$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ZmCDuyVXwgiJZwUzZhSAdHadD48.roa File: ZmCDuyVXwgiJZwUzZhSAdHadD48.roa (raw, json) Hash identifier: Wt+vg48YNikLbNQDt/bNaVArn65Afr5lKd6NbFy+KtQ= Subject key identifier: 66:60:83:BB:25:57:C2:08:89:67:05:33:66:14:80:74:76:9D:0F:8F Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: F6 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ZmCDuyVXwgiJZwUzZhSAdHadD48.roa Signing time: Thu 24 Jul 2025 02:05:27 +0000 ROA not before: Thu 24 Jul 2025 02:05:27 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 211.14.128.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:05:27 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=666083BB2557C2088967053366148074769D0F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:8a:34:61:7e:26:35:2d:0f:ab:d2:ae:48: 6e:fc:f0:32:57:bb:81:8e:48:b1:23:c2:38:34:ef: 3b:f0:62:4f:0e:a5:b0:0e:60:a9:7e:dd:b2:70:ea: 12:65:90:06:a3:56:98:1f:42:45:08:26:98:90:10: 5b:db:42:cb:77:b7:d3:8d:a9:42:5d:dd:38:d6:e7: 2b:96:b8:4a:08:78:0f:38:e4:66:32:c7:94:4f:9f: db:fc:a7:30:73:fa:d9:27:32:16:15:ee:d8:00:ee: 92:d6:65:82:1b:b3:b7:69:42:1b:ca:6d:98:57:0c: f1:81:f3:20:f9:43:d1:dd:8c:c2:a1:2f:8f:78:30: 75:89:b4:d9:a2:28:20:12:a5:5b:b3:8d:75:1f:6b: 21:01:b4:7d:1e:7f:d0:5a:fc:96:03:af:52:f6:c8: 84:19:67:bd:55:68:02:fc:83:33:a9:a1:41:a7:99: 2e:30:75:90:39:f8:6d:ff:12:68:f4:33:0b:1d:62: 6f:7c:57:20:c4:b8:d1:75:12:07:4b:7b:37:2b:74: 94:2a:6d:68:39:11:31:2c:16:7f:d0:9d:21:be:f7: 16:90:19:60:22:08:30:e7:80:5b:f5:01:f5:d5:c9: a1:61:32:8d:09:61:80:9f:b4:47:cb:07:fe:8a:4b: eb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:60:83:BB:25:57:C2:08:89:67:05:33:66:14:80:74:76:9D:0F:8F X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ZmCDuyVXwgiJZwUzZhSAdHadD48.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.128.0/23 Signature Algorithm: sha256WithRSAEncryption 51:2b:87:56:8c:6b:76:50:2b:1d:e8:d1:56:6d:1a:a7:ac:f8: 9f:64:d3:2c:a9:eb:aa:72:32:7a:4b:43:17:a3:4c:53:23:82: a2:9b:1e:d6:a4:20:f8:81:47:cd:ae:40:ca:bc:08:35:df:ef: 1b:f0:be:1f:ac:62:f5:73:a2:b6:b3:bf:4b:fb:04:19:ea:bf: c5:b0:63:83:59:8c:08:27:5c:aa:8b:b3:32:8e:96:67:ca:fa: 4f:2d:53:e9:5f:ca:b5:61:e5:f3:8b:92:e4:6b:a8:41:8b:79: 0b:1f:62:0b:a3:41:0b:03:95:4f:4e:da:2f:8a:d8:1d:d8:53: 3e:fd:ba:ed:50:00:91:81:30:ac:3d:8f:06:ac:e7:62:99:aa: 85:8e:68:d2:7f:7f:b5:6e:ac:72:cc:64:39:72:de:61:9b:07: 8f:de:67:74:27:c8:2e:a2:55:b5:14:e3:78:6b:d5:a8:b0:3f: 63:d4:31:31:8b:dc:38:f2:59:e9:90:e7:fb:31:40:61:89:da: 5e:4e:00:86:e5:36:60:55:25:d4:d5:cf:db:6f:7c:72:cf:6d: 12:a4:6d:02:70:17:8d:5f:3d:9c:79:66:39:da:07:18:7d:65: e9:4c:46:0c:43:e8:26:d8:56:2c:46:ba:5c:46:c2:8f:a1:b1: 21:e9:2e:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjA1MjdaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDY2NjA4M0JCMjU1N0My MDg4OTY3MDUzMzY2MTQ4MDc0NzY5RDBGOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3rIo0YX4mNS0Pq9KuSG788DJXu4GOSLEjwjg07zvwYk8OpbAO YKl+3bJw6hJlkAajVpgfQkUIJpiQEFvbQst3t9ONqUJd3TjW5yuWuEoIeA845GYy x5RPn9v8pzBz+tknMhYV7tgA7pLWZYIbs7dpQhvKbZhXDPGB8yD5Q9HdjMKhL494 MHWJtNmiKCASpVuzjXUfayEBtH0ef9Ba/JYDr1L2yIQZZ71VaAL8gzOpoUGnmS4w dZA5+G3/Emj0MwsdYm98VyDEuNF1EgdLezcrdJQqbWg5ETEsFn/QnSG+9xaQGWAi CDDngFv1AfXVyaFhMo0JYYCftEfLB/6KS+svAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUZmCDuyVXwgiJZwUzZhSAdHadD48wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9abUNEdXlWWHdnaUpad1V6WmhTQWRIYWRENDgu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB0w6AMA0GCSqGSIb3DQEBCwUAA4IBAQBRK4dWjGt2UCsd6NFWbRqn rPifZNMsqeuqcjJ6S0MXo0xTI4Kimx7WpCD4gUfNrkDKvAg13+8b8L4frGL1c6K2 s79L+wQZ6r/FsGODWYwIJ1yqi7MyjpZnyvpPLVPpX8q1YeXzi5Lka6hBi3kLH2IL o0ELA5VPTtovitgd2FM+/brtUACRgTCsPY8GrOdimaqFjmjSf3+1bqxyzGQ5ct5h mweP3md0J8guolW1FON4a9WosD9j1DExi9w48lnpkOf7MUBhidpeTgCG5TZgVSXU 1c/bb3xyz20SpG0CcBeNXz2ceWY52gcYfWXpTEYMQ+gm2FYsRrpcRsKPobEh6S45 -----END CERTIFICATE-----Generated at Wed Jul 30 03:08:54 2025 by rpki-client