$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10029/ZB3pitMwmkqglYT3SLikCO8zhAQ.roa File: ZB3pitMwmkqglYT3SLikCO8zhAQ.roa (raw, json) Hash identifier: cku3gCs7tL4FkfO4CCDbrohYEtuxCc9RVzy+erxpDxs= Subject key identifier: 64:1D:E9:8A:D3:30:9A:4A:A0:95:84:F7:48:B8:A4:08:EF:33:84:04 Certificate issuer: /CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF Certificate serial: 33 Authority key identifier: 2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/ZB3pitMwmkqglYT3SLikCO8zhAQ.roa Signing time: Tue 01 Jul 2025 01:40:24 +0000 ROA not before: Tue 01 Jul 2025 01:40:24 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2514 IP address blocks: 122.129.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF Validity Not Before: Jul 1 01:40:24 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=641DE98AD3309A4AA09584F748B8A408EF338404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:3e:e1:20:0b:55:c8:84:db:9c:e7:3b:95: c8:b8:52:03:e9:2a:cc:b3:6e:11:ac:bb:92:b2:1b: 20:d0:a5:82:c3:2b:2d:ee:3a:1c:0f:a1:c6:fc:fe: f9:40:c0:ff:c9:dc:ce:7c:59:fb:c0:31:9f:20:85: 79:73:1c:44:3f:d6:b8:84:5d:59:03:9b:66:ba:f9: 84:b7:02:bd:5a:7e:57:8b:7d:25:e8:e5:21:6e:ca: 2c:dd:7f:a6:04:69:4b:2c:86:d2:cf:df:f0:e5:c1: b4:0d:1c:99:17:1c:e9:73:87:6e:cc:4e:07:32:7e: e8:ce:07:ea:51:47:5d:c6:94:17:64:4f:65:98:c9: cd:73:1e:a4:a3:38:34:e5:95:e6:54:43:ff:2c:2c: 99:5e:48:6f:e7:36:21:31:e8:96:29:12:c8:45:0d: 56:e5:6f:7f:3a:26:6e:2e:92:b9:ab:62:a3:f3:69: 55:f2:fc:bb:7f:b2:6b:4d:f5:18:a4:0d:56:56:1e: 5f:f9:eb:83:4d:7e:13:2e:0c:fa:18:2f:95:e2:87: 99:1f:2a:45:58:d0:d8:80:e9:a5:2d:a1:07:c6:ec: 7c:17:23:4b:5e:66:11:4d:77:4f:a4:1b:f8:92:a5: db:4e:51:93:ad:5b:69:1d:86:00:39:97:07:79:13: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1D:E9:8A:D3:30:9A:4A:A0:95:84:F7:48:B8:A4:08:EF:33:84:04 X509v3 Authority Key Identifier: keyid:2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/ZB3pitMwmkqglYT3SLikCO8zhAQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.129.224.0/20 Signature Algorithm: sha256WithRSAEncryption a8:5d:2d:41:3f:ce:78:ef:45:22:99:bc:ef:90:4f:28:66:27: c7:64:bb:6e:f1:94:32:07:85:e9:98:52:74:54:2e:3d:d9:6e: 93:6d:cb:50:df:7b:7b:45:1c:3d:91:4e:cb:a0:b3:69:43:13: 6e:71:73:ae:fe:29:4f:ec:07:c8:23:0c:58:68:b5:65:a3:73: db:ab:65:2f:48:06:03:6d:39:d7:bf:36:26:bd:d0:fb:77:f8: bd:1f:30:a5:fe:9a:85:cf:d6:00:18:c5:01:40:57:e9:6e:1c: bb:e1:e6:da:0d:90:fe:29:74:49:71:b0:7b:01:02:3f:1c:3c: 65:a8:d8:cf:b0:f7:a2:8d:1a:f6:ab:e3:b7:00:58:8b:2e:88: 17:a2:dc:6f:76:e6:86:b0:59:9f:fb:99:7b:8a:a5:fd:c4:5f: ce:b7:40:3a:3f:34:38:2a:39:4d:5d:65:14:b1:46:07:b3:ae: 21:56:1e:9e:c6:67:c4:ad:da:6c:f4:70:e1:0c:1a:72:ab:dd: cf:bf:3b:e9:86:f3:32:3b:c4:46:b7:64:66:9c:dd:5b:83:81: ad:2d:75:0c:11:bb:79:a0:7e:15:bd:22:ec:37:5f:eb:9a:33: 6f:29:62:09:ce:c9:d0:8f:fb:44:a4:1d:53:cf:33:be:6c:1c: 29:ba:8b:ca -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRUY2 QTlDOTQ1MEY3MTFCRjMzQUJBNzdBOTVFMjQ2MEQwQTg0NEJGMB4XDTI1MDcwMTAx NDAyNFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNjQxREU5OEFEMzMwOUE0 QUEwOTU4NEY3NDhCOEE0MDhFRjMzODQwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALsoPuEgC1XIhNuc5zuVyLhSA+kqzLNuEay7krIbINClgsMrLe46 HA+hxvz++UDA/8ncznxZ+8AxnyCFeXMcRD/WuIRdWQObZrr5hLcCvVp+V4t9Jejl IW7KLN1/pgRpSyyG0s/f8OXBtA0cmRcc6XOHbsxOBzJ+6M4H6lFHXcaUF2RPZZjJ zXMepKM4NOWV5lRD/ywsmV5Ib+c2ITHolikSyEUNVuVvfzombi6Suatio/NpVfL8 u3+ya031GKQNVlYeX/nrg01+Ey4M+hgvleKHmR8qRVjQ2IDppS2hB8bsfBcjS15m EU13T6Qb+JKl205Rk61baR2GADmXB3kTcmECAwEAAaOCAigwggIkMB0GA1UdDgQW BBRkHemK0zCaSqCVhPdIuKQI7zOEBDAfBgNVHSMEGDAWgBQu9qnJRQ9xG/M6unep XiRg0KhEvzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTAwMjkvTHZhcHlVVVBjUnZ6T3JwM3FWNGtZTkNvUkw4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTHZhcHlVVVBjUnZ6T3JwM3FWNGtZ TkNvUkw4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwMDI5L1pCM3BpdE13bWtxZ2xZVDNTTGlrQ084emhBUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAR6geAwDQYJKoZIhvcNAQELBQADggEBAKhdLUE/znjvRSKZvO+QTyhm J8dku27xlDIHhemYUnRULj3ZbpNty1Dfe3tFHD2RTsugs2lDE25xc67+KU/sB8gj DFhotWWjc9urZS9IBgNtOde/Nia90Pt3+L0fMKX+moXP1gAYxQFAV+luHLvh5toN kP4pdElxsHsBAj8cPGWo2M+w96KNGvar47cAWIsuiBei3G925oawWZ/7mXuKpf3E X863QDo/NDgqOU1dZRSxRgezriFWHp7GZ8St2mz0cOEMGnKr3c+/O+mG8zI7xEa3 ZGac3VuDga0tdQwRu3mgfhW9Iuw3X+uaM28pYgnOydCP+0SkHVPPM75sHCm6i8o= -----END CERTIFICATE-----Generated at Sat Jul 5 09:29:11 2025 by rpki-client