$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zewhXgCNJQjp6X6w_F_20OzaE_E.roa File: zewhXgCNJQjp6X6w_F_20OzaE_E.roa (raw, json) Hash identifier: RMmPgOi1M0qRGV6BY0B0Dsw5s4Pi316Sa4Vz3xTFG0M= Subject key identifier: CD:EC:21:5E:00:8D:25:08:E9:E9:7E:B0:FC:5F:F6:D0:EC:DA:13:F1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BCD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zewhXgCNJQjp6X6w_F_20OzaE_E.roa Signing time: Tue 01 Apr 2025 01:47:31 +0000 ROA not before: Tue 01 Apr 2025 01:47:31 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3021 (0xbcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CDEC215E008D2508E9E97EB0FC5FF6D0ECDA13F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:f8:3d:47:9a:30:49:28:4e:14:53:99:24: 72:0b:d8:76:44:5f:66:50:3d:79:f4:1b:dc:a9:99: 11:77:ad:01:c5:f5:3e:0b:24:01:6e:cc:e0:11:f4: c2:d2:e0:61:46:f7:ce:4e:23:7f:80:6c:6e:70:c1: 3f:81:8b:87:eb:4e:e4:59:1f:39:97:10:00:13:d3: 33:c7:ac:0c:31:c1:24:68:8f:f9:a5:f1:ba:94:54: 05:31:b0:f6:75:18:d5:37:6f:28:47:d4:2f:a1:f7: 21:d7:ba:05:18:2e:02:79:c7:e8:42:89:5c:f4:23: b2:54:8a:0b:3a:3f:93:6f:e5:47:59:74:89:53:56: 11:86:ae:08:07:eb:b7:3e:b1:7b:b3:2a:51:fe:0c: 89:4c:4f:a9:b2:29:9b:8b:72:2e:8d:22:9b:94:5b: 64:8a:85:55:2c:9c:b0:1d:88:36:9c:54:39:44:3c: 04:7e:51:74:9c:04:91:9a:ad:47:13:14:8f:ee:a0: 83:13:7c:a5:c2:d2:f3:ad:5d:ed:0e:d9:86:e4:ff: db:7b:95:1e:a0:7f:45:17:95:71:00:4d:27:88:88: 60:16:fc:9e:09:0b:66:44:7a:42:4c:a0:64:0c:e0: ba:9d:f8:ce:dc:31:c1:33:8f:a1:bf:09:ef:f8:57: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EC:21:5E:00:8D:25:08:E9:E9:7E:B0:FC:5F:F6:D0:EC:DA:13:F1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zewhXgCNJQjp6X6w_F_20OzaE_E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.76.0/22 Signature Algorithm: sha256WithRSAEncryption 53:9b:95:fc:77:37:72:f1:ac:4a:80:4d:87:ec:4e:5f:4c:5d: 23:b0:1a:6d:fa:c2:72:98:06:25:5a:ac:87:d2:f8:6c:16:38: 94:ee:e9:ba:9f:37:e6:d9:7e:84:13:40:1b:4c:de:fa:f7:a6: 47:e6:ca:92:c3:67:0c:61:f7:dd:da:05:f1:f6:4e:6d:72:a8: aa:8d:10:17:b3:ed:38:2e:f2:ec:b8:eb:ce:64:0f:5b:27:16: 7b:0b:09:9f:0e:e8:18:10:7f:a5:54:7c:9f:9c:1a:38:71:f9: c5:b6:f6:b0:16:e9:ee:55:7d:48:59:e0:91:f6:25:a7:36:d1: 1e:6b:e5:15:2c:f1:db:53:37:ee:46:35:06:d3:3d:c8:23:60: 54:ad:af:8c:63:2d:1c:26:4f:d5:18:cd:41:5f:3a:12:d5:94: a7:91:81:a2:9f:43:33:85:23:ad:76:e3:3f:4f:90:a2:9c:40: 75:bd:83:c7:44:7f:31:a6:4f:7b:c1:96:10:60:bd:cf:f0:0d: 3c:e7:5c:51:ac:cf:dd:52:10:a1:67:a4:4e:d6:75:f0:f7:88: 9c:b9:d4:24:5e:77:b1:50:a3:07:37:31:19:f3:a4:98:8b:a1: a8:1a:e9:51:1d:19:b8:c2:8b:36:5e:22:c6:21:4c:af:22:f5: 45:1d:52:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3MzFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENERUMyMTVFMDA4RDI1 MDhFOUU5N0VCMEZDNUZGNkQwRUNEQTEzRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZXPg9R5owSShOFFOZJHIL2HZEX2ZQPXn0G9ypmRF3rQHF9T4L JAFuzOAR9MLS4GFG985OI3+AbG5wwT+Bi4frTuRZHzmXEAAT0zPHrAwxwSRoj/ml 8bqUVAUxsPZ1GNU3byhH1C+h9yHXugUYLgJ5x+hCiVz0I7JUigs6P5Nv5UdZdIlT VhGGrggH67c+sXuzKlH+DIlMT6myKZuLci6NIpuUW2SKhVUsnLAdiDacVDlEPAR+ UXScBJGarUcTFI/uoIMTfKXC0vOtXe0O2Ybk/9t7lR6gf0UXlXEATSeIiGAW/J4J C2ZEekJMoGQM4Lqd+M7cMcEzj6G/Ce/4V57LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzewhXgCNJQjp6X6w/F/20OzaE/EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3pld2hYZ0NOSlFqcDZYNndfRl8yME96YUVfRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT0wwDQYJKoZIhvcNAQELBQADggEBAFOblfx3N3LxrEqATYfsTl9MXSOw Gm36wnKYBiVarIfS+GwWOJTu6bqfN+bZfoQTQBtM3vr3pkfmypLDZwxh993aBfH2 Tm1yqKqNEBez7Tgu8uy4685kD1snFnsLCZ8O6BgQf6VUfJ+cGjhx+cW29rAW6e5V fUhZ4JH2Jac20R5r5RUs8dtTN+5GNQbTPcgjYFStr4xjLRwmT9UYzUFfOhLVlKeR gaKfQzOFI6124z9PkKKcQHW9g8dEfzGmT3vBlhBgvc/wDTznXFGsz91SEKFnpE7W dfD3iJy51CRed7FQowc3MRnzpJiLoaga6VEdGbjCizZeIsYhTK8i9UUdUrg= -----END CERTIFICATE-----Generated at Fri Oct 24 13:45:08 2025 by rpki-client