$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZuSDa7K9gAPTQ8CmylI5iJOXg38.roa File: ZuSDa7K9gAPTQ8CmylI5iJOXg38.roa (raw, json) Hash identifier: Ht41ONVGD+7OZYFH9qGoQjhPJdwg8IXCoAgHn5Out+E= Subject key identifier: 66:E4:83:6B:B2:BD:80:03:D3:43:C0:A6:CA:52:39:88:93:97:83:7F Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0434 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZuSDa7K9gAPTQ8CmylI5iJOXg38.roa Signing time: Wed 18 Dec 2024 02:22:18 +0000 ROA not before: Wed 18 Dec 2024 02:22:18 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 175.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:22:18 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=66E4836BB2BD8003D343C0A6CA5239889397837F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:e6:20:75:ea:16:49:fe:54:0e:e7:41:2c: 53:3a:7f:68:4d:17:eb:ba:41:32:4a:ce:c0:be:50: 67:d8:e7:b0:b1:b6:48:38:ad:ff:07:84:98:90:e2: 05:0c:a2:a7:68:3a:1e:f8:0b:e1:10:70:26:0c:25: bf:3e:2d:01:28:bb:30:29:4f:7e:1b:99:f0:b3:08: a0:4f:57:f0:93:cf:4f:8f:1a:cf:ad:ca:8d:83:25: 0e:76:df:5b:a8:0b:34:11:e9:6a:3d:a4:c5:ca:c5: 3d:e7:07:8c:f1:82:ff:07:36:46:6e:01:9a:e8:90: 24:cb:b5:57:08:2b:2c:45:ca:49:6c:0a:40:b8:12: e2:6f:56:ff:e6:f8:ba:d9:5e:96:0c:9c:59:56:6a: b0:40:b1:85:f9:7d:9a:f8:a6:f4:8a:e2:84:76:b0: dc:21:17:fe:a1:62:e9:58:69:7c:52:d4:c7:b9:3c: 00:a2:b3:03:9c:29:6d:71:ea:c0:2a:61:0c:e1:73: 4c:0c:3f:62:fc:93:ce:99:6d:b0:a0:2d:3c:bd:d1: 1d:0b:90:84:aa:c6:4a:3f:28:06:d2:a9:ad:ef:8c: aa:49:ca:ae:cb:0d:05:fd:93:cf:1b:68:3d:ab:27: c1:4c:8b:75:b5:35:37:45:5c:4f:ae:dc:1d:ec:05: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E4:83:6B:B2:BD:80:03:D3:43:C0:A6:CA:52:39:88:93:97:83:7F X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZuSDa7K9gAPTQ8CmylI5iJOXg38.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.129.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:1e:3b:25:99:69:72:66:e3:04:25:77:ad:ba:c4:f8:c2:ca: d8:2b:14:02:fb:66:d6:30:41:d1:6a:f5:2a:f1:f1:10:e1:76: c6:64:40:d7:ab:57:68:79:d7:79:c0:5e:cf:72:34:16:83:dc: 87:1a:c9:fe:2e:eb:bf:42:91:2b:56:b8:da:2f:81:1d:34:9a: 8a:d9:0d:44:a8:e8:3e:6f:68:0d:c3:41:95:0d:ee:73:af:3e: 7e:5d:8d:24:ac:8c:1e:24:85:d1:b4:c3:b7:d1:4d:28:78:47: ff:db:63:b9:f7:3b:61:60:f9:08:0f:61:55:0a:55:e8:fe:c7: c3:7a:92:58:c4:2e:98:b2:7b:2b:ee:79:6d:5d:a5:7f:f0:ff: 43:02:c4:a9:e3:f7:17:49:64:5d:2d:1a:6d:e5:22:8c:a9:d4: cc:40:f2:5e:83:2c:da:21:a8:de:34:2a:b5:8b:62:7a:79:1e: 27:cb:e2:26:21:25:6f:5d:b4:da:b5:6a:61:e2:a7:44:54:d2: 40:ec:91:b6:ce:e4:18:1c:dc:93:93:51:49:cf:ee:1d:bc:60: 74:db:a2:cd:3e:48:71:94:3d:26:8c:9c:ce:25:22:5b:4f:ec: 87:eb:b3:98:cb:9e:e5:9e:6d:ee:14:ee:c6:96:a3:0d:83:bf: aa:3d:fc:a4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjIyMThaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY2RTQ4MzZCQjJCRDgw MDNEMzQzQzBBNkNBNTIzOTg4OTM5NzgzN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNpOYgdeoWSf5UDudBLFM6f2hNF+u6QTJKzsC+UGfY57Cxtkg4 rf8HhJiQ4gUMoqdoOh74C+EQcCYMJb8+LQEouzApT34bmfCzCKBPV/CTz0+PGs+t yo2DJQ5231uoCzQR6Wo9pMXKxT3nB4zxgv8HNkZuAZrokCTLtVcIKyxFyklsCkC4 EuJvVv/m+LrZXpYMnFlWarBAsYX5fZr4pvSK4oR2sNwhF/6hYulYaXxS1Me5PACi swOcKW1x6sAqYQzhc0wMP2L8k86ZbbCgLTy90R0LkISqxko/KAbSqa3vjKpJyq7L DQX9k88baD2rJ8FMi3W1NTdFXE+u3B3sBSNbAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUZuSDa7K9gAPTQ8CmylI5iJOXg38wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1p1U0RhN0s5Z0FQVFE4Q215bEk1aUpPWGczOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCvgTANBgkqhkiG9w0BAQsFAAOCAQEAWB47JZlpcmbjBCV3rbrE+MLK2CsU Avtm1jBB0Wr1KvHxEOF2xmRA16tXaHnXecBez3I0FoPchxrJ/i7rv0KRK1a42i+B HTSaitkNRKjoPm9oDcNBlQ3uc68+fl2NJKyMHiSF0bTDt9FNKHhH/9tjufc7YWD5 CA9hVQpV6P7Hw3qSWMQumLJ7K+55bV2lf/D/QwLEqeP3F0lkXS0abeUijKnUzEDy XoMs2iGo3jQqtYtienkeJ8viJiElb1202rVqYeKnRFTSQOyRts7kGBzck5NRSc/u HbxgdNuizT5IcZQ9JoycziUiW0/sh+uzmMue5Z5t7hTuxpajDYO/qj38pA== -----END CERTIFICATE-----Generated at Wed Nov 5 22:17:25 2025 by rpki-client