$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/CZZ8xORX2DALfqxtmuQScDE9BEs.roa File: CZZ8xORX2DALfqxtmuQScDE9BEs.roa (raw, json) Hash identifier: o26YTBZbohT2Bjn4XRbztkHP5HKFapzklORajvlBREc= Subject key identifier: 09:96:7C:C4:E4:57:D8:30:0B:7E:AC:6D:9A:E4:12:70:31:3D:04:4B Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Certificate serial: 4F Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/CZZ8xORX2DALfqxtmuQScDE9BEs.roa Signing time: Tue 10 Jun 2025 10:48:36 +0000 ROA not before: Tue 10 Jun 2025 10:48:36 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9615 IP address blocks: 203.141.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Validity Not Before: Jun 10 10:48:36 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=09967CC4E457D8300B7EAC6D9AE41270313D044B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:5a:54:bb:6b:f6:1d:b4:80:db:3a:a5:fa: 10:07:db:62:84:5f:e0:54:50:02:ba:93:fe:01:7c: ce:84:cb:c1:07:3c:e3:4d:79:68:70:3f:50:7e:42: 12:70:6e:9e:59:b5:41:a9:99:3c:c2:7d:26:c3:dd: 64:e9:42:46:a7:cb:8d:76:f3:06:c8:90:1d:e3:63: 67:0a:90:3a:fa:aa:e2:f8:c0:ae:2b:c1:8d:fd:41: 46:1a:b1:f1:57:0d:86:77:2e:67:1b:a7:42:c6:18: e8:d9:a9:1e:41:0e:58:02:12:73:32:81:12:a9:fe: 22:f7:ac:2a:4d:84:9a:5c:4c:40:a7:2e:83:95:5f: 22:ff:96:78:37:64:2b:fd:d4:44:4b:1b:66:f4:e5: 47:fc:db:e3:48:51:23:08:75:5c:b5:bc:57:7a:5e: ba:d7:6b:63:f3:95:6b:aa:97:81:f7:27:1a:1f:45: dc:7e:7d:6c:08:f0:fc:17:b7:3e:1b:a2:6e:d2:45: 22:3a:45:6f:68:f6:ef:89:31:6f:ab:87:bf:d5:06: e9:bd:28:ec:05:60:c3:95:f5:e7:4d:52:70:95:5e: a2:2a:22:b4:7a:3d:06:b7:f8:52:22:f4:86:a5:07: 2c:07:6f:92:31:f9:8d:91:00:ff:56:b2:f0:eb:35: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:96:7C:C4:E4:57:D8:30:0B:7E:AC:6D:9A:E4:12:70:31:3D:04:4B X509v3 Authority Key Identifier: keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/CZZ8xORX2DALfqxtmuQScDE9BEs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.141.112.0/20 Signature Algorithm: sha256WithRSAEncryption 81:9f:28:d9:52:6f:7c:04:30:7c:01:78:da:ef:9c:34:49:0a: 01:68:ff:36:a9:73:71:e4:bf:03:3d:10:41:22:c0:02:83:02: 0b:99:70:30:33:b5:18:b3:0a:4b:fc:c0:a2:d8:6e:44:7a:3e: ee:3b:5c:6d:48:e7:6a:3d:03:1c:94:ae:24:33:49:70:b7:b4: b5:ad:81:1b:2b:2f:2b:80:47:9d:af:96:ff:3f:57:45:b7:6a: b3:ba:bf:5d:61:ce:10:7f:e7:28:65:13:87:24:79:3e:d6:97: 12:a4:8b:5e:81:af:3b:29:f7:6a:3f:ca:8f:4c:4e:72:8a:25: d8:e5:6e:60:9a:5b:78:a0:31:3a:26:a7:4f:00:13:cc:76:bc: 08:11:d9:f8:8c:31:bb:14:bf:ed:86:34:20:ef:2b:4d:70:1a: a0:13:57:d5:0c:1d:91:27:a0:5f:1a:b7:85:9b:84:a0:d8:3e: 10:3e:30:8c:2e:ed:d7:6a:1b:75:b5:bd:1e:65:37:f4:66:65: 1d:70:a2:e9:c2:e1:0f:a7:32:e0:24:f7:a5:86:87:af:33:e1: bf:50:12:97:a7:af:be:14:5d:eb:6d:ab:ce:4a:35:60:ca:e1: 29:32:12:87:06:61:8b:53:26:b3:bb:76:a7:7b:7b:f3:cc:15: 3b:df:47:9c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUNG NUMyQUZBNUI1NzY1NzczNTFDNDE5OTAxOEQ0NENEQzJENkRBMB4XDTI1MDYxMDEw NDgzNloXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMDk5NjdDQzRFNDU3RDgz MDBCN0VBQzZEOUFFNDEyNzAzMTNEMDQ0QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMWGWlS7a/YdtIDbOqX6EAfbYoRf4FRQArqT/gF8zoTLwQc84015 aHA/UH5CEnBunlm1QamZPMJ9JsPdZOlCRqfLjXbzBsiQHeNjZwqQOvqq4vjArivB jf1BRhqx8VcNhncuZxunQsYY6NmpHkEOWAISczKBEqn+IvesKk2EmlxMQKcug5Vf Iv+WeDdkK/3UREsbZvTlR/zb40hRIwh1XLW8V3peutdrY/OVa6qXgfcnGh9F3H59 bAjw/Be3PhuibtJFIjpFb2j274kxb6uHv9UG6b0o7AVgw5X1501ScJVeoioitHo9 Brf4UiL0hqUHLAdvkjH5jZEA/1ay8Os1+AkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQJlnzE5FfYMAt+rG2a5BJwMT0ESzAfBgNVHSMEGDAWgBSJz1wq+ltXZXc1HEGZ AY1EzcLW2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzczL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0zQzF0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0z QzF0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zNzMvQ1paOHhPUlgyREFMZnF4dG11UVNjREU5QkVzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMuNcDANBgkqhkiG9w0BAQsFAAOCAQEAgZ8o2VJvfAQwfAF42u+cNEkKAWj/ NqlzceS/Az0QQSLAAoMCC5lwMDO1GLMKS/zAothuRHo+7jtcbUjnaj0DHJSuJDNJ cLe0ta2BGysvK4BHna+W/z9XRbdqs7q/XWHOEH/nKGUThyR5PtaXEqSLXoGvOyn3 aj/Kj0xOcool2OVuYJpbeKAxOianTwATzHa8CBHZ+IwxuxS/7YY0IO8rTXAaoBNX 1QwdkSegXxq3hZuEoNg+ED4wjC7t12obdbW9HmU39GZlHXCi6cLhD6cy4CT3pYaH rzPhv1ASl6evvhRd622rzko1YMrhKTIShwZhi1Mms7t2p3t788wVO99HnA== -----END CERTIFICATE-----Generated at Thu Nov 6 00:21:35 2025 by rpki-client