$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZnhY3UaPjUFAGsJMVSZya6S9Hp4.roa File: ZnhY3UaPjUFAGsJMVSZya6S9Hp4.roa (raw, json) Hash identifier: WBJ97x3r6daMJn4s5UK7Mp0SFKpiLlV/Zgv0F2n3OSk= Subject key identifier: 66:78:58:DD:46:8F:8D:41:40:1A:C2:4C:55:26:72:6B:A4:BD:1E:9E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B87 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZnhY3UaPjUFAGsJMVSZya6S9Hp4.roa Signing time: Tue 01 Apr 2025 01:36:54 +0000 ROA not before: Tue 01 Apr 2025 01:36:54 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.161.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:54 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=667858DD468F8D41401AC24C5526726BA4BD1E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a2:ab:cc:85:d7:55:8d:3e:e0:83:95:51:fd: 8a:db:66:e6:14:c5:5c:28:9f:f3:6e:0a:4e:08:0c: cb:15:7f:11:c5:66:2c:03:84:08:b7:46:58:48:38: 74:99:22:ee:6c:a1:1a:d1:6b:ec:ed:12:fc:22:2f: 47:5b:7a:f1:43:8c:3d:c7:3b:df:5a:ed:45:58:6b: d5:bd:5e:d0:be:8a:e1:83:f2:c3:4d:ab:29:d1:3d: c4:a4:87:ee:a3:63:1a:21:32:44:6c:a9:4c:fd:36: 27:90:c2:9e:26:4b:3b:1c:f9:ac:5b:a4:54:73:32: c8:f9:eb:f5:6b:7b:a0:d0:1d:a4:80:9d:9b:55:25: 2d:c1:c9:a9:42:33:eb:82:ae:5a:cc:5c:6e:02:f3: 28:c8:63:f6:db:61:34:04:55:02:4d:ef:60:d0:9b: 48:2d:a1:a4:29:44:d4:a9:66:cf:43:bd:cf:16:1d: a3:cb:87:5e:57:ec:3c:a0:70:de:6d:52:95:98:15: 97:d0:03:78:64:8e:b6:d5:d5:2e:c8:4a:00:ef:de: bd:89:ac:d8:9b:fb:7b:1e:c1:60:13:bd:26:10:e4: 48:2e:44:df:22:88:af:4c:92:38:a8:1e:3b:4b:27: 88:a9:91:9d:b0:04:a3:ed:b5:fc:4d:90:05:1d:48: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:78:58:DD:46:8F:8D:41:40:1A:C2:4C:55:26:72:6B:A4:BD:1E:9E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZnhY3UaPjUFAGsJMVSZya6S9Hp4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.224.0/19 Signature Algorithm: sha256WithRSAEncryption 8d:ea:8c:25:36:97:a3:4f:50:b0:62:52:00:8e:f8:95:11:e7: 56:b8:15:75:ca:dc:ce:69:40:f2:b8:d1:5a:2b:cb:3d:d4:15: 9d:a1:aa:bd:3b:90:c7:ed:54:26:61:64:06:40:be:53:59:51: dc:cd:48:c7:2e:62:2d:9e:05:1a:70:78:56:93:07:36:f9:75: 78:f0:dc:26:79:5e:66:1e:a4:04:65:e6:93:da:5d:ee:0b:3e: ed:33:cc:2e:c1:45:66:c3:6f:23:49:7c:b4:9f:4a:d6:c6:bc: 60:3c:19:bf:10:12:4e:3a:c4:ee:d9:c7:49:c3:90:2e:67:19: 73:c9:ef:ce:97:75:00:9d:62:42:7e:ff:4f:a5:e5:c0:2f:cc: 77:20:9e:3f:96:7d:ca:3a:23:ef:cd:d8:e6:45:6f:08:91:b5: 77:6e:d8:13:65:9a:2e:53:f9:63:b4:04:be:35:7a:65:39:ef: a6:da:b9:14:a2:1e:69:0d:b2:d1:9e:bd:f0:a4:19:d8:2b:a2: 75:e4:b4:b2:4a:fd:09:c4:19:4c:cb:a6:34:4d:8a:b0:a6:7e: 51:c1:7f:c3:3d:41:0b:b6:ab:6d:ef:ee:3e:6c:8f:cd:ca:c4: ac:fb:56:33:1b:f7:2f:29:bb:f5:4b:7f:b9:9b:ed:08:ba:20: 2d:55:02:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NTRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY2Nzg1OERENDY4RjhE NDE0MDFBQzI0QzU1MjY3MjZCQTRCRDFFOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfoqvMhddVjT7gg5VR/YrbZuYUxVwon/NuCk4IDMsVfxHFZiwD hAi3RlhIOHSZIu5soRrRa+ztEvwiL0dbevFDjD3HO99a7UVYa9W9XtC+iuGD8sNN qynRPcSkh+6jYxohMkRsqUz9NieQwp4mSzsc+axbpFRzMsj56/Vre6DQHaSAnZtV JS3ByalCM+uCrlrMXG4C8yjIY/bbYTQEVQJN72DQm0gtoaQpRNSpZs9Dvc8WHaPL h15X7DygcN5tUpWYFZfQA3hkjrbV1S7ISgDv3r2JrNib+3sewWATvSYQ5EguRN8i iK9MkjioHjtLJ4ipkZ2wBKPttfxNkAUdSIchAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZnhY3UaPjUFAGsJMVSZya6S9Hp4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1puaFkzVWFQalVGQUdzSk1WU1p5YTZTOUhwNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVuoeAwDQYJKoZIhvcNAQELBQADggEBAI3qjCU2l6NPULBiUgCO+JUR51a4 FXXK3M5pQPK40Voryz3UFZ2hqr07kMftVCZhZAZAvlNZUdzNSMcuYi2eBRpweFaT Bzb5dXjw3CZ5XmYepARl5pPaXe4LPu0zzC7BRWbDbyNJfLSfStbGvGA8Gb8QEk46 xO7Zx0nDkC5nGXPJ786XdQCdYkJ+/0+l5cAvzHcgnj+Wfco6I+/N2OZFbwiRtXdu 2BNlmi5T+WO0BL41emU576bauRSiHmkNstGevfCkGdgronXktLJK/QnEGUzLpjRN irCmflHBf8M9QQu2q23v7j5sj83KxKz7VjMb9y8pu/VLf7mb7Qi6IC1VAkI= -----END CERTIFICATE-----Generated at Fri Oct 24 13:42:05 2025 by rpki-client