$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZMMffyncgPHIJqcLgPoW5gmDRTs.roa File: ZMMffyncgPHIJqcLgPoW5gmDRTs.roa (raw, json) Hash identifier: K11ZYHQooLvfCCYR6Vf1qhVsnUGabuPRuqRrF+aMHQ0= Subject key identifier: 64:C3:1F:7F:29:DC:80:F1:C8:26:A7:0B:80:FA:16:E6:09:83:45:3B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EFC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZMMffyncgPHIJqcLgPoW5gmDRTs.roa Signing time: Tue 10 Jun 2025 11:16:44 +0000 ROA not before: Tue 10 Jun 2025 11:16:44 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3836 (0xefc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:44 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=64C31F7F29DC80F1C826A70B80FA16E60983453B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:a7:08:d3:0b:c3:1f:9f:53:02:14:8f:43: 3e:1b:3e:e6:b3:04:37:45:dc:19:25:9c:2c:8c:96: fa:10:ed:9b:fd:05:7a:01:51:20:95:6d:36:bf:d2: 57:b6:d6:3f:72:2f:b8:86:b0:f8:af:bc:fc:26:15: 72:b8:4e:c1:b2:a3:16:d1:86:f4:3f:eb:b9:80:7c: 0a:6d:aa:f5:5c:ab:98:ce:9e:7c:bc:7c:26:fe:e5: 25:d3:b2:d9:1c:07:73:90:01:e4:97:11:20:c1:e3: e1:d2:6f:90:65:71:9e:95:aa:79:78:86:25:1e:51: d1:df:fd:57:65:02:ea:f2:bd:51:e6:15:3e:b2:d2: 97:61:0d:7c:52:29:91:df:c5:e0:2e:df:c5:19:b4: dc:9a:12:30:de:95:b5:c8:ce:82:92:ff:bc:2b:b1: 80:16:e9:7c:25:ec:8e:0e:b7:e6:b0:f2:a1:e4:e7: 07:09:db:44:30:61:f1:78:00:32:2d:65:a7:a0:1c: db:2f:b4:0b:fa:68:0d:65:fb:7d:46:00:4d:47:d1: 23:b4:18:f1:4f:47:b8:08:e8:50:2f:c2:d3:32:71: 14:d0:71:59:3b:c1:7b:80:8e:52:18:ab:22:33:43: ff:67:3e:3c:7a:34:a6:40:59:49:3c:57:79:cf:f3: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C3:1F:7F:29:DC:80:F1:C8:26:A7:0B:80:FA:16:E6:09:83:45:3B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZMMffyncgPHIJqcLgPoW5gmDRTs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.112.0/21 Signature Algorithm: sha256WithRSAEncryption bb:96:a6:fa:32:b7:6d:b7:5a:19:ce:4f:82:0a:13:f3:c7:97: 6e:2c:23:2c:f7:21:fe:24:27:e6:b0:ff:80:36:ef:97:d7:eb: ce:6f:af:e3:47:07:92:29:16:89:f6:60:2e:da:ac:12:88:8e: 60:00:3b:2c:13:b4:bb:dc:bb:7c:2b:ba:b9:af:3a:71:c7:44: 7a:75:7c:3e:a3:ce:6d:43:55:2b:0e:1a:0f:55:6e:c3:37:c6: b6:3d:a6:4b:1e:1e:79:70:19:7f:43:e7:39:99:a6:0e:f6:76: c1:55:24:a9:6d:b5:b6:d2:fd:bf:3e:da:52:a2:f0:0b:67:16: 4c:16:5a:be:9d:68:69:a0:a6:ba:b8:83:b3:76:bc:43:01:66: ef:a2:7a:1f:7b:33:06:1f:e9:36:6a:fa:5a:d7:fb:1e:0b:6f: a5:b5:0a:ad:da:b0:bd:22:0c:43:ec:73:09:eb:87:52:e8:d4: fb:be:bd:b2:27:1b:31:f6:c5:1d:c7:b0:b8:0e:fd:6d:60:56: 0a:0d:f0:09:5d:b7:08:de:e0:04:8a:3e:b9:a2:31:55:45:3d: f7:df:d8:03:21:9c:e4:89:ae:0a:5a:00:5c:5c:38:87:13:a8: 4f:28:fe:da:63:d8:68:a5:98:0f:61:41:75:d6:14:4c:9d:b4: 1b:df:ad:92 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NDRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDY0QzMxRjdGMjlEQzgw RjFDODI2QTcwQjgwRkExNkU2MDk4MzQ1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyKqcI0wvDH59TAhSPQz4bPuazBDdF3BklnCyMlvoQ7Zv9BXoB USCVbTa/0le21j9yL7iGsPivvPwmFXK4TsGyoxbRhvQ/67mAfAptqvVcq5jOnny8 fCb+5SXTstkcB3OQAeSXESDB4+HSb5BlcZ6Vqnl4hiUeUdHf/VdlAuryvVHmFT6y 0pdhDXxSKZHfxeAu38UZtNyaEjDelbXIzoKS/7wrsYAW6Xwl7I4Ot+aw8qHk5wcJ 20QwYfF4ADItZaegHNsvtAv6aA1l+31GAE1H0SO0GPFPR7gI6FAvwtMycRTQcVk7 wXuAjlIYqyIzQ/9nPjx6NKZAWUk8V3nP8/drAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZMMffyncgPHIJqcLgPoW5gmDRTswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pNTWZmeW5jZ1BISUpxY0xnUG9XNWdtRFJUcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMb5nAwDQYJKoZIhvcNAQELBQADggEBALuWpvoyt223WhnOT4IKE/PHl24s Iyz3If4kJ+aw/4A275fX685vr+NHB5IpFon2YC7arBKIjmAAOywTtLvcu3wrurmv OnHHRHp1fD6jzm1DVSsOGg9VbsM3xrY9pkseHnlwGX9D5zmZpg72dsFVJKlttbbS /b8+2lKi8AtnFkwWWr6daGmgprq4g7N2vEMBZu+ieh97MwYf6TZq+lrX+x4Lb6W1 Cq3asL0iDEPscwnrh1Lo1Pu+vbInGzH2xR3HsLgO/W1gVgoN8Aldtwje4ASKPrmi MVVFPfff2AMhnOSJrgpaAFxcOIcTqE8o/tpj2GilmA9hQXXWFEydtBvfrZI= -----END CERTIFICATE-----Generated at Sat Jun 21 02:09:32 2025 by rpki-client