$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/zjOe5615vI6oWfUKPED7CXAIDAI.roa File: zjOe5615vI6oWfUKPED7CXAIDAI.roa (raw, json) Hash identifier: ZQbg0vmdbllWbw+3oASPRhu8nKQ6ojvruIjEycLW9yY= Subject key identifier: CE:33:9E:E7:AD:79:BC:8E:A8:59:F5:0A:3C:40:FB:09:70:08:0C:02 Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892 Certificate serial: A9 Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/zjOe5615vI6oWfUKPED7CXAIDAI.roa Signing time: Tue 10 Jun 2025 10:50:21 +0000 ROA not before: Tue 10 Jun 2025 10:50:21 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 7521 IP address blocks: 210.173.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892 Validity Not Before: Jun 10 10:50:21 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=CE339EE7AD79BC8EA859F50A3C40FB0970080C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:9e:8d:44:21:ff:b8:f3:35:40:2f:d1:06: ff:82:e5:aa:a8:c0:bc:a1:fa:11:ad:89:16:0a:fc: b7:39:e9:92:aa:48:88:d8:22:1f:87:fe:8f:34:9f: eb:0f:c0:9a:f2:64:4c:aa:89:fc:f1:e8:12:1f:51: 5e:12:67:b3:04:2b:4f:bf:97:56:e5:04:86:aa:d5: 31:2e:4e:4f:a6:70:f5:2f:2a:16:8b:57:40:2b:cf: 4d:67:5a:ef:ad:9f:25:11:34:42:8d:6a:ba:53:b5: 49:26:e4:ff:32:cd:79:8b:6a:20:15:62:88:49:14: 37:d8:aa:bf:8c:be:22:0e:32:93:44:ae:26:37:b6: 58:62:af:02:20:c7:55:14:57:64:59:81:4a:7d:b7: 28:97:86:70:d3:bf:15:cc:6a:29:52:ae:6e:30:fd: eb:bc:eb:4c:b4:19:8e:c5:63:68:88:49:34:c7:ac: 91:16:6b:62:db:c3:43:fe:f7:32:81:d6:c9:fe:2a: 7c:90:bc:0e:2a:b1:24:e5:6e:b3:e1:da:da:b2:4d: a0:cb:79:9d:81:77:72:98:db:f2:bb:aa:92:43:24: 10:a7:af:bc:31:29:c8:ad:7f:c6:88:e2:81:b6:e0: 6b:39:6b:20:2d:1e:d5:b1:72:7d:dd:2a:e1:ad:eb: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:33:9E:E7:AD:79:BC:8E:A8:59:F5:0A:3C:40:FB:09:70:08:0C:02 X509v3 Authority Key Identifier: keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/zjOe5615vI6oWfUKPED7CXAIDAI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.173.160.0/21 Signature Algorithm: sha256WithRSAEncryption 10:4e:e5:01:c7:e2:e8:b2:b2:77:0b:4d:56:96:b8:35:ed:da: 9a:2b:fc:7a:54:0d:ef:2a:b8:75:94:db:2d:aa:90:32:d7:2a: f8:0d:08:a9:c6:be:f1:3d:62:e6:4e:d9:0e:2b:27:59:09:3d: ea:5c:bc:e3:a9:31:26:75:8c:b9:7d:e2:35:02:f7:3e:b1:71: c7:2f:6e:ab:42:ce:2f:7b:3d:dd:76:95:b1:93:b3:37:c6:45: 77:b8:2f:4a:e3:54:b9:46:36:62:82:6f:c1:0f:0b:eb:f5:73: 62:48:f7:cd:42:eb:1c:11:14:4c:f5:e1:06:20:4d:69:ac:ba: 67:d2:2a:53:a1:b6:48:6f:2c:26:2c:25:fe:03:ee:d0:ec:97: ee:04:db:a5:e2:80:6e:37:a7:cf:35:2b:a5:30:2f:4a:de:f1: d6:28:b8:e1:6d:37:02:36:ca:67:f8:20:49:71:0a:5d:0d:9e: 15:41:f1:6c:b2:fa:3f:c1:c6:76:0e:62:c5:9b:2a:d5:44:b6: 91:a0:b9:68:85:89:1d:92:f4:bf:af:8d:45:60:1f:29:03:1e: 87:58:80:c9:93:28:08:c7:57:7a:09:37:fb:51:0b:fe:ef:5a: c0:f6:2c:9d:bc:44:9e:ad:56:45:49:cf:58:ba:f5:11:66:e3: 79:08:d4:6d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNTA2MTAx MDUwMjFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKENFMzM5RUU3QUQ3OUJD OEVBODU5RjUwQTNDNDBGQjA5NzAwODBDMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5hp6NRCH/uPM1QC/RBv+C5aqowLyh+hGtiRYK/Lc56ZKqSIjY Ih+H/o80n+sPwJryZEyqifzx6BIfUV4SZ7MEK0+/l1blBIaq1TEuTk+mcPUvKhaL V0Arz01nWu+tnyURNEKNarpTtUkm5P8yzXmLaiAVYohJFDfYqr+MviIOMpNEriY3 tlhirwIgx1UUV2RZgUp9tyiXhnDTvxXMailSrm4w/eu860y0GY7FY2iISTTHrJEW a2Lbw0P+9zKB1sn+KnyQvA4qsSTlbrPh2tqyTaDLeZ2Bd3KY2/K7qpJDJBCnr7wx Kcitf8aI4oG24Gs5ayAtHtWxcn3dKuGt6zF/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzjOe5615vI6oWfUKPED7CXAIDAIwHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjA3L3pqT2U1NjE1dkk2b1dmVUtQRUQ3Q1hBSURBSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPSraAwDQYJKoZIhvcNAQELBQADggEBABBO5QHH4uiysncLTVaWuDXt2por /HpUDe8quHWU2y2qkDLXKvgNCKnGvvE9YuZO2Q4rJ1kJPepcvOOpMSZ1jLl94jUC 9z6xcccvbqtCzi97Pd12lbGTszfGRXe4L0rjVLlGNmKCb8EPC+v1c2JI981C6xwR FEz14QYgTWmsumfSKlOhtkhvLCYsJf4D7tDsl+4E26XigG43p881K6UwL0re8dYo uOFtNwI2ymf4IElxCl0NnhVB8Wyy+j/BxnYOYsWbKtVEtpGguWiFiR2S9L+vjUVg HykDHodYgMmTKAjHV3oJN/tRC/7vWsD2LJ28RJ6tVkVJz1i69RFm43kI1G0= -----END CERTIFICATE-----Generated at Wed Nov 5 23:08:07 2025 by rpki-client