$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zp6k-tyu-Zx8EBDMa0OVGevJobY.roa File: zp6k-tyu-Zx8EBDMa0OVGevJobY.roa (raw, json) Hash identifier: b0Lz6LLacwUyMdGejRyBQhFQfWhlcHcPpY46Lp1DY84= Subject key identifier: CE:9E:A4:FA:DC:AE:F9:9C:7C:10:10:CC:6B:43:95:19:EB:C9:A1:B6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D2E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zp6k-tyu-Zx8EBDMa0OVGevJobY.roa Signing time: Tue 01 Apr 2025 02:13:53 +0000 ROA not before: Tue 01 Apr 2025 02:13:53 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:53 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CE9EA4FADCAEF99C7C1010CC6B439519EBC9A1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1f:78:e1:4d:b7:da:cd:1c:9a:a8:f2:49:a9: 60:48:f9:e0:a3:cf:7b:46:3f:5b:53:7b:9f:c7:f9: 76:61:5a:27:69:48:bd:d6:b0:13:f0:77:38:45:93: 07:73:bf:08:e7:21:a6:5d:9a:65:e7:3e:0e:22:40: d3:ef:f7:8e:10:2d:92:d4:b8:b7:54:20:d0:df:44: 87:49:94:43:28:82:d6:0c:9c:03:32:18:69:56:8a: 27:a4:20:5e:c5:f4:c9:72:95:20:b5:d1:49:4b:93: 7c:d8:59:69:bd:03:df:17:2e:cd:e1:a1:20:a5:12: 01:05:a6:c1:66:17:00:50:c9:f5:47:c3:38:4e:98: b6:ac:85:05:e8:0f:3f:f6:15:0d:e3:5f:41:4b:7d: d8:4a:39:b7:b2:a8:af:9d:bd:76:f4:f0:16:fb:3f: b3:aa:8b:b1:70:99:e4:fa:80:5d:6c:41:f6:f7:9e: c6:d3:ff:52:f9:74:94:e0:f2:30:59:1d:76:22:28: 7c:0a:28:4c:0f:0d:27:50:7b:be:59:1e:28:4c:9d: c8:0c:e3:69:be:99:dd:9f:73:bb:57:e5:ca:7c:cf: 64:85:2c:86:66:fe:67:84:9c:83:a0:52:82:4c:10: 72:36:98:00:d0:15:c7:1c:a2:6c:a0:de:fc:86:ee: aa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9E:A4:FA:DC:AE:F9:9C:7C:10:10:CC:6B:43:95:19:EB:C9:A1:B6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zp6k-tyu-Zx8EBDMa0OVGevJobY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.36.0/23 Signature Algorithm: sha256WithRSAEncryption dd:94:a2:e0:8d:00:5a:2f:55:8e:40:1a:f5:ac:54:80:2c:1e: 15:2b:26:87:56:b4:f8:ea:e4:b6:92:16:d3:4a:70:ce:e5:c3: c4:04:21:cb:dd:84:20:b6:6a:fe:77:a0:13:9b:7a:d5:28:72: 7d:94:0b:9e:74:a6:ae:38:f4:b6:97:ba:2d:67:d5:c0:ab:96: 0b:ea:61:4e:67:f3:03:d9:37:fc:1b:6a:bf:77:70:5f:94:fb: 0c:69:4d:52:77:9c:94:24:40:0c:9b:2f:be:6e:da:53:ff:43: 8f:a4:03:d1:d2:f9:0e:71:17:ca:d7:a7:76:70:03:db:3a:f4: a7:41:a4:4c:ca:e1:78:ed:41:e1:72:c7:e2:61:ab:8c:35:7c: 57:19:dd:94:a1:68:72:27:14:96:08:34:4b:2b:ba:c7:da:bb: d5:04:e1:43:dd:48:59:5d:d7:9c:de:4e:e3:b5:3c:98:26:4d: 4d:bc:f3:f2:c2:29:81:6f:a8:b2:8b:1f:73:09:07:5c:fb:d6: 2f:5e:71:1f:da:05:8f:44:35:73:d9:18:7d:ff:c2:32:7e:78: a7:54:94:c3:51:57:e6:8c:e5:dd:d4:77:75:39:15:51:e9:1d: 2d:27:c2:15:64:21:1d:3d:e0:d2:dc:6f:80:52:9c:a1:c5:a9: f0:67:4f:dd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNTNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENFOUVBNEZBRENBRUY5 OUM3QzEwMTBDQzZCNDM5NTE5RUJDOUExQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXH3jhTbfazRyaqPJJqWBI+eCjz3tGP1tTe5/H+XZhWidpSL3W sBPwdzhFkwdzvwjnIaZdmmXnPg4iQNPv944QLZLUuLdUINDfRIdJlEMogtYMnAMy GGlWiiekIF7F9MlylSC10UlLk3zYWWm9A98XLs3hoSClEgEFpsFmFwBQyfVHwzhO mLashQXoDz/2FQ3jX0FLfdhKObeyqK+dvXb08Bb7P7Oqi7FwmeT6gF1sQfb3nsbT /1L5dJTg8jBZHXYiKHwKKEwPDSdQe75ZHihMncgM42m+md2fc7tX5cp8z2SFLIZm /meEnIOgUoJMEHI2mADQFcccomyg3vyG7qoTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzp6k+tyu+Zx8EBDMa0OVGevJobYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3pwNmstdHl1LVp4OEVCRE1hME9WR2V2Sm9iWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTiQwDQYJKoZIhvcNAQELBQADggEBAN2UouCNAFovVY5AGvWsVIAsHhUr JodWtPjq5LaSFtNKcM7lw8QEIcvdhCC2av53oBObetUocn2UC550pq449LaXui1n 1cCrlgvqYU5n8wPZN/wbar93cF+U+wxpTVJ3nJQkQAybL75u2lP/Q4+kA9HS+Q5x F8rXp3ZwA9s69KdBpEzK4XjtQeFyx+Jhq4w1fFcZ3ZShaHInFJYINEsrusfau9UE 4UPdSFld15zeTuO1PJgmTU288/LCKYFvqLKLH3MJB1z71i9ecR/aBY9ENXPZGH3/ wjJ+eKdUlMNRV+aM5d3Ud3U5FVHpHS0nwhVkIR094NLcb4BSnKHFqfBnT90= -----END CERTIFICATE-----Generated at Wed Nov 5 13:52:40 2025 by rpki-client