$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZL_TDsw7rAs0yXsMl5NH-pTX7kQ.roa File: ZL_TDsw7rAs0yXsMl5NH-pTX7kQ.roa (raw, json) Hash identifier: 8JsGzddQaRVU/ZXTrsExnqlEeuOVAxGgQ6PgQ7F9iSY= Subject key identifier: 64:BF:D3:0E:CC:3B:AC:0B:34:C9:7B:0C:97:93:47:FA:94:D7:EE:44 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0642 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZL_TDsw7rAs0yXsMl5NH-pTX7kQ.roa Signing time: Tue 31 Mar 2026 07:27:28 +0000 ROA not before: Tue 31 Mar 2026 07:27:28 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 10010 IP address blocks: 219.106.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Mar 31 07:27:28 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=64BFD30ECC3BAC0B34C97B0C979347FA94D7EE44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:fb:1c:c4:e7:0e:4a:a6:31:73:e4:43:1d: 93:67:75:6b:92:c7:c0:5f:82:5a:2e:3b:a9:55:0f: 6b:82:0c:f5:57:a9:69:e8:b5:40:23:42:af:8b:da: c0:01:b4:c7:c5:f6:07:ba:f9:b3:c5:52:1e:4c:82: d0:b7:2d:d5:e6:c4:34:75:7c:df:aa:92:56:e7:5d: b5:5b:97:f1:1e:24:15:08:0a:79:be:e8:11:23:f8: 43:56:e2:c7:65:e9:b1:35:a5:5a:60:0c:fe:ea:f0: 0d:7b:62:e6:c6:8c:f0:d8:3a:11:6d:b6:a1:cc:ff: 14:92:c0:1a:6b:0c:8a:eb:0a:5c:98:63:18:bb:08: 49:34:d4:43:09:32:fa:a4:11:28:e0:ee:5c:5c:47: 90:4f:00:88:15:41:4a:5a:d4:f4:43:ce:dd:8c:51: 0f:30:05:31:9b:ad:a0:6a:52:ad:8b:fd:94:7d:72: 37:22:81:de:02:8e:9b:5e:26:58:a7:41:21:61:65: 21:32:54:00:d9:49:e8:6c:a9:9a:af:5f:6a:e1:6d: 78:b5:55:18:0c:88:fd:19:36:dc:f5:45:b4:44:c3: 05:53:ba:d8:24:ff:a3:ae:0a:59:0a:b3:38:21:5d: fe:df:2a:73:54:36:f6:26:5a:cb:35:1e:f7:0c:64: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:D3:0E:CC:3B:AC:0B:34:C9:7B:0C:97:93:47:FA:94:D7:EE:44 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZL_TDsw7rAs0yXsMl5NH-pTX7kQ.roa sbgp-ipAddrBlock: critical IPv4: 219.106.221.0/24 Signature Algorithm: sha256WithRSAEncryption 59:6b:2a:49:61:2e:a0:6f:79:b5:1c:11:a7:6f:db:11:4d:3b: 2c:8b:e8:14:76:99:57:11:85:5d:ca:56:10:5f:d2:4d:2c:f4: 81:00:9d:b1:08:f6:c7:1d:c6:3a:81:fe:94:70:5b:53:cf:f9: d0:03:d2:2d:59:38:94:f4:a4:a9:80:b1:cd:a4:18:10:1b:97: 31:ce:ae:eb:7b:96:b5:98:76:6e:11:a7:69:fe:9f:da:ea:27: bb:31:3f:47:dc:55:f7:b0:76:e0:f6:69:fb:a9:3c:39:4a:9d: 1b:7d:4b:fa:8b:79:99:88:fe:dd:fc:e6:53:8e:eb:fc:19:e2: b9:66:9b:29:36:70:28:42:28:bd:31:14:42:9c:9e:77:74:23: 68:dd:ea:c0:5b:37:d4:b0:35:78:aa:de:c7:b9:01:9a:a0:3b: 83:bf:45:c0:87:c8:1c:ff:c6:01:7a:de:45:5c:5d:b5:9b:7d: 3e:88:17:c0:04:10:03:40:50:8b:73:0b:c0:49:85:6d:25:9c: ef:33:9c:0b:35:6b:7f:72:59:36:74:05:50:cb:e6:52:b9:03: 7b:18:37:94:33:90:d5:d2:5f:a9:a3:f6:ed:4c:3d:ac:e5:fc: 76:dc:1a:9c:b1:90:1c:41:f9:04:5b:bb:57:e3:c9:57:3b:fe: 80:22:4d:f0 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNjAzMzEw NzI3MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY0QkZEMzBFQ0MzQkFD MEIzNEM5N0IwQzk3OTM0N0ZBOTREN0VFNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMifscxOcOSqYxc+RDHZNndWuSx8BfglouO6lVD2uCDPVXqWno tUAjQq+L2sABtMfF9ge6+bPFUh5MgtC3LdXmxDR1fN+qklbnXbVbl/EeJBUICnm+ 6BEj+ENW4sdl6bE1pVpgDP7q8A17YubGjPDYOhFttqHM/xSSwBprDIrrClyYYxi7 CEk01EMJMvqkESjg7lxcR5BPAIgVQUpa1PRDzt2MUQ8wBTGbraBqUq2L/ZR9cjci gd4CjpteJlinQSFhZSEyVADZSehsqZqvX2rhbXi1VRgMiP0ZNtz1RbREwwVTutgk /6OuClkKszghXf7fKnNUNvYmWss1HvcMZG1DAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUZL/TDsw7rAs0yXsMl5NH+pTX7kQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNTQ1L1pMX1REc3c3ckFzMHlYc01sNU5ILXBUWDdrUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADbat0wDQYJKoZIhvcNAQELBQADggEB AFlrKklhLqBvebUcEadv2xFNOyyL6BR2mVcRhV3KVhBf0k0s9IEAnbEI9scdxjqB /pRwW1PP+dAD0i1ZOJT0pKmAsc2kGBAblzHOrut7lrWYdm4Rp2n+n9rqJ7sxP0fc VfewduD2afupPDlKnRt9S/qLeZmI/t385lOO6/wZ4rlmmyk2cChCKL0xFEKcnnd0 I2jd6sBbN9SwNXiq3se5AZqgO4O/RcCHyBz/xgF63kVcXbWbfT6IF8AEEANAUItz C8BJhW0lnO8znAs1a39yWTZ0BVDL5lK5A3sYN5QzkNXSX6mj9u1MPazl/HbcGpyx kBxB+QRbu1fjyVc7/oAiTfA= -----END CERTIFICATE-----Generated at Fri Apr 17 03:37:36 2026 by rpki-client