$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTNNaTm3Ms3iqWh9TAp5GaniZ1A.roa File: ZTNNaTm3Ms3iqWh9TAp5GaniZ1A.roa (raw, json) Hash identifier: AvLQlAuL1X4itCxl3UxaVPkja/Ur3WdJ9C4oAB4z5yc= Subject key identifier: 65:33:4D:69:39:B7:32:CD:E2:A9:68:7D:4C:0A:79:19:A9:E2:67:50 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B88 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTNNaTm3Ms3iqWh9TAp5GaniZ1A.roa Signing time: Tue 01 Apr 2025 01:36:55 +0000 ROA not before: Tue 01 Apr 2025 01:36:55 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2952 (0xb88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:55 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=65334D6939B732CDE2A9687D4C0A7919A9E26750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:63:75:4a:dc:81:4a:96:61:be:8c:12:3d: e6:93:14:86:8a:9b:7a:a4:72:ff:68:d0:9c:71:68: 81:2b:5c:c6:c9:44:b2:2f:3f:63:8b:49:59:9d:00: ed:b5:87:d4:0a:bd:b9:db:70:30:45:99:bf:a8:23: 09:0f:5d:b8:59:8c:2a:72:df:1f:1f:ae:6b:19:06: 15:26:9b:e6:42:41:10:0a:dc:54:30:19:a5:55:97: d0:31:a6:b4:fd:5d:ad:c2:4b:13:47:f8:0b:88:0d: 48:86:ed:bb:13:52:25:14:b1:84:43:a3:6f:52:3a: 84:cd:99:d0:7a:8f:87:51:a6:10:8b:86:ef:a5:05: d0:c0:aa:6f:92:1b:67:4c:5e:96:f9:41:68:5c:e7: 3f:5e:18:73:42:78:d6:6c:72:d8:06:dd:99:45:eb: ab:d3:7e:4f:36:18:c0:00:f5:08:70:57:8f:44:57: a4:bc:01:92:c3:16:0a:f5:aa:5f:f0:08:56:32:c9: f8:c3:3b:71:38:3f:62:9a:be:af:cf:ee:48:14:7d: 35:c2:39:5c:6e:7b:c7:20:e1:a5:ad:9f:7c:9b:26: d2:e5:ca:55:7e:1b:82:ee:33:77:99:f6:b1:73:9c: c5:ae:8c:a7:d7:3e:4f:56:38:39:1d:ba:15:10:d4: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:33:4D:69:39:B7:32:CD:E2:A9:68:7D:4C:0A:79:19:A9:E2:67:50 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTNNaTm3Ms3iqWh9TAp5GaniZ1A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.164.0/22 Signature Algorithm: sha256WithRSAEncryption a2:e1:a5:8b:44:ad:33:d7:c6:cc:0e:ad:41:d3:49:49:a0:8b: 42:88:23:e4:f3:e8:49:73:5f:d6:aa:1e:74:53:6e:d2:04:c4: 08:d8:dd:70:ff:8f:b6:8e:3e:b1:b4:71:28:76:d2:37:f5:8c: 7e:8c:dd:c2:9b:39:cf:72:60:bf:ec:2f:cf:12:bd:fb:2e:c7: ef:77:9d:dd:b6:e3:18:01:60:60:42:31:1e:1c:da:a2:05:06: f1:fe:db:7b:7b:e2:10:72:8a:f7:e7:45:16:7b:ce:aa:12:2d: 31:57:36:a4:ef:30:fa:c2:3b:98:ec:b1:a6:0a:fc:07:04:49: b0:6a:d9:7c:0c:5b:75:ce:8b:4a:55:6c:15:ed:fd:c3:e2:c4: 61:ba:fc:19:67:30:9e:ad:aa:5b:ca:f4:f4:54:f5:e6:c5:c0: ef:bc:65:d4:b6:a4:1b:76:52:f4:a2:a2:3e:16:b8:e1:58:96: 72:42:cf:b7:fc:67:a5:f9:f5:d9:ae:90:ad:2c:1e:61:ee:24: 0b:2a:56:be:e8:54:1b:c8:08:1a:38:7f:cd:6e:ee:9c:cc:0d: 18:5b:55:b0:d9:58:44:c7:12:f3:7e:84:8f:84:00:7b:44:7c: b5:5b:0d:91:ad:87:c5:98:65:eb:b9:05:8e:a5:ed:e9:40:0a: e2:02:9d:bc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC4gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NTVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY1MzM0RDY5MzlCNzMy Q0RFMkE5Njg3RDRDMEE3OTE5QTlFMjY3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC67mN1StyBSpZhvowSPeaTFIaKm3qkcv9o0JxxaIErXMbJRLIv P2OLSVmdAO21h9QKvbnbcDBFmb+oIwkPXbhZjCpy3x8frmsZBhUmm+ZCQRAK3FQw GaVVl9AxprT9Xa3CSxNH+AuIDUiG7bsTUiUUsYRDo29SOoTNmdB6j4dRphCLhu+l BdDAqm+SG2dMXpb5QWhc5z9eGHNCeNZsctgG3ZlF66vTfk82GMAA9QhwV49EV6S8 AZLDFgr1ql/wCFYyyfjDO3E4P2Kavq/P7kgUfTXCOVxue8cg4aWtn3ybJtLlylV+ G4LuM3eZ9rFznMWujKfXPk9WODkduhUQ1HLLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZTNNaTm3Ms3iqWh9TAp5GaniZ1AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pUTk5hVG0zTXMzaXFXaDlUQXA1R2FuaVoxQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYqQwDQYJKoZIhvcNAQELBQADggEBAKLhpYtErTPXxswOrUHTSUmgi0KI I+Tz6ElzX9aqHnRTbtIExAjY3XD/j7aOPrG0cSh20jf1jH6M3cKbOc9yYL/sL88S vfsux+93nd224xgBYGBCMR4c2qIFBvH+23t74hByivfnRRZ7zqoSLTFXNqTvMPrC O5jssaYK/AcESbBq2XwMW3XOi0pVbBXt/cPixGG6/BlnMJ6tqlvK9PRU9ebFwO+8 ZdS2pBt2UvSioj4WuOFYlnJCz7f8Z6X59dmukK0sHmHuJAsqVr7oVBvICBo4f81u 7pzMDRhbVbDZWETHEvN+hI+EAHtEfLVbDZGth8WYZeu5BY6l7elACuICnbw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:15:10 2025 by rpki-client