$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20231/mlZHzwfyRqFF-JAYz8lkJiw6YWE.roa File: mlZHzwfyRqFF-JAYz8lkJiw6YWE.roa (raw, json) Hash identifier: tej3lkibc0rRm1SQw6uaMSUiN8likuN2HpX2TqDoGe4= Subject key identifier: 9A:56:47:CF:07:F2:46:A1:45:F8:90:18:CF:C9:64:26:2C:3A:61:61 Certificate issuer: /CN=ED43E3F7806FB03A649076FB69D33752EC491522 Certificate serial: 17 Authority key identifier: ED:43:E3:F7:80:6F:B0:3A:64:90:76:FB:69:D3:37:52:EC:49:15:22 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/mlZHzwfyRqFF-JAYz8lkJiw6YWE.roa Signing time: Tue 31 Mar 2026 08:45:33 +0000 ROA not before: Tue 31 Mar 2026 08:45:33 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 63805 IP address blocks: 126.52.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED43E3F7806FB03A649076FB69D33752EC491522 Validity Not Before: Mar 31 08:45:33 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9A5647CF07F246A145F89018CFC964262C3A6161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:7a:83:c3:78:9a:ae:7e:a2:50:88:c8:da: 35:d0:10:42:52:50:ce:36:cb:ba:c0:1f:12:96:39: 74:fe:e2:c5:59:4a:b8:5e:69:3d:2a:ee:cb:b2:e8: 2b:b5:4f:18:74:5d:06:bf:ab:39:53:4d:30:f7:a3: ef:08:2d:54:0f:81:6f:6d:e8:ec:3a:da:1d:47:46: 72:65:f3:e8:46:2c:d1:87:3b:74:d9:b0:58:3a:5b: 85:ae:b0:6e:17:a8:63:c0:c5:90:d9:ac:b1:70:df: 89:9c:61:93:78:07:56:eb:be:82:d6:86:33:0c:1e: 49:09:52:a0:7b:b3:e4:0a:13:e8:06:2a:8d:70:36: 5d:38:48:e2:42:03:df:d8:fe:ad:4e:3d:3b:ba:7c: 2d:d4:67:1b:e8:ba:12:b9:98:d5:95:52:75:7d:eb: c1:c7:3c:6d:27:bd:43:31:de:75:2f:6d:5f:a2:5a: 06:71:59:bd:4d:9d:5d:53:d7:7f:21:44:7b:21:28: 33:a6:a8:a9:d8:c4:4a:fa:db:8d:7e:e5:43:f0:c1: 17:27:5c:47:b3:70:66:08:91:d3:dc:3a:f6:c8:62: e7:00:c1:ec:64:f9:4c:9a:b3:d4:f6:82:d1:61:30: c3:32:d8:66:2b:13:d0:69:61:0c:3e:d2:1c:95:26: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:56:47:CF:07:F2:46:A1:45:F8:90:18:CF:C9:64:26:2C:3A:61:61 X509v3 Authority Key Identifier: keyid:ED:43:E3:F7:80:6F:B0:3A:64:90:76:FB:69:D3:37:52:EC:49:15:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/mlZHzwfyRqFF-JAYz8lkJiw6YWE.roa sbgp-ipAddrBlock: critical IPv4: 126.52.24.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:0c:ab:2f:2b:0b:02:83:37:05:48:67:83:82:6c:08:fd:92: 18:0a:2e:71:4f:fb:df:b9:0e:57:db:6d:98:3c:cb:0c:9d:ce: 31:ae:80:e0:89:f7:14:f1:01:9a:07:68:a9:59:cb:0e:34:b4: f8:62:0e:24:e1:c1:aa:d2:fc:f6:99:c6:d6:a2:56:6a:51:51: 95:7a:69:b0:bb:37:70:09:37:e8:98:fa:3e:a2:08:cf:40:23: 82:7c:12:2e:08:12:68:ce:04:ec:e3:6b:b5:9e:b0:d1:3d:15: 3c:91:ff:fb:41:76:82:4d:07:e4:52:56:bf:ad:e9:66:64:60: f7:61:b2:1d:35:d9:ba:51:90:ea:18:51:65:39:9a:09:bb:5c: d1:2e:fa:63:34:c3:28:34:c1:8b:ea:18:f7:99:03:0d:45:5f: c3:95:d4:b9:51:d3:8e:2d:76:dd:62:d2:22:8f:2a:c3:73:b9: c5:f6:91:bb:74:2b:da:09:2d:43:4e:1f:02:d8:ae:c5:b7:54: ed:11:fd:45:28:a0:71:a6:ae:80:7f:b6:04:91:8b:0a:e4:d1: 40:22:e4:37:dc:e4:25:5d:e5:41:8d:50:88:4e:99:13:5c:09: b7:79:53:50:58:81:92:4e:1b:31:3b:8b:ba:50:b6:8c:7e:b1: 09:5b:3e:fb -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRDQz RTNGNzgwNkZCMDNBNjQ5MDc2RkI2OUQzMzc1MkVDNDkxNTIyMB4XDTI2MDMzMTA4 NDUzM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOUE1NjQ3Q0YwN0YyNDZB MTQ1Rjg5MDE4Q0ZDOTY0MjYyQzNBNjE2MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMdieoPDeJqufqJQiMjaNdAQQlJQzjbLusAfEpY5dP7ixVlKuF5p PSruy7LoK7VPGHRdBr+rOVNNMPej7wgtVA+Bb23o7DraHUdGcmXz6EYs0Yc7dNmw WDpbha6wbheoY8DFkNmssXDfiZxhk3gHVuu+gtaGMwweSQlSoHuz5AoT6AYqjXA2 XThI4kID39j+rU49O7p8LdRnG+i6ErmY1ZVSdX3rwcc8bSe9QzHedS9tX6JaBnFZ vU2dXVPXfyFEeyEoM6aoqdjESvrbjX7lQ/DBFydcR7NwZgiR09w69shi5wDB7GT5 TJqz1PaC0WEwwzLYZisT0GlhDD7SHJUmt3ECAwEAAaOCAd0wggHZMB0GA1UdDgQW BBSaVkfPB/JGoUX4kBjPyWQmLDphYTAfBgNVHSMEGDAWgBTtQ+P3gG+wOmSQdvtp 0zdS7EkVIjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMzEvN1VQajk0QnZzRHBra0hiN2FkTTNVdXhKRlNJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN1VQajk0QnZzRHBra0hiN2FkTTNV dXhKRlNJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMjMxL21sWkh6d2Z5UnFGRi1KQVl6OGxrSml3NllXRS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ+NBgwDQYJKoZIhvcNAQELBQAD ggEBABoMqy8rCwKDNwVIZ4OCbAj9khgKLnFP+9+5DlfbbZg8ywydzjGugOCJ9xTx AZoHaKlZyw40tPhiDiThwarS/PaZxtaiVmpRUZV6abC7N3AJN+iY+j6iCM9AI4J8 Ei4IEmjOBOzja7WesNE9FTyR//tBdoJNB+RSVr+t6WZkYPdhsh012bpRkOoYUWU5 mgm7XNEu+mM0wyg0wYvqGPeZAw1FX8OV1LlR044tdt1i0iKPKsNzucX2kbt0K9oJ LUNOHwLYrsW3VO0R/UUooHGmroB/tgSRiwrk0UAi5Dfc5CVd5UGNUIhOmRNcCbd5 U1BYgZJOGzE7i7pQtox+sQlbPvs= -----END CERTIFICATE-----Generated at Tue Apr 7 21:03:23 2026 by rpki-client