$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/zisrajGTQa11rGE8R9YK-3lZr2k.roa File: zisrajGTQa11rGE8R9YK-3lZr2k.roa (raw, json) Hash identifier: v61Y2NTkyk+M3kH+AeC05ZaWxi9EFRIo8q3WW/w/uBA= Subject key identifier: CE:2B:2B:6A:31:93:41:AD:75:AC:61:3C:47:D6:0A:FB:79:59:AF:69 Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Certificate serial: 2E Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/zisrajGTQa11rGE8R9YK-3lZr2k.roa Signing time: Wed 01 Oct 2025 01:28:34 +0000 ROA not before: Wed 01 Oct 2025 01:28:34 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 59125 IP address blocks: 2401:4d40::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 06:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Validity Not Before: Oct 1 01:28:34 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=CE2B2B6A319341AD75AC613C47D60AFB7959AF69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:de:10:60:3b:da:4d:ff:32:ca:4e:6f:d8: 9b:0f:37:01:0f:8e:f9:50:0c:6b:7e:d6:a7:9a:fd: 18:54:63:b7:78:b5:6d:bb:e3:49:dd:dd:ec:65:31: 1c:21:1c:e0:d6:1a:96:9b:c9:e4:b4:37:56:d2:f1: 72:ab:73:a6:6d:ac:66:19:a8:54:a8:28:bc:18:3c: 66:6e:29:d7:5f:37:9e:c0:5a:09:45:95:4e:0b:bf: 90:4d:8f:34:e9:c8:57:58:75:2c:0c:9a:b9:88:e8: f7:c6:69:86:5e:d5:0e:c4:fc:1a:41:33:ac:15:d7: 25:1d:a5:00:2a:2e:3f:7c:57:c2:1a:0c:09:82:82: 6d:51:97:05:04:e7:e5:aa:47:78:c6:c4:89:35:c9: b3:de:7b:b0:11:37:5f:47:60:20:48:55:c7:5f:71: 9d:61:5f:9e:c8:54:19:4b:4e:0c:79:e3:00:51:07: f7:47:5f:4c:e8:f2:d7:17:cf:5b:da:65:14:73:ab: 75:56:79:0e:2c:95:aa:f1:25:f4:0d:cc:8f:e0:50: cc:f9:55:2b:e4:6b:c8:8b:3b:57:1b:15:8b:03:70: 8f:f6:13:61:95:d3:42:71:14:c3:1f:a2:ba:7a:de: df:73:79:4f:d7:84:c9:25:74:a9:42:c9:8a:1d:e1: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2B:2B:6A:31:93:41:AD:75:AC:61:3C:47:D6:0A:FB:79:59:AF:69 X509v3 Authority Key Identifier: keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/zisrajGTQa11rGE8R9YK-3lZr2k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:4d40::/30 Signature Algorithm: sha256WithRSAEncryption 58:21:f0:a0:3a:c6:80:89:c0:3f:ea:6f:76:98:d6:84:1f:e8: 00:fe:62:a7:5b:48:ff:f2:87:27:33:45:3c:ef:40:4c:63:92: dd:f5:52:d2:33:4a:2f:4c:87:39:a5:a7:cb:0e:4f:36:34:fe: 1f:02:43:68:e0:e4:af:e7:34:fa:35:11:6b:7b:5f:a2:57:7a: a3:24:fa:27:03:3d:6d:f0:9c:0d:d7:0e:eb:19:4b:e8:e8:c3: b5:38:3c:ce:00:2f:31:f0:aa:6a:1c:58:fc:5e:a7:a7:1a:0e: e5:4d:4c:b5:b4:b9:93:ae:bd:25:1b:f6:2e:1a:ba:f5:71:6e: 0d:14:3b:cc:c3:66:5d:9a:8a:f0:7e:7f:22:7a:bf:3c:38:08: 7b:80:70:b9:20:82:3c:f5:17:c0:1c:84:dd:90:7b:9b:3e:a9: d8:4e:4d:0b:9f:fd:50:59:fb:03:72:f9:bc:77:a3:23:b2:2b: cc:00:0c:8f:e5:02:8b:f6:8d:07:3a:74:cb:b6:7d:36:a7:fb: 5a:a4:ec:37:4a:5f:48:e7:16:2b:8e:6b:0a:45:ca:e0:4d:a4: ff:05:1b:a7:78:6f:86:dc:45:cc:aa:26:98:5f:6d:31:1b:84: df:67:d6:1b:71:a6:65:39:66:3d:ce:69:f6:bc:d1:fc:65:c6: 3f:ab:e4:05 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQ0I2 MEI0MEE5OEFFQUUwNTRDQUVFNEMwOUNCN0Q5QUVBREUzRTlEMB4XDTI1MTAwMTAx MjgzNFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0UyQjJCNkEzMTkzNDFB RDc1QUM2MTNDNDdENjBBRkI3OTU5QUY2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANNO3hBgO9pN/zLKTm/Ymw83AQ+O+VAMa37Wp5r9GFRjt3i1bbvj Sd3d7GUxHCEc4NYalpvJ5LQ3VtLxcqtzpm2sZhmoVKgovBg8Zm4p1183nsBaCUWV Tgu/kE2PNOnIV1h1LAyauYjo98Zphl7VDsT8GkEzrBXXJR2lACouP3xXwhoMCYKC bVGXBQTn5apHeMbEiTXJs957sBE3X0dgIEhVx19xnWFfnshUGUtODHnjAFEH90df TOjy1xfPW9plFHOrdVZ5DiyVqvEl9A3Mj+BQzPlVK+RryIs7VxsViwNwj/YTYZXT QnEUwx+iunre33N5T9eEySV0qULJih3hPAcCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTOKytqMZNBrXWsYTxH1gr7eVmvaTAfBgNVHSMEGDAWgBQctgtAqYrq4FTK7kwJ y32a6t4+nTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTEvSExZTFFLbUs2dUJVeXU1TUNjdDltdXJlUHAwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSExZTFFLbUs2dUJVeXU1TUNjdDlt dXJlUHAwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjkxL3ppc3JhakdUUWExMXJHRThSOVlLLTNsWnIyay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQIkAU1AMA0GCSqGSIb3DQEBCwUAA4IBAQBYIfCgOsaAicA/6m92mNaE H+gA/mKnW0j/8ocnM0U870BMY5Ld9VLSM0ovTIc5pafLDk82NP4fAkNo4OSv5zT6 NRFre1+iV3qjJPonAz1t8JwN1w7rGUvo6MO1ODzOAC8x8KpqHFj8XqenGg7lTUy1 tLmTrr0lG/YuGrr1cW4NFDvMw2Zdmorwfn8ier88OAh7gHC5III89RfAHITdkHub PqnYTk0Ln/1QWfsDcvm8d6MjsivMAAyP5QKL9o0HOnTLtn02p/tapOw3Sl9I5xYr jmsKRcrgTaT/BRuneG+G3EXMqiaYX20xG4TfZ9YbcaZlOWY9zmn2vNH8ZcY/q+QF -----END CERTIFICATE-----Generated at Tue Oct 21 08:04:31 2025 by rpki-client