$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r6tOtnrd40kD3a1y7c7VKEE_zxc.roa File: r6tOtnrd40kD3a1y7c7VKEE_zxc.roa (raw, json) Hash identifier: xr1QZ/D6WeOkA+RAcYhONW0tPKGxAFrhmRNeH5bpqhM= Subject key identifier: AF:AB:4E:B6:7A:DD:E3:49:03:DD:AD:72:ED:CE:D5:28:41:3F:CF:17 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E00 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r6tOtnrd40kD3a1y7c7VKEE_zxc.roa Signing time: Tue 01 Apr 2025 02:29:13 +0000 ROA not before: Tue 01 Apr 2025 02:29:13 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3584 (0xe00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:13 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=AFAB4EB67ADDE34903DDAD72EDCED528413FCF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:5f:8b:53:1e:e5:c6:8f:27:43:a3:7c:1d: 00:49:ad:af:30:c7:88:a5:0f:d0:1e:22:9c:17:63: ff:e5:09:07:12:8f:08:32:2b:34:68:85:e3:e7:43: 98:95:f6:bb:a8:54:07:a7:a4:a6:09:45:44:ee:f0: 8b:12:17:a4:36:91:72:ab:2b:2e:23:d9:dc:ac:1f: af:59:2c:f5:6c:f9:0b:df:03:1c:cc:3d:10:ca:b7: 44:27:8a:a2:30:24:55:31:fd:1a:60:64:07:7d:21: f2:be:6c:2a:86:7b:4f:e4:21:db:63:19:00:f9:d6: 46:1a:25:21:01:ed:37:d8:91:48:76:ad:51:ba:13: cd:e3:34:a0:7a:0c:be:f4:b8:2f:d4:e2:83:5e:35: 38:5d:7e:fc:d1:79:d7:04:e7:d7:dd:b4:e0:b7:70: 72:3b:e2:6c:4a:e1:19:44:9a:05:ac:7e:ab:11:bc: ef:fd:61:93:48:bd:15:96:02:ed:86:90:2a:76:89: 86:c6:1a:05:d0:cf:b6:01:9d:1f:01:a0:2b:ac:3a: db:b8:cc:91:db:22:ec:1a:f4:4d:4c:ea:d1:3f:d5: 85:aa:ad:23:e7:cc:9d:3d:50:03:8b:92:6d:da:22: 11:b5:8d:0e:72:4a:24:a0:a8:e6:d6:14:cc:aa:d8: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AB:4E:B6:7A:DD:E3:49:03:DD:AD:72:ED:CE:D5:28:41:3F:CF:17 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r6tOtnrd40kD3a1y7c7VKEE_zxc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.72.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:25:b4:e6:7c:dc:78:8c:b4:a8:2d:d7:d4:24:34:4c:fc:58: a3:b0:2f:82:cb:23:da:a1:9b:e3:03:c9:0f:04:00:83:8a:7b: c8:69:f0:95:30:6a:2a:f4:35:b0:77:43:bd:15:ce:c0:6c:2b: 10:d8:6b:57:92:a9:89:a9:57:62:bf:2f:ac:ad:1a:43:67:93: 08:9a:15:20:45:32:48:94:a8:de:18:a8:d0:4a:fa:f8:c3:2b: f3:d2:62:ca:24:50:55:9e:3a:b4:a5:cf:7c:ab:08:2a:56:12: 98:27:d7:cc:26:e9:b6:77:54:44:41:cb:cd:74:1b:b0:14:51: 88:17:55:e9:00:5a:bc:2c:64:b1:2f:3e:48:0d:21:97:b0:2a: ff:ce:60:c2:bf:f1:f2:2e:95:ad:6d:57:3f:94:7c:dd:9d:3f: 86:7b:99:b6:37:2c:1a:ea:b7:bc:42:5f:fb:5e:d0:95:92:d5: 3d:e3:8b:b8:38:68:ef:49:43:34:15:97:9e:ee:19:76:d5:aa: c1:68:36:4f:b4:c1:3a:74:e8:c7:0c:12:0f:b3:d6:91:d4:3b: 1f:ee:cd:63:a4:2b:b9:3f:8a:07:f6:05:a5:c0:e2:f4:c2:19: fe:7f:d1:be:11:85:27:b3:5e:44:99:a3:7b:d4:3e:8b:01:2a: 0f:2f:01:0a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MTNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFGQUI0RUI2N0FEREUz NDkwM0REQUQ3MkVEQ0VENTI4NDEzRkNGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1y1+LUx7lxo8nQ6N8HQBJra8wx4ilD9AeIpwXY//lCQcSjwgy KzRohePnQ5iV9ruoVAenpKYJRUTu8IsSF6Q2kXKrKy4j2dysH69ZLPVs+QvfAxzM PRDKt0QniqIwJFUx/RpgZAd9IfK+bCqGe0/kIdtjGQD51kYaJSEB7TfYkUh2rVG6 E83jNKB6DL70uC/U4oNeNThdfvzRedcE59fdtOC3cHI74mxK4RlEmgWsfqsRvO/9 YZNIvRWWAu2GkCp2iYbGGgXQz7YBnR8BoCusOtu4zJHbIuwa9E1M6tE/1YWqrSPn zJ09UAOLkm3aIhG1jQ5ySiSgqObWFMyq2E1jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUr6tOtnrd40kD3a1y7c7VKEE/zxcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3I2dE90bnJkNDBrRDNhMXk3YzdWS0VFX3p4Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT0gwDQYJKoZIhvcNAQELBQADggEBAI4ltOZ83HiMtKgt19QkNEz8WKOw L4LLI9qhm+MDyQ8EAIOKe8hp8JUwair0NbB3Q70VzsBsKxDYa1eSqYmpV2K/L6yt GkNnkwiaFSBFMkiUqN4YqNBK+vjDK/PSYsokUFWeOrSlz3yrCCpWEpgn18wm6bZ3 VERBy810G7AUUYgXVekAWrwsZLEvPkgNIZewKv/OYMK/8fIula1tVz+UfN2dP4Z7 mbY3LBrqt7xCX/te0JWS1T3ji7g4aO9JQzQVl57uGXbVqsFoNk+0wTp06McMEg+z 1pHUOx/uzWOkK7k/igf2BaXA4vTCGf5/0b4RhSezXkSZo3vUPosBKg8vAQo= -----END CERTIFICATE-----Generated at Wed Nov 5 21:18:34 2025 by rpki-client