$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/zI7NKXIizS4veu_YdzeMR1hB28M.roa File: zI7NKXIizS4veu_YdzeMR1hB28M.roa (raw, json) Hash identifier: 7LjRKMg/RHVjit/gmjMn6e0VA1xb1CF1o7Md1tFhgMc= Subject key identifier: CC:8E:CD:29:72:22:CD:2E:2F:7A:EF:D8:77:37:8C:47:58:41:DB:C3 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: A6 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zI7NKXIizS4veu_YdzeMR1hB28M.roa Signing time: Mon 01 Sep 2025 01:29:48 +0000 ROA not before: Mon 01 Sep 2025 01:29:48 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 2527 IP address blocks: 209.17.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 09:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Sep 1 01:29:48 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=CC8ECD297222CD2E2F7AEFD877378C475841DBC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1c:76:5a:50:3d:1e:ab:66:b9:06:71:fb:8b: b6:22:ce:2f:83:c4:5b:ec:7f:b4:90:d2:87:ed:88: bc:55:7a:54:15:ec:93:12:23:ae:fd:de:14:24:3f: 60:12:ff:e4:6e:0c:9f:a4:89:59:03:fa:15:29:8c: ec:68:4a:28:50:7c:6f:53:82:1b:fa:e3:2f:e6:a4: 89:36:3d:a6:91:cf:0b:f5:b9:6c:86:30:8a:46:73: f5:99:87:2d:d6:ca:fc:e1:dc:2d:02:45:77:c9:bb: 5d:a4:99:9e:5b:ea:3f:ed:59:cd:ef:04:d3:7e:de: b6:09:1e:b0:88:d6:cb:b1:4a:66:51:eb:02:d2:5a: 9c:8c:ca:26:9d:12:09:cc:45:16:79:8a:b2:5f:32: 18:f8:f5:ae:00:3b:ca:45:fd:79:f7:a0:12:6b:da: d6:04:79:45:2f:c7:ae:3b:31:94:c6:91:d6:33:17: 7a:11:fd:48:92:a9:28:32:8d:d9:5e:81:a1:2e:51: a1:bc:2c:c4:cf:fd:5f:50:9d:82:43:af:d5:56:12: 4c:e3:57:23:20:3a:36:0e:f1:8c:b8:71:c1:4a:2f: e7:61:cf:e5:dc:09:41:3d:97:29:a4:72:58:1f:1a: 55:c5:8c:15:3e:c1:cf:e2:31:f3:dd:cb:40:30:1c: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8E:CD:29:72:22:CD:2E:2F:7A:EF:D8:77:37:8C:47:58:41:DB:C3 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zI7NKXIizS4veu_YdzeMR1hB28M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 209.17.64.0/19 Signature Algorithm: sha256WithRSAEncryption 4c:e3:a5:c5:0a:bf:42:c0:3b:1f:b8:02:93:ea:8a:86:d2:84: bc:9b:f3:6f:bd:ba:9e:75:fc:22:b0:9b:cf:e5:ef:da:99:28: a9:3c:7c:3c:e7:2e:d5:fc:b5:69:fd:2d:73:73:df:6b:cc:f0: e7:4e:cd:fb:e8:a9:68:9f:60:39:87:72:b8:d3:40:d6:ea:32: de:41:7e:de:ac:ac:4e:49:98:4b:f8:38:86:06:c3:0a:04:02: 72:85:0a:e1:07:4f:1c:4e:2b:e2:da:8b:29:c3:04:37:1a:59: cf:59:1a:4d:a3:ad:6c:b2:f2:d3:5f:28:ee:65:ec:63:5d:fc: ac:67:07:e7:58:6a:d2:dd:be:71:c2:25:96:69:cc:90:0d:ff: c1:99:b7:a7:8a:4b:d9:e8:88:24:88:b9:18:53:c6:fe:9f:a6: 78:49:92:b1:03:2c:cd:d0:91:f3:fa:a3:bc:cd:12:b0:8f:6f: a9:46:c1:5e:38:94:36:87:9b:2d:78:ed:ad:49:59:3d:ba:50: 72:c8:4e:b3:2d:80:78:fa:88:17:63:d7:53:0a:50:4e:7f:76: b1:2f:15:c7:f2:73:58:e7:07:91:48:fd:13:9c:69:d1:73:f3: 67:04:b6:b3:25:7a:39:8d:d8:a2:58:ea:7a:f8:76:5d:68:49: da:ee:95:39 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNTA5MDEw MTI5NDhaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKENDOEVDRDI5NzIyMkNE MkUyRjdBRUZEODc3Mzc4QzQ3NTg0MURCQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTHHZaUD0eq2a5BnH7i7Yizi+DxFvsf7SQ0oftiLxVelQV7JMS I6793hQkP2AS/+RuDJ+kiVkD+hUpjOxoSihQfG9Tghv64y/mpIk2PaaRzwv1uWyG MIpGc/WZhy3Wyvzh3C0CRXfJu12kmZ5b6j/tWc3vBNN+3rYJHrCI1suxSmZR6wLS WpyMyiadEgnMRRZ5irJfMhj49a4AO8pF/Xn3oBJr2tYEeUUvx647MZTGkdYzF3oR /UiSqSgyjdlegaEuUaG8LMTP/V9QnYJDr9VWEkzjVyMgOjYO8Yy4ccFKL+dhz+Xc CUE9lymkclgfGlXFjBU+wc/iMfPdy0AwHL1jAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUzI7NKXIizS4veu/YdzeMR1hB28MwHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v /yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My96STdOS1hJaXpTNHZldV9ZZHplTVIxaEIyOE0ucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQF0RFAMA0GCSqGSIb3DQEBCwUAA4IBAQBM46XFCr9CwDsfuAKT6oqG0oS8m/Nv vbqedfwisJvP5e/amSipPHw85y7V/LVp/S1zc99rzPDnTs376Klon2A5h3K400DW 6jLeQX7erKxOSZhL+DiGBsMKBAJyhQrhB08cTivi2ospwwQ3GlnPWRpNo61ssvLT XyjuZexjXfysZwfnWGrS3b5xwiWWacyQDf/BmbenikvZ6IgkiLkYU8b+n6Z4SZKx AyzN0JHz+qO8zRKwj2+pRsFeOJQ2h5steO2tSVk9ulByyE6zLYB4+ogXY9dTClBO f3axLxXH8nNY5weRSP0TnGnRc/NnBLazJXo5jdiiWOp6+HZdaEna7pU5 -----END CERTIFICATE-----Generated at Mon Sep 8 13:22:42 2025 by rpki-client