$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/z5QRLxsZbutEFG4QKXkpApCfODQ.roa File: z5QRLxsZbutEFG4QKXkpApCfODQ.roa (raw, json) Hash identifier: ci4sj9BrBImDc9Sj6bgItgu6CCJa2wdXW9Cft+J7ads= Subject key identifier: CF:94:11:2F:1B:19:6E:EB:44:14:6E:10:29:79:29:02:90:9F:38:34 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F98 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z5QRLxsZbutEFG4QKXkpApCfODQ.roa Signing time: Tue 10 Jun 2025 11:40:28 +0000 ROA not before: Tue 10 Jun 2025 11:40:28 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3992 (0xf98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:28 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=CF94112F1B196EEB44146E1029792902909F3834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:a3:62:3c:e5:46:91:7b:3c:9d:b5:bb:2b: 57:8f:c3:16:61:81:dc:fc:ba:f5:52:09:3f:8f:ba: 42:29:58:27:ec:77:60:7e:f5:4b:1a:3e:59:23:9e: 5c:7f:21:c6:ea:ee:c4:40:dd:e6:f7:41:0a:68:c4: c4:d9:3b:eb:7e:9e:2b:4e:0e:a5:9b:34:0b:57:32: 0b:2e:8d:d2:9b:9a:df:c8:42:79:08:ab:f3:f4:52: 41:50:71:f6:ba:60:5e:ca:a8:2c:06:1c:f5:e3:5b: 1d:0f:57:0c:ae:54:0e:aa:c5:0a:6f:19:87:df:fb: 6d:88:db:8e:72:76:b1:49:cd:0c:6b:24:68:35:30: 70:b9:cf:f1:e2:c1:c4:4c:6c:f7:24:e0:ea:33:d5: b3:c4:67:68:35:62:f7:99:1e:7e:9c:c1:64:78:35: 7f:85:20:25:9d:02:32:27:f0:53:94:e9:61:c3:b9: 30:b5:a8:31:fb:7d:33:b7:c9:72:46:c0:4e:e2:8c: 87:34:bf:fa:5f:9f:cf:bf:42:5b:f6:ca:4c:57:55: d9:50:f4:1e:5b:df:47:ad:04:6d:9a:50:45:74:12: a3:a6:e4:d1:47:e5:58:df:30:02:4a:3a:d6:5d:ae: b4:22:1d:ce:76:ea:15:25:4f:a9:66:9b:de:3a:f8: 44:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:94:11:2F:1B:19:6E:EB:44:14:6E:10:29:79:29:02:90:9F:38:34 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z5QRLxsZbutEFG4QKXkpApCfODQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.112.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:b3:5a:82:e9:b5:bd:98:15:84:a5:2d:1f:73:61:7b:3a:28: d9:f3:11:aa:3c:59:2e:b3:5d:ba:1f:08:6c:e1:cb:b2:7f:15: ce:20:e5:19:c2:55:fa:02:8f:39:4c:d8:76:96:fd:b3:fe:16: d4:cb:82:67:d0:ea:81:12:5c:2d:3d:e3:34:95:d5:d7:1f:58: 4f:7c:c6:27:ee:27:96:64:fa:85:40:80:2e:9f:0b:8b:ac:57: 7d:e0:1d:77:69:a8:c4:3a:66:b4:fb:02:8b:c1:4c:76:91:af: 88:27:75:fe:69:e2:61:f3:86:fb:71:dc:80:2c:53:d0:e4:5d: 66:69:c7:fc:ff:ed:91:78:43:e2:e1:a2:22:75:86:6a:5a:47: 32:28:54:68:c2:30:ca:d7:85:65:9c:c3:73:25:48:f2:4a:53: 4e:51:1c:f0:03:8b:fa:93:4e:7d:aa:af:15:16:8c:52:e6:7c: ca:0d:ab:f9:5d:ff:e1:d1:47:66:94:4b:84:61:e9:2e:6c:74: 7f:97:9e:62:33:f0:23:a2:13:b9:86:e3:7d:45:ab:41:d5:59: ad:ad:c1:d3:fa:af:7f:69:99:0a:06:c4:ae:5f:6c:c9:8a:78: cb:ec:47:77:8c:1b:50:61:62:03:5a:6f:fc:ea:af:80:82:25: 17:6c:e4:6c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMjhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKENGOTQxMTJGMUIxOTZF RUI0NDE0NkUxMDI5NzkyOTAyOTA5RjM4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCluaNiPOVGkXs8nbW7K1ePwxZhgdz8uvVSCT+PukIpWCfsd2B+ 9UsaPlkjnlx/Icbq7sRA3eb3QQpoxMTZO+t+nitODqWbNAtXMgsujdKbmt/IQnkI q/P0UkFQcfa6YF7KqCwGHPXjWx0PVwyuVA6qxQpvGYff+22I245ydrFJzQxrJGg1 MHC5z/HiwcRMbPck4Ooz1bPEZ2g1YveZHn6cwWR4NX+FICWdAjIn8FOU6WHDuTC1 qDH7fTO3yXJGwE7ijIc0v/pfn8+/Qlv2ykxXVdlQ9B5b30etBG2aUEV0EqOm5NFH 5VjfMAJKOtZdrrQiHc526hUlT6lmm946+ES3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUz5QRLxsZbutEFG4QKXkpApCfODQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3o1UVJMeHNaYnV0RUZHNFFLWGtwQXBDZk9EUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBT3AwDQYJKoZIhvcNAQELBQADggEBAF6zWoLptb2YFYSlLR9zYXs6KNnz Eao8WS6zXbofCGzhy7J/Fc4g5RnCVfoCjzlM2HaW/bP+FtTLgmfQ6oESXC094zSV 1dcfWE98xifuJ5Zk+oVAgC6fC4usV33gHXdpqMQ6ZrT7AovBTHaRr4gndf5p4mHz hvtx3IAsU9DkXWZpx/z/7ZF4Q+LhoiJ1hmpaRzIoVGjCMMrXhWWcw3MlSPJKU05R HPADi/qTTn2qrxUWjFLmfMoNq/ld/+HRR2aUS4Rh6S5sdH+XnmIz8COiE7mG431F q0HVWa2twdP6r39pmQoGxK5fbMmKeMvsR3eMG1BhYgNab/zqr4CCJRds5Gw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:02 2025 by rpki-client