$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM4NYalMEILzyVw6fDyy2ISfazU.roa File: ZM4NYalMEILzyVw6fDyy2ISfazU.roa (raw, json) Hash identifier: HErRdqcaBe4LNmywSHj30PdAQbiDCGq5zabv5Qf+b+c= Subject key identifier: 64:CE:0D:61:A9:4C:10:82:F3:C9:5C:3A:7C:3C:B2:D8:84:9F:6B:35 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 117A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM4NYalMEILzyVw6fDyy2ISfazU.roa Signing time: Sun 01 Mar 2026 02:26:56 +0000 ROA not before: Sun 01 Mar 2026 02:26:56 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4474 (0x117a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:26:56 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=64CE0D61A94C1082F3C95C3A7C3CB2D8849F6B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:c7:2c:c4:b4:a9:17:a8:ef:de:1a:35:c3: 48:a5:68:63:67:f3:de:7c:ef:2a:4f:19:ad:df:25: 86:d5:62:a0:ee:c9:55:0f:c8:bc:4c:43:ba:f3:68: 0f:00:81:5b:76:c4:3c:64:46:f2:7e:07:50:e7:48: 17:32:68:b8:f8:28:45:4e:3e:a6:42:48:01:6b:92: 5d:bf:74:8c:29:f5:5a:6d:99:02:31:9e:ad:b1:bc: fd:cd:32:a5:b9:55:ba:53:f1:e7:91:4f:65:0f:30: 58:c9:d0:90:84:33:1a:53:e5:6f:6b:b0:f8:43:50: bd:bd:7f:47:bc:20:5f:f1:5c:8f:e3:d2:de:1e:77: e8:e7:a8:1e:a7:65:0e:2e:2c:91:49:ee:07:4a:d1: e0:48:39:26:c3:13:0e:7f:4a:ac:50:e9:80:82:61: c4:87:83:9c:a8:4c:2a:fc:1c:ab:6e:a6:05:9f:96: f0:58:80:3a:75:a1:37:fd:18:fc:3b:62:8b:79:db: 9c:92:4e:49:5b:0b:23:61:30:3b:b2:0d:50:d7:eb: fa:4b:a2:ca:3a:6a:49:a0:f2:88:23:bd:35:08:cb: af:3f:62:8a:cd:33:77:64:f8:bf:8b:f8:4a:2b:c4: b5:00:d3:07:f0:e3:86:c2:8a:c7:81:c5:fb:55:c1: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CE:0D:61:A9:4C:10:82:F3:C9:5C:3A:7C:3C:B2:D8:84:9F:6B:35 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM4NYalMEILzyVw6fDyy2ISfazU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.36.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:6a:6e:e0:14:23:bb:af:45:9e:7b:4e:18:06:0c:e3:30:3a: a7:a0:d4:bc:44:9d:cc:10:0a:00:6a:67:d6:d9:9d:49:8e:27: 03:67:64:7d:c1:2e:bc:de:1d:ba:4a:1f:4c:f5:15:9c:0f:14: e4:df:e0:dd:08:95:c2:f6:0f:b8:16:ce:fc:f4:78:0f:44:65: 32:c1:92:64:79:54:87:87:40:f2:c3:23:75:b7:20:7d:ae:73: b7:c0:98:a1:b1:eb:69:dc:20:41:cf:a8:47:d3:a9:ca:f9:1a: a4:73:4a:f8:bf:f9:84:1c:1d:b8:99:47:b1:ac:d1:77:fa:f2: 8a:db:e4:01:c0:2b:bb:41:5a:75:56:6d:14:e8:a5:70:b4:88: 6e:09:5e:f0:cd:5c:52:92:f0:d2:2f:e6:2e:32:92:90:90:2f: 3e:86:aa:68:49:0c:6b:b5:3d:09:75:d5:c9:d4:91:6c:0c:b3: cc:3f:c4:23:3a:d8:3d:d9:80:eb:53:dd:5d:3f:b2:e1:78:af: c2:67:8b:cb:fd:96:80:a1:87:fa:b0:4a:23:c8:01:19:84:b4: af:44:5b:ed:0a:61:04:d4:2d:86:0e:8b:17:55:1a:58:0c:b0: 02:10:4d:46:ce:8d:e1:6a:cb:39:cc:bd:20:43:f8:f7:a8:9e: 4d:25:2c:b5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEXowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjI2NTZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY0Q0UwRDYxQTk0QzEw ODJGM0M5NUMzQTdDM0NCMkQ4ODQ5RjZCMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4ZMcsxLSpF6jv3ho1w0ilaGNn89587ypPGa3fJYbVYqDuyVUP yLxMQ7rzaA8AgVt2xDxkRvJ+B1DnSBcyaLj4KEVOPqZCSAFrkl2/dIwp9VptmQIx nq2xvP3NMqW5VbpT8eeRT2UPMFjJ0JCEMxpT5W9rsPhDUL29f0e8IF/xXI/j0t4e d+jnqB6nZQ4uLJFJ7gdK0eBIOSbDEw5/SqxQ6YCCYcSHg5yoTCr8HKtupgWflvBY gDp1oTf9GPw7Yot525ySTklbCyNhMDuyDVDX6/pLoso6akmg8ogjvTUIy68/YorN M3dk+L+L+EorxLUA0wfw44bCiseBxftVwRVvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZM4NYalMEILzyVw6fDyy2ISfazUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pNNE5ZYWxNRUlMenlWdzZmRHl5MklTZmF6VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTyQwDQYJKoZIhvcNAQELBQADggEBADtqbuAUI7uvRZ57ThgGDOMwOqeg 1LxEncwQCgBqZ9bZnUmOJwNnZH3BLrzeHbpKH0z1FZwPFOTf4N0IlcL2D7gWzvz0 eA9EZTLBkmR5VIeHQPLDI3W3IH2uc7fAmKGx62ncIEHPqEfTqcr5GqRzSvi/+YQc HbiZR7Gs0Xf68orb5AHAK7tBWnVWbRTopXC0iG4JXvDNXFKS8NIv5i4ykpCQLz6G qmhJDGu1PQl11cnUkWwMs8w/xCM62D3ZgOtT3V0/suF4r8Jni8v9loChh/qwSiPI ARmEtK9EW+0KYQTULYYOixdVGlgMsAIQTUbOjeFqyznMvSBD+Peonk0lLLU= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:27 2026 by rpki-client