$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZBv2_A4LK_8S0tU1v_nyqsfk4hk.roa File: ZBv2_A4LK_8S0tU1v_nyqsfk4hk.roa (raw, json) Hash identifier: 5MgGl1FX+43YcxZg9RgHpbsBa4Cs8KLC8+S9SeDbOtI= Subject key identifier: 64:1B:F6:FC:0E:0B:2B:FF:12:D2:D5:35:BF:F9:F2:AA:C7:E4:E2:19 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1440 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZBv2_A4LK_8S0tU1v_nyqsfk4hk.roa Signing time: Tue 31 Mar 2026 07:57:11 +0000 ROA not before: Tue 31 Mar 2026 07:57:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5184 (0x1440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=641BF6FC0E0B2BFF12D2D535BFF9F2AAC7E4E219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:5a:e7:5e:5f:2e:f1:cd:c7:d5:d4:b1:ca: 9f:42:87:36:6c:b7:dd:d6:e4:32:72:7f:16:e9:9b: f8:69:ab:64:3a:f4:d1:4f:cb:7a:03:5e:f8:f8:e6: 40:53:fb:77:3a:ed:cb:ea:e5:96:ee:ed:16:1c:0c: 88:d4:bc:16:81:20:62:f5:18:42:eb:0c:d2:54:3b: 55:26:ff:e1:ef:9c:21:dd:d9:f4:01:4b:6d:4f:96: b7:bb:fb:68:27:8a:91:0a:99:99:0e:70:fc:6d:c6: 68:ad:f0:f6:0e:b4:79:f3:97:6d:b1:c1:a0:98:f3: ac:ea:00:fb:ae:20:dd:88:4d:09:b2:45:82:52:19: 25:6f:2c:53:41:d9:0a:e3:0c:13:d0:f3:c7:1e:b8: 4f:97:b3:42:11:a7:ad:da:fb:3d:62:90:1e:61:fa: 47:33:2e:2c:37:fd:26:51:ef:ae:98:3f:81:81:9d: 23:db:89:13:5d:92:66:61:a3:b7:38:4b:8f:62:fd: 1b:6d:11:b9:58:25:75:32:b4:90:ab:3e:12:fe:ee: 4a:a2:d4:72:ca:25:86:ef:fb:b3:33:9d:1b:39:66: 9e:83:88:cb:80:ab:44:c6:33:67:45:b7:5d:20:94: 6d:9b:b9:1c:46:eb:52:8f:43:89:a6:2d:ee:45:69: 6d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1B:F6:FC:0E:0B:2B:FF:12:D2:D5:35:BF:F9:F2:AA:C7:E4:E2:19 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZBv2_A4LK_8S0tU1v_nyqsfk4hk.roa sbgp-ipAddrBlock: critical IPv4: 1.79.23.0/24 Signature Algorithm: sha256WithRSAEncryption b1:cb:6a:08:8a:77:c4:91:e7:53:e8:31:ff:71:f8:5f:7f:39: e7:76:da:51:46:00:d5:d0:91:f6:dd:01:7b:43:4c:25:8f:52: 0e:af:c6:66:83:dc:f0:f0:b9:c9:88:a7:8f:9b:d1:9d:a5:be: b7:fd:63:62:b5:00:ca:18:53:62:95:c5:2d:4a:37:a1:da:31: 7c:8c:f7:6c:80:bc:93:47:76:ce:0e:67:da:fc:f4:5b:29:d5: cb:8a:14:10:5d:f5:d9:e3:25:b3:42:f6:a4:82:df:a5:7a:03: 00:81:c3:68:ab:d4:17:7c:e8:14:c5:57:d4:ea:27:ce:15:2a: c0:58:43:09:f9:5a:a3:ce:64:53:58:77:47:c4:f9:c2:07:97: 4e:c2:a7:22:b0:81:4c:75:32:3a:55:97:84:00:d1:67:84:e8: 53:bc:e4:c2:4b:65:ba:e4:e7:85:93:77:93:f6:2c:c0:66:17: 0d:82:be:9c:ff:c3:13:22:7a:09:35:0a:d3:1c:4e:c7:a7:d9: 2d:30:f1:da:f5:bf:b8:2c:29:8c:b4:f8:3b:52:8c:2c:db:b8: 9a:09:26:5f:e0:e6:ff:75:9e:62:c0:75:28:9f:a1:c4:f9:a8: 6e:29:d6:5c:2d:f9:3e:58:1e:39:e2:7a:9c:22:99:fa:a8:59: 4f:2d:a0:9f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY0MUJGNkZDMEUwQjJC RkYxMkQyRDUzNUJGRjlGMkFBQzdFNEUyMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCOFrnXl8u8c3H1dSxyp9ChzZst93W5DJyfxbpm/hpq2Q69NFP y3oDXvj45kBT+3c67cvq5Zbu7RYcDIjUvBaBIGL1GELrDNJUO1Um/+HvnCHd2fQB S21Plre7+2gnipEKmZkOcPxtxmit8PYOtHnzl22xwaCY86zqAPuuIN2ITQmyRYJS GSVvLFNB2QrjDBPQ88ceuE+Xs0IRp63a+z1ikB5h+kczLiw3/SZR766YP4GBnSPb iRNdkmZho7c4S49i/RttEblYJXUytJCrPhL+7kqi1HLKJYbv+7MznRs5Zp6DiMuA q0TGM2dFt10glG2buRxG61KPQ4mmLe5FaW1ZAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUZBv2/A4LK/8S0tU1v/nyqsfk4hkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L1pCdjJfQTRMS184UzB0VTF2X255cXNmazRoay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABTxcwDQYJKoZIhvcNAQELBQADggEB ALHLagiKd8SR51PoMf9x+F9/Oed22lFGANXQkfbdAXtDTCWPUg6vxmaD3PDwucmI p4+b0Z2lvrf9Y2K1AMoYU2KVxS1KN6HaMXyM92yAvJNHds4OZ9r89Fsp1cuKFBBd 9dnjJbNC9qSC36V6AwCBw2ir1Bd86BTFV9TqJ84VKsBYQwn5WqPOZFNYd0fE+cIH l07CpyKwgUx1MjpVl4QA0WeE6FO85MJLZbrk54WTd5P2LMBmFw2Cvpz/wxMiegk1 CtMcTsen2S0w8dr1v7gsKYy0+DtSjCzbuJoJJl/g5v91nmLAdSifocT5qG4p1lwt +T5YHjniepwimfqoWU8toJ8= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:30 2026 by rpki-client