$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3ZHta6F0GCWL_aonkPcbDVVfMvI.roa File: 3ZHta6F0GCWL_aonkPcbDVVfMvI.roa (raw, json) Hash identifier: cHfjkgj0YaKjtVd/EdvF7zGq2noLAFaYrHboqnGMQNA= Subject key identifier: DD:91:ED:6B:A1:74:18:25:8B:FD:AA:27:90:F7:1B:0D:55:5F:32:F2 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0507 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3ZHta6F0GCWL_aonkPcbDVVfMvI.roa Signing time: Tue 01 Jul 2025 01:28:46 +0000 ROA not before: Tue 01 Jul 2025 01:28:46 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9605 IP address blocks: 240a:61:4800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Jul 1 01:28:46 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=DD91ED6BA17418258BFDAA2790F71B0D555F32F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:59:2f:fe:db:77:51:21:64:e9:ca:94:36: d9:81:ae:2f:b9:65:d6:59:d3:4b:60:0a:12:a5:d0: 98:7f:28:4d:4c:05:be:83:0d:16:b0:25:ca:59:a1: 0c:39:5a:c4:89:01:5e:ec:7c:9e:ae:6f:8f:86:dc: 1a:80:a8:cc:e7:9b:3e:21:35:76:66:7b:56:48:e3: 30:12:03:4c:70:bd:65:6d:71:40:62:82:67:86:b7: e9:5a:33:7a:68:50:51:2a:d0:ec:1b:6f:5c:30:68: 20:b7:02:97:be:09:f8:23:64:c9:93:94:8b:f8:ee: 23:8b:03:9d:93:55:02:74:42:c7:4a:ff:20:a7:24: 55:04:a7:a9:50:b5:3c:a9:5d:9c:4e:86:45:ba:b2: ca:61:30:65:50:dd:13:54:f2:53:80:34:e0:61:ad: af:06:cd:fb:cf:85:3a:2f:c5:e9:2e:3a:f2:3e:d5: d7:57:c3:aa:c9:05:82:8d:62:d4:4c:cf:ef:3c:30: 71:24:7b:ad:37:6a:16:81:e3:9d:86:55:bd:8d:6d: ad:b3:12:16:63:35:d4:d1:cd:d8:3a:15:b9:96:89: d7:e5:94:ba:55:95:d9:40:59:6e:24:88:46:29:ce: 91:3c:3c:16:4a:5c:ac:71:b1:7d:72:50:ef:24:25: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:ED:6B:A1:74:18:25:8B:FD:AA:27:90:F7:1B:0D:55:5F:32:F2 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3ZHta6F0GCWL_aonkPcbDVVfMvI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:61:4800::/38 Signature Algorithm: sha256WithRSAEncryption 98:9b:24:08:59:ac:66:67:2d:63:19:89:7c:11:00:56:34:bb: 31:75:5c:ad:b4:bb:f7:12:89:62:72:5f:f6:75:cc:82:6c:2e: 68:87:c6:9b:43:61:87:bf:93:f4:11:fc:50:f8:d7:d1:8a:3b: a3:05:00:58:a2:7a:22:24:28:c8:ab:21:c4:b6:46:97:e0:c2: f4:66:6e:9c:8d:3e:7d:e0:a5:95:8e:9b:14:82:41:ba:99:88: e7:6e:96:fe:05:e4:b8:e7:08:b6:d6:bc:c6:62:45:1d:05:88: f5:f1:6a:cc:82:92:7d:32:ce:bd:ae:82:6d:a5:83:75:ab:69: 94:2f:01:1a:b2:54:b5:c0:56:75:8c:18:55:d6:cd:d5:c5:d3: 56:d7:27:dc:14:0b:fb:85:ed:53:a1:f0:d5:e3:83:4a:b0:ac: 18:02:f0:8f:c3:8b:01:a9:ec:9f:b1:f4:e0:c6:cb:05:f0:ec: 57:9c:c1:d7:81:a3:17:c2:00:cd:09:11:3c:8e:6b:24:f9:b0: 51:19:6f:11:9d:c2:11:4c:00:be:61:cd:92:43:e9:50:d0:61: e3:74:a7:42:ce:eb:8b:39:be:d6:c7:11:52:78:8c:ac:52:05: ca:7d:dc:0e:4b:6b:07:f6:f0:12:3f:8a:f0:d9:f5:4b:52:62: 5a:b9:93:03 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA3MDEw MTI4NDZaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREOTFFRDZCQTE3NDE4 MjU4QkZEQUEyNzkwRjcxQjBENTU1RjMyRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwfVkv/tt3USFk6cqUNtmBri+5ZdZZ00tgChKl0Jh/KE1MBb6D DRawJcpZoQw5WsSJAV7sfJ6ub4+G3BqAqMznmz4hNXZme1ZI4zASA0xwvWVtcUBi gmeGt+laM3poUFEq0Owbb1wwaCC3Ape+CfgjZMmTlIv47iOLA52TVQJ0QsdK/yCn JFUEp6lQtTypXZxOhkW6ssphMGVQ3RNU8lOANOBhra8GzfvPhTovxekuOvI+1ddX w6rJBYKNYtRMz+88MHEke603ahaB452GVb2Nba2zEhZjNdTRzdg6FbmWidfllLpV ldlAWW4kiEYpzpE8PBZKXKxxsX1yUO8kJb/3AgMBAAGjggIqMIICJjAdBgNVHQ4E FgQU3ZHta6F0GCWL/aonkPcbDVVfMvIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS8zWkh0YTZGMEdDV0xfYW9ua1BjYkRWVmZNdkku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAoAYUgwDQYJKoZIhvcNAQELBQADggEBAJibJAhZrGZnLWMZiXwR AFY0uzF1XK20u/cSiWJyX/Z1zIJsLmiHxptDYYe/k/QR/FD419GKO6MFAFiieiIk KMirIcS2RpfgwvRmbpyNPn3gpZWOmxSCQbqZiOdulv4F5LjnCLbWvMZiRR0FiPXx asyCkn0yzr2ugm2lg3WraZQvARqyVLXAVnWMGFXWzdXF01bXJ9wUC/uF7VOh8NXj g0qwrBgC8I/DiwGp7J+x9ODGywXw7FecwdeBoxfCAM0JETyOayT5sFEZbxGdwhFM AL5hzZJD6VDQYeN0p0LO64s5vtbHEVJ4jKxSBcp93A5Lawf28BI/ivDZ9UtSYlq5 kwM= -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:38 2025 by rpki-client