$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/zXI3rZhA6W5FplfQlsUk7gsJcEg.roa File: zXI3rZhA6W5FplfQlsUk7gsJcEg.roa (raw, json) Hash identifier: 046FTbdP+zUH/mI+RuOSgn6DpbSiWYm5euSBmpHtVvE= Subject key identifier: CD:72:37:AD:98:40:E9:6E:45:A6:57:D0:96:C5:24:EE:0B:09:70:48 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 01BB Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zXI3rZhA6W5FplfQlsUk7gsJcEg.roa Signing time: Wed 01 Oct 2025 01:38:42 +0000 ROA not before: Wed 01 Oct 2025 01:38:42 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 2527 IP address blocks: 150.249.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Oct 1 01:38:42 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=CD7237AD9840E96E45A657D096C524EE0B097048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:a7:36:5a:1b:d3:98:04:be:e4:96:1a:9a: d2:3b:74:53:97:6b:a9:6f:f0:65:c4:ca:b1:b1:84: 0b:44:22:08:f8:09:ff:46:2b:17:12:d4:01:b5:ea: f5:eb:5d:fc:63:4e:75:34:23:47:73:24:67:b5:76: b3:5d:f8:03:a1:8d:9c:56:f0:a3:e8:b0:a6:e0:d2: 0e:31:df:51:b7:b6:ce:9e:e1:07:3f:2a:f3:b7:f1: 99:f5:34:2b:f1:6c:99:91:97:98:1b:e9:a8:2f:be: 9e:1c:a6:25:f2:07:30:17:81:41:0e:4e:58:24:60: d0:78:dd:1f:e3:dc:4a:fc:59:91:7d:58:91:17:84: 99:42:39:ad:1b:03:21:a8:f7:a6:a1:d5:1e:90:07: f2:56:73:42:0b:e9:df:a3:ac:dc:ff:d1:e2:bb:7b: 95:e2:41:e9:0c:6b:d9:1d:b5:7a:cf:65:e0:66:f2: fa:7e:a1:31:6d:29:a1:10:f3:fc:3c:ae:31:52:0e: 14:76:1e:b0:1f:4b:83:56:89:2c:e5:2c:90:52:a0: 9f:4c:1f:83:50:99:00:f0:ba:0d:f5:42:c8:e3:89: ad:c5:5b:58:f5:ed:e1:c5:05:41:c0:1d:d0:e6:76: 7c:b3:a9:85:e5:fb:65:49:90:3a:b6:c4:26:e5:d6: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:72:37:AD:98:40:E9:6E:45:A6:57:D0:96:C5:24:EE:0B:09:70:48 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zXI3rZhA6W5FplfQlsUk7gsJcEg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.249.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:50:39:4a:f1:eb:d1:da:16:02:35:31:6f:3f:88:6c:da:82: da:9f:c3:37:d7:69:31:82:37:86:64:ce:7a:28:5a:45:09:53: 77:f5:5c:11:89:e5:65:29:00:32:28:5d:65:df:2d:3c:70:2a: fb:a6:64:0e:a7:89:6a:86:74:d8:d1:d6:cc:98:26:d7:78:3f: 7a:61:86:e8:34:b2:7b:2c:54:03:77:ce:e4:fe:cd:76:49:48: 67:f3:b6:cb:ee:b6:44:39:80:2f:ca:9d:46:f6:ca:a4:17:94: 12:09:c3:c2:f4:e8:02:3f:f0:27:29:8f:ef:4c:30:2f:82:75: 7e:6a:54:64:b3:84:6a:81:e7:86:59:98:1a:f7:88:4e:04:c4: b6:0a:85:0a:f4:98:f5:3c:a0:af:f9:6b:b7:a8:1c:5c:f2:7a: ea:99:10:5b:98:5c:d1:6a:0b:5d:b7:e9:e9:a4:80:03:00:43: 5a:27:39:7b:4e:dd:60:6d:84:a4:29:c4:df:ab:8d:87:e1:07: c4:71:b9:cb:b3:3a:26:ca:b2:ed:d4:ae:d9:b2:fd:63:8b:65: bc:1f:11:03:63:b1:9f:76:b6:55:02:ab:8a:2a:ac:54:51:c8: bb:08:3a:53:91:5e:7e:87:32:61:1b:a6:f0:46:da:ae:ee:22: c9:c7:92:75 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgICAbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTEwMDEw MTM4NDJaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKENENzIzN0FEOTg0MEU5 NkU0NUE2NTdEMDk2QzUyNEVFMEIwOTcwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDp6c2WhvTmAS+5JYamtI7dFOXa6lv8GXEyrGxhAtEIgj4Cf9G KxcS1AG16vXrXfxjTnU0I0dzJGe1drNd+AOhjZxW8KPosKbg0g4x31G3ts6e4Qc/ KvO38Zn1NCvxbJmRl5gb6agvvp4cpiXyBzAXgUEOTlgkYNB43R/j3Er8WZF9WJEX hJlCOa0bAyGo96ah1R6QB/JWc0IL6d+jrNz/0eK7e5XiQekMa9kdtXrPZeBm8vp+ oTFtKaEQ8/w8rjFSDhR2HrAfS4NWiSzlLJBSoJ9MH4NQmQDwug31Qsjjia3FW1j1 7eHFBUHAHdDmdnyzqYXl+2VJkDq2xCbl1jWPAgMBAAGjggIhMIICHTAdBgNVHQ4E FgQUzXI3rZhA6W5FplfQlsUk7gsJcEgwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My96WEkzclpoQTZXNUZwbGZRbHNVazdnc0pjRWcucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAlvkwDQYJKoZIhvcNAQELBQADggEBABlQOUrx69HaFgI1MW8/iGzagtqfwzfX aTGCN4ZkznooWkUJU3f1XBGJ5WUpADIoXWXfLTxwKvumZA6niWqGdNjR1syYJtd4 P3phhug0snssVAN3zuT+zXZJSGfztsvutkQ5gC/KnUb2yqQXlBIJw8L06AI/8Ccp j+9MMC+CdX5qVGSzhGqB54ZZmBr3iE4ExLYKhQr0mPU8oK/5a7eoHFzyeuqZEFuY XNFqC1236emkgAMAQ1onOXtO3WBthKQpxN+rjYfhB8RxucuzOibKsu3Urtmy/WOL ZbwfEQNjsZ92tlUCq4oqrFRRyLsIOlORXn6HMmEbpvBG2q7uIsnHknU= -----END CERTIFICATE-----Generated at Wed Nov 5 20:26:59 2025 by rpki-client