$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZwN_kqq-HhBTbYIQFIA7QARQ79g.roa File: ZwN_kqq-HhBTbYIQFIA7QARQ79g.roa (raw, json) Hash identifier: Gi8svHdOmhsuLRnS5JuM2xMbdrCPjIG6QFjESkQFbI0= Subject key identifier: 67:03:7F:92:AA:BE:1E:10:53:6D:82:10:14:80:3B:40:04:50:EF:D8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D1D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZwN_kqq-HhBTbYIQFIA7QARQ79g.roa Signing time: Tue 01 Apr 2025 02:13:46 +0000 ROA not before: Tue 01 Apr 2025 02:13:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3357 (0xd1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=67037F92AABE1E10536D821014803B400450EFD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:fa:a8:ef:0a:cd:b1:83:c6:7d:47:59:c1: e8:1a:df:36:83:14:b0:35:27:34:46:1c:b3:f3:eb: 57:77:09:48:85:d1:57:fd:7c:3c:b0:a8:30:b2:fc: 5a:94:77:41:32:e0:4f:41:23:0b:fd:39:6c:dd:77: 9c:16:28:e2:42:26:f3:77:00:e2:fb:5f:65:81:45: da:eb:a4:9f:c8:5f:37:95:54:13:03:6c:e1:2f:b6: 8e:33:0d:8d:4f:66:72:c0:61:2c:e4:53:8e:c4:e7: b8:df:d0:78:f7:76:9d:22:6c:fa:6b:fe:6d:01:9d: 3b:d1:1a:fe:27:57:a7:5e:87:55:49:18:73:f7:ea: 98:5b:4c:54:6c:bc:e8:36:b6:5c:5b:6b:00:e8:ae: d8:11:74:93:99:f1:62:61:e6:54:56:ac:70:aa:45: f0:f5:67:44:c0:14:3e:b0:09:6b:ae:77:27:bb:35: 9d:d1:b1:6b:80:d4:8c:aa:8a:77:0e:1b:0a:ac:0e: 19:2a:4f:ed:8f:e2:0e:b3:5c:00:b3:38:87:e4:02: 63:89:4c:e1:56:33:4b:84:59:5e:25:06:5b:c2:33: 29:bf:17:89:65:a5:0c:6a:54:be:4a:ec:d2:67:3e: c6:ca:de:58:c3:2d:da:3e:51:59:66:f8:e8:72:6e: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:03:7F:92:AA:BE:1E:10:53:6D:82:10:14:80:3B:40:04:50:EF:D8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZwN_kqq-HhBTbYIQFIA7QARQ79g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.28.0/23 Signature Algorithm: sha256WithRSAEncryption 83:b4:94:be:5e:a0:0e:be:1b:bd:bc:00:56:4b:27:07:ec:78: d7:12:90:26:d9:e4:39:dd:22:ba:6c:5c:86:63:68:ea:37:fc: fb:be:d5:86:91:34:05:7e:e4:16:42:08:30:f7:73:be:a9:15: 1a:09:69:42:9e:ec:d9:be:b8:cf:7d:d9:47:28:e7:6c:4c:de: a5:b9:e0:ed:fd:81:d0:99:34:dc:34:6d:f8:3d:d0:0c:68:90: 6e:20:96:d2:4a:fc:21:23:69:c9:68:48:47:fd:4d:9a:39:07: a9:d0:ca:0b:74:55:84:6f:ba:cc:3c:16:6f:fe:83:22:e9:f1: 72:a1:79:f4:d2:b6:89:d9:51:a2:61:6c:7f:59:c8:3c:fd:73: d8:d4:34:df:f8:66:33:24:22:fa:db:cc:e8:e2:ac:08:cb:16: e6:3d:c6:4b:8c:ad:c0:ca:d2:21:d6:0e:7f:cf:7f:4c:59:0a: 7d:0d:32:60:0c:f6:51:2e:bb:4d:79:e4:66:10:88:5b:8a:b8: 95:44:eb:e0:eb:c5:cc:4a:30:91:e7:1a:55:4b:93:57:61:26: 19:a8:12:49:3b:23:7b:e7:fe:09:db:07:e6:43:3b:65:c2:44: 6f:7c:75:bd:57:6b:d1:83:6a:e2:9b:c2:07:83:0e:ae:4a:33: ae:f8:99:56 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY3MDM3RjkyQUFCRTFF MTA1MzZEODIxMDE0ODAzQjQwMDQ1MEVGRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7j/qo7wrNsYPGfUdZwega3zaDFLA1JzRGHLPz61d3CUiF0Vf9 fDywqDCy/FqUd0Ey4E9BIwv9OWzdd5wWKOJCJvN3AOL7X2WBRdrrpJ/IXzeVVBMD bOEvto4zDY1PZnLAYSzkU47E57jf0Hj3dp0ibPpr/m0BnTvRGv4nV6deh1VJGHP3 6phbTFRsvOg2tlxbawDortgRdJOZ8WJh5lRWrHCqRfD1Z0TAFD6wCWuudye7NZ3R sWuA1IyqincOGwqsDhkqT+2P4g6zXACzOIfkAmOJTOFWM0uEWV4lBlvCMym/F4ll pQxqVL5K7NJnPsbK3ljDLdo+UVlm+Ohybp0RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZwN/kqq+HhBTbYIQFIA7QARQ79gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1p3Tl9rcXEtSGhCVGJZSVFGSUE3UUFSUTc5Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0hwwDQYJKoZIhvcNAQELBQADggEBAIO0lL5eoA6+G728AFZLJwfseNcS kCbZ5DndIrpsXIZjaOo3/Pu+1YaRNAV+5BZCCDD3c76pFRoJaUKe7Nm+uM992Uco 52xM3qW54O39gdCZNNw0bfg90AxokG4gltJK/CEjacloSEf9TZo5B6nQygt0VYRv usw8Fm/+gyLp8XKhefTStonZUaJhbH9ZyDz9c9jUNN/4ZjMkIvrbzOjirAjLFuY9 xkuMrcDK0iHWDn/Pf0xZCn0NMmAM9lEuu0155GYQiFuKuJVE6+DrxcxKMJHnGlVL k1dhJhmoEkk7I3vn/gnbB+ZDO2XCRG98db1Xa9GDauKbwgeDDq5KM674mVY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:24:17 2025 by rpki-client