$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZA-7IlejUwqNl7piSX-mEpMImI0.roa File: ZA-7IlejUwqNl7piSX-mEpMImI0.roa (raw, json) Hash identifier: SQyQO1bXGdnWIfQ3R5OHoTcJVpm4guSrB1oaxby93FU= Subject key identifier: 64:0F:BB:22:57:A3:53:0A:8D:97:BA:62:49:7F:A6:12:93:08:98:8D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12C3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZA-7IlejUwqNl7piSX-mEpMImI0.roa Signing time: Sun 01 Mar 2026 03:16:20 +0000 ROA not before: Sun 01 Mar 2026 03:16:20 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4803 (0x12c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:16:20 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=640FBB2257A3530A8D97BA62497FA6129308988D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:f1:5a:40:7b:7b:db:a7:f2:bb:ef:24:0a: 3c:84:c8:d9:f7:4e:c7:1f:05:2f:10:7e:c7:b2:f4: 68:1b:83:37:e5:08:d4:6a:c2:f9:97:6e:5a:5c:bb: 0a:5b:96:4c:bc:85:7c:f2:9b:72:e9:37:94:97:67: a1:a3:aa:04:07:5e:e4:09:b3:da:63:9a:d0:e1:cf: b0:a3:5d:27:c6:76:01:35:e0:d0:2a:0c:da:ca:d2: d2:75:23:6f:29:a2:08:2e:75:16:67:df:21:1b:22: d6:e8:e9:4b:c5:37:7b:87:e8:09:33:22:b5:9f:d7: 4e:b1:c5:f2:23:e8:52:a2:09:47:d2:6b:e5:37:89: 7b:07:ae:de:14:b1:8b:8a:10:9f:4c:af:29:94:73: 17:20:a6:5b:c3:f9:22:39:49:f6:58:91:f1:57:ff: 3d:15:90:9f:8d:5c:b2:49:b7:4d:8c:71:ae:70:f8: de:7e:b4:d1:0a:e5:bb:bb:51:83:7e:22:27:70:c9: e5:61:0c:16:0e:29:dc:c6:83:c8:ad:ee:fe:e2:de: c1:2a:09:5c:d7:29:f1:7a:2e:cf:42:d1:d4:da:0b: d4:7b:45:61:f5:ed:f7:93:a6:10:fb:71:25:af:3b: 03:4c:30:bf:fb:c4:bf:e6:01:e4:7b:b1:2b:f6:97: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0F:BB:22:57:A3:53:0A:8D:97:BA:62:49:7F:A6:12:93:08:98:8D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZA-7IlejUwqNl7piSX-mEpMImI0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4f:19:c5:a6:64:bd:88:9e:04:84:4d:a4:c4:36:54:b9:bb:ce: ee:45:02:ab:65:e3:41:de:fe:f1:e7:9d:33:db:a2:73:3c:2d: be:d5:c0:5d:2a:7d:46:a5:48:f0:c8:16:79:6e:ae:63:c5:47: 5c:22:d5:00:17:23:d9:bb:61:a3:58:55:3d:b1:10:d1:c4:6b: a6:9d:61:cc:f0:4b:16:cc:7d:eb:44:ac:b7:1b:c4:db:fb:ef: 43:b9:99:ac:bf:2a:99:95:f7:d8:19:0b:c7:7a:fa:29:09:22: 3b:42:34:7d:ac:4b:a7:50:78:f6:7d:18:b2:0d:a0:26:2b:fb: 19:39:a1:d5:95:ce:ea:5e:c6:72:87:97:28:5d:69:92:71:ec: c9:3e:9f:d5:58:0f:42:7a:d2:84:7b:d8:93:f6:93:21:29:4c: 6a:d2:ea:ed:04:d9:8e:35:36:62:51:03:21:aa:ce:79:16:cc: 35:b4:cf:6a:b7:96:99:8b:05:fa:71:6c:9a:e5:73:55:23:7d: 2a:e8:f6:81:ad:18:9c:4f:28:10:f9:3c:ea:22:a3:84:58:5c: 04:cf:62:90:6d:12:e9:c9:3a:8a:08:74:51:e3:b7:b2:a6:30: fd:a5:ca:71:15:04:40:99:36:ad:c8:20:26:49:15:74:19:56: c8:f6:d5:5e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEsMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzE2MjBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY0MEZCQjIyNTdBMzUz MEE4RDk3QkE2MjQ5N0ZBNjEyOTMwODk4OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8G/FaQHt726fyu+8kCjyEyNn3TscfBS8Qfsey9GgbgzflCNRq wvmXblpcuwpblky8hXzym3LpN5SXZ6GjqgQHXuQJs9pjmtDhz7CjXSfGdgE14NAq DNrK0tJ1I28poggudRZn3yEbItbo6UvFN3uH6AkzIrWf106xxfIj6FKiCUfSa+U3 iXsHrt4UsYuKEJ9MrymUcxcgplvD+SI5SfZYkfFX/z0VkJ+NXLJJt02Mca5w+N5+ tNEK5bu7UYN+IidwyeVhDBYOKdzGg8it7v7i3sEqCVzXKfF6Ls9C0dTaC9R7RWH1 7feTphD7cSWvOwNMML/7xL/mAeR7sSv2l3CrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZA+7IlejUwqNl7piSX+mEpMImI0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pBLTdJbGVqVXdxTmw3cGlTWC1tRXBNSW1JMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcBQoAwDQYJKoZIhvcNAQELBQADggEBAE8ZxaZkvYieBIRNpMQ2VLm7zu5F Aqtl40He/vHnnTPbonM8Lb7VwF0qfUalSPDIFnlurmPFR1wi1QAXI9m7YaNYVT2x ENHEa6adYczwSxbMfetErLcbxNv770O5may/KpmV99gZC8d6+ikJIjtCNH2sS6dQ ePZ9GLINoCYr+xk5odWVzupexnKHlyhdaZJx7Mk+n9VYD0J60oR72JP2kyEpTGrS 6u0E2Y41NmJRAyGqznkWzDW0z2q3lpmLBfpxbJrlc1UjfSro9oGtGJxPKBD5POoi o4RYXATPYpBtEunJOooIdFHjt7KmMP2lynEVBECZNq3IICZJFXQZVsj21V4= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:30 2026 by rpki-client