$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pzHAqrB0FP2Jfg1iNKhbrz4cSbg.roa File: pzHAqrB0FP2Jfg1iNKhbrz4cSbg.roa (raw, json) Hash identifier: 9zlecQSHOlFy7wmFpzNWwbQoUdTN9SHarXZN24zg9rk= Subject key identifier: A7:31:C0:AA:B0:74:14:FD:89:7E:0D:62:34:A8:5B:AF:3E:1C:49:B8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F36 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pzHAqrB0FP2Jfg1iNKhbrz4cSbg.roa Signing time: Tue 10 Jun 2025 11:24:36 +0000 ROA not before: Tue 10 Jun 2025 11:24:36 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.108.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3894 (0xf36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:36 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=A731C0AAB07414FD897E0D6234A85BAF3E1C49B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:68:5b:d6:4a:c3:42:66:c7:52:e4:06:3e: ab:9f:22:e2:86:f2:fb:67:23:b9:16:54:fc:c7:be: 3e:5c:66:7e:92:50:04:1d:0c:72:c1:95:db:ab:9a: ad:02:7a:c5:36:3b:0f:fd:82:d7:8b:32:d8:22:b5: 27:f0:d1:0c:c0:37:94:cb:03:19:bb:8f:5b:cc:38: a9:04:9c:f0:c3:8b:c4:4f:ab:ef:0d:4b:6d:a3:da: 57:1e:89:7b:c0:f1:9d:55:8d:bc:99:ad:d5:5c:5b: 76:5d:6d:7c:e1:08:c7:bc:7e:95:b7:f0:28:91:0b: e4:4a:e0:25:cc:6e:8e:c9:9d:9d:7b:cf:8b:03:07: 4a:aa:ac:01:d7:07:82:ac:5f:7a:2e:b6:d0:35:56: 59:e4:c1:cf:8b:ec:ea:0e:ca:ac:e0:aa:3a:7f:bf: 75:8b:1e:4c:9d:da:88:79:b1:4d:8d:1c:70:9d:a4: 87:86:af:83:d6:71:ba:90:1c:c6:2b:d0:5c:d1:dc: e8:b7:2b:67:f3:d7:6d:c8:6b:9f:67:0d:0f:80:55: db:6c:2b:c1:7d:a2:8f:92:72:e7:15:88:db:23:2e: fe:ff:eb:e7:ab:a4:10:ba:26:99:5d:b1:7f:6f:c4: 28:f7:ce:12:b8:a8:42:68:1a:79:59:ac:6a:ef:9b: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:31:C0:AA:B0:74:14:FD:89:7E:0D:62:34:A8:5B:AF:3E:1C:49:B8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pzHAqrB0FP2Jfg1iNKhbrz4cSbg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.160.0/19 Signature Algorithm: sha256WithRSAEncryption 27:42:9e:02:c4:b7:50:e4:23:17:f0:5f:89:cf:fa:2c:de:0e: 49:42:4e:ad:d7:91:79:0a:21:c4:bf:68:e2:d8:a1:58:b1:9e: 40:15:be:11:02:48:55:1e:01:70:1a:e5:10:50:db:3f:08:77: 81:8b:6e:10:ab:f6:21:48:d9:6f:56:3e:dc:ce:01:76:bf:7a: 57:05:44:eb:e9:c2:0f:6b:f6:cd:74:cf:68:1e:f5:3e:ea:ba: 76:6e:82:fc:76:4d:10:55:9f:28:2c:7f:81:30:90:a5:da:f8: 7d:42:65:92:53:a2:18:fc:d6:5b:1d:1b:69:a3:32:b4:80:82: b9:50:a5:2f:ab:8a:1c:e5:48:7b:0a:a9:a3:82:ac:34:69:ce: b4:de:44:b4:c3:30:a5:fc:00:1a:20:5a:ca:35:00:f5:93:89: aa:f9:89:1b:c2:7d:8a:28:e7:ad:4b:26:d1:25:c6:26:56:b8: 56:db:c8:d4:51:ac:85:75:d7:2e:7c:c8:50:8c:a7:d7:a3:a9: fd:b2:a3:f8:77:a6:ad:3a:76:37:0a:4c:5a:a8:21:f6:79:91: 05:a5:00:f0:aa:46:13:ae:08:45:25:79:81:5f:5d:1f:9d:5f: f4:3d:05:50:79:60:e4:43:72:7f:e8:22:5b:ca:9f:72:23:4f: e2:52:8a:07 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDzYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEE3MzFDMEFBQjA3NDE0 RkQ4OTdFMEQ2MjM0QTg1QkFGM0UxQzQ5QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSemhb1krDQmbHUuQGPqufIuKG8vtnI7kWVPzHvj5cZn6SUAQd DHLBldurmq0CesU2Ow/9gteLMtgitSfw0QzAN5TLAxm7j1vMOKkEnPDDi8RPq+8N S22j2lceiXvA8Z1VjbyZrdVcW3ZdbXzhCMe8fpW38CiRC+RK4CXMbo7JnZ17z4sD B0qqrAHXB4KsX3outtA1Vlnkwc+L7OoOyqzgqjp/v3WLHkyd2oh5sU2NHHCdpIeG r4PWcbqQHMYr0FzR3Oi3K2fz123Ia59nDQ+AVdtsK8F9oo+ScucViNsjLv7/6+er pBC6JpldsX9vxCj3zhK4qEJoGnlZrGrvm0w9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpzHAqrB0FP2Jfg1iNKhbrz4cSbgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3B6SEFxckIwRlAySmZnMWlOS2hicno0Y1NiZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxbKAwDQYJKoZIhvcNAQELBQADggEBACdCngLEt1DkIxfwX4nP+izeDklC Tq3XkXkKIcS/aOLYoVixnkAVvhECSFUeAXAa5RBQ2z8Id4GLbhCr9iFI2W9WPtzO AXa/elcFROvpwg9r9s10z2ge9T7qunZugvx2TRBVnygsf4EwkKXa+H1CZZJTohj8 1lsdG2mjMrSAgrlQpS+rihzlSHsKqaOCrDRpzrTeRLTDMKX8ABogWso1APWTiar5 iRvCfYoo561LJtElxiZWuFbbyNRRrIV11y58yFCMp9ejqf2yo/h3pq06djcKTFqo IfZ5kQWlAPCqRhOuCEUleYFfXR+dX/Q9BVB5YORDcn/oIlvKn3IjT+JSigc= -----END CERTIFICATE-----Generated at Sun Jun 22 01:04:04 2025 by rpki-client