa:25:cf:ac:19:ba:b5:7d:42:32:9f: 09:44:13:d3:8f:bd:4e:dc:1c:ef:e5:18:50:33:8d: c3:b9:b3:57:f8:3e:21:5c:84:04:0d:63:db:c5:00: 98:ef:fb:cf:0e:e0:22:05:6a:db:de:cb:3d:0c:8a: 72:39:a3:99:1a:0f:a8:2f:a9:7b:41:a1:c8:cd:66: b5:91:00:77:d0:2d:fc:01:8f:d9:c7:7d:df:4b:d5: b9:2b:ae:84:f9:d7:9e:32:6b:84:37:f5:0b:34:54: 7d:65:ee:e5:87:aa:a5:3b:90:3f:73:fd:89:91:2f: 6e:84:5a:f6:86:e3:d0:6a:15:8b:e5:0b:07:63:d4: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:75:35:96:ED:FF:59:78:FD:70:AC:88:3B:07:39:45:58:F6:9C:82 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vXU1lu3_WXj9cKyIOwc5RVj2nII.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.156.204.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:47:26:29:01:a7:43:77:85:43:54:f5:ba:8b:74:e1:85:77: 3f:5d:ee:19:3f:19:1a:ac:03:6e:f0:8e:60:b7:c5:56:58:52: e7:fe:c5:c6:41:28:15:b0:30:27:2e:fb:c0:3a:61:44:0f:49: 14:45:ff:65:1c:6c:ef:b0:36:f5:48:a5:eb:7c:97:d6:96:9e: 99:bc:85:0b:26:d1:32:11:79:63:11:a5:bd:a8:ed:9d:c1:53: 6b:fd:8f:38:e4:f8:4d:08:59:f4:60:c3:50:ff:bc:76:4c:4e: ea:08:30:fb:b5:eb:ef:9f:6e:df:7d:42:d3:76:47:a4:7e:a1: ec:ad:48:c0:01:cd:33:2c:52:cb:ef:0d:48:fe:4d:5d:ae:50: 15:bd:6a:09:a6:74:ab:3a:9e:82:a6:c3:9c:6f:7d:cc:1b:c3: fa:fd:29:2f:0e:75:5f:c3:02:34:3f:30:62:89:20:d1:5c:0d: 78:51:38:30:d6:29:a0:c7:8f:4d:28:f1:e3:f4:38:de:62:7e: f1:5b:17:cd:34:bb:71:a0:fe:d6:1f:e2:ab:fd:b3:fd:5c:24: 4f:78:7b:ae:02:69:38:4d:26:60:c3:5f:85:92:6e:3f:61:df: 5c:98:72:ad:f8:43:71:bf:91:b9:26:d6:0d:31:ca:87:1a:3a: 64:09:98:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTM0MDhaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJENzUzNTk2RURGRjU5 NzhGRDcwQUM4ODNCMDczOTQ1NThGNjlDODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoUqaoqOz80e2rFnHKgLE/szKKbn0F3EMeS0F/O+zgatv1nPqB 53xLo19mx5GZriXzXGQH40nMFMB9bAqpLxs9KgNNZU04IP4w4kbXkitil1GhFnW4 ab8mSFu+6wBkcruHTaccBRu44cP5D8choRnUXHg4m+KR+Tlz5EX6Jc+sGbq1fUIy nwlEE9OPvU7cHO/lGFAzjcO5s1f4PiFchAQNY9vFAJjv+88O4CIFatveyz0MinI5 o5kaD6gvqXtBocjNZrWRAHfQLfwBj9nHfd9L1bkrroT5154ya4Q39Qs0VH1l7uWH qqU7kD9z/YmRL26EWvaG49BqFYvlCwdj1I0lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvXU1lu3/WXj9cKyIOwc5RVj2nIIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3ZYVTFsdTNfV1hqOWNLeUlPd2M1UlZqMm5JSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI7nMwwDQYJKoZIhvcNAQELBQADggEBAF1HJikBp0N3hUNU9bqLdOGFdz9d 7hk/GRqsA27wjmC3xVZYUuf+xcZBKBWwMCcu+8A6YUQPSRRF/2UcbO+wNvVIpet8 l9aWnpm8hQsm0TIReWMRpb2o7Z3BU2v9jzjk+E0IWfRgw1D/vHZMTuoIMPu16++f bt99QtN2R6R+oeytSMABzTMsUsvvDUj+TV2uUBW9agmmdKs6noKmw5xvfcwbw/r9 KS8OdV/DAjQ/MGKJINFcDXhRODDWKaDHj00o8eP0ON5ifvFbF800u3Gg/tYf4qv9 s/1cJE94e64CaThNJmDDX4WSbj9h31yYcq34Q3G/kbkm1g0xyocaOmQJmLQ= -----END CERTIFICATE-----Generated at Wed Sep 10 09:10:14 2025 by rpki-client