$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zS5d-34ls06AyLX0hNKnSEJ-7jA.roa File: zS5d-34ls06AyLX0hNKnSEJ-7jA.roa (raw, json) Hash identifier: W88hZMfodtfTyZm+UdZIhQLtW+98EVgvquAJLSnTL0A= Subject key identifier: CD:2E:5D:FB:7E:25:B3:4E:80:C8:B5:F4:84:D2:A7:48:42:7E:EE:30 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 112D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zS5d-34ls06AyLX0hNKnSEJ-7jA.roa Signing time: Sun 01 Mar 2026 02:12:37 +0000 ROA not before: Sun 01 Mar 2026 02:12:37 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 219.114.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4397 (0x112d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:12:37 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=CD2E5DFB7E25B34E80C8B5F484D2A748427EEE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4b:0e:71:21:f7:5c:62:f2:82:dd:d9:9a:dd: 5a:60:16:73:5d:22:b6:39:ef:28:c4:12:b7:74:22: 03:d6:59:83:3a:77:c0:43:e0:46:cc:cd:f5:0e:25: 04:f9:ef:a8:c6:f6:4f:98:33:c2:23:92:ce:27:f2: 40:f8:52:4b:dc:69:61:55:a3:00:15:32:1a:c8:e8: a0:8e:b7:e4:7e:3c:f3:17:9f:f2:c8:10:fd:75:7c: da:2f:e7:06:2b:ef:ce:c0:ea:65:1b:90:d3:74:bf: 58:f2:8a:9c:fe:10:53:f3:76:58:c6:ec:25:15:78: 42:e3:ee:ec:84:f6:34:1f:42:31:66:96:fa:56:81: 87:72:87:ac:31:68:2b:97:8b:b3:9f:dd:ff:b9:d3: 4e:44:85:4a:8c:3b:14:92:79:f2:b3:1e:9e:c3:51: bb:20:f1:a3:0b:e1:00:2b:32:e5:ea:d7:34:e4:a2: 01:7e:e4:67:50:4f:f5:7e:61:1c:23:f4:cd:8c:d6: 54:3c:33:8a:b8:4c:07:90:e7:a6:54:09:53:eb:09: ed:2e:5c:10:15:e5:8c:20:ac:08:51:60:ec:2a:85: d8:9f:0c:e6:eb:30:b3:58:bc:ac:f3:2d:f1:c3:1a: ee:ea:19:50:c6:eb:92:c9:41:70:41:3e:68:c3:f0: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2E:5D:FB:7E:25:B3:4E:80:C8:B5:F4:84:D2:A7:48:42:7E:EE:30 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zS5d-34ls06AyLX0hNKnSEJ-7jA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.185.0/24 Signature Algorithm: sha256WithRSAEncryption c2:b9:8b:8c:ac:fe:6b:5a:77:98:df:39:f0:b7:69:eb:ba:55: 94:eb:f6:c3:00:0d:3d:3f:07:7a:87:67:93:93:56:e1:d8:57: 49:4f:29:5d:e4:5e:35:b6:57:20:ed:29:88:59:a1:20:f9:81: 15:24:c6:d7:fa:64:b8:a0:a6:d1:ee:87:30:ff:ca:14:25:a8: 57:f2:42:bd:20:16:4a:ef:dc:00:21:f2:0b:5c:b5:fe:7c:f8: b9:d7:a8:91:06:90:cc:86:fb:ae:64:46:fb:ff:9c:9e:e1:61: b3:bf:77:36:d3:e1:5b:a4:73:72:0e:00:35:87:e1:80:ed:b5: dc:66:01:6c:e2:7a:38:58:28:6e:de:5b:93:0d:3f:35:a8:bb: 3c:4a:17:a5:7d:97:1c:f4:49:98:2a:fd:2d:3e:f5:94:f1:1d: 9c:b6:8e:1d:fb:75:d3:97:56:d2:ce:bd:3a:dd:59:d1:ba:17: f6:a1:0a:62:9c:64:bc:4e:26:6b:ca:fe:16:69:a2:91:5b:4b: 3b:cb:90:d0:ae:93:9c:10:b1:3f:71:4e:31:52:38:b2:6a:50: 40:fd:bf:28:a1:49:21:95:34:3d:01:e9:5d:f2:1a:e1:ca:0c: fd:5a:9a:32:fc:77:11:99:5d:e4:75:a1:93:2d:e4:ac:9f:a0: c5:a8:65:6d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICES0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjEyMzdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENEMkU1REZCN0UyNUIz NEU4MEM4QjVGNDg0RDJBNzQ4NDI3RUVFMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhSw5xIfdcYvKC3dma3VpgFnNdIrY57yjEErd0IgPWWYM6d8BD 4EbMzfUOJQT576jG9k+YM8Ijks4n8kD4UkvcaWFVowAVMhrI6KCOt+R+PPMXn/LI EP11fNov5wYr787A6mUbkNN0v1jyipz+EFPzdljG7CUVeELj7uyE9jQfQjFmlvpW gYdyh6wxaCuXi7Of3f+5005EhUqMOxSSefKzHp7DUbsg8aML4QArMuXq1zTkogF+ 5GdQT/V+YRwj9M2M1lQ8M4q4TAeQ56ZUCVPrCe0uXBAV5YwgrAhRYOwqhdifDObr MLNYvKzzLfHDGu7qGVDG65LJQXBBPmjD8F2ZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzS5d+34ls06AyLX0hNKnSEJ+7jAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3pTNWQtMzRsczA2QXlMWDBoTktuU0VKLTdqQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADbcrkwDQYJKoZIhvcNAQELBQADggEBAMK5i4ys/mtad5jfOfC3aeu6VZTr 9sMADT0/B3qHZ5OTVuHYV0lPKV3kXjW2VyDtKYhZoSD5gRUkxtf6ZLigptHuhzD/ yhQlqFfyQr0gFkrv3AAh8gtctf58+LnXqJEGkMyG+65kRvv/nJ7hYbO/dzbT4Vuk c3IOADWH4YDttdxmAWziejhYKG7eW5MNPzWouzxKF6V9lxz0SZgq/S0+9ZTxHZy2 jh37ddOXVtLOvTrdWdG6F/ahCmKcZLxOJmvK/hZpopFbSzvLkNCuk5wQsT9xTjFS OLJqUED9vyihSSGVND0B6V3yGuHKDP1amjL8dxGZXeR1oZMt5KyfoMWoZW0= -----END CERTIFICATE-----Generated at Mon Mar 2 05:17:04 2026 by rpki-client