$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/MAZefK8_CMM2yhld6na6hxbMSPk.roa File: MAZefK8_CMM2yhld6na6hxbMSPk.roa (raw, json) Hash identifier: zF7zk+PHo9MxQYP/zPkdBNJYrkPkPrBjlsnUy3ukW30= Subject key identifier: 30:06:5E:7C:AF:3F:08:C3:36:CA:19:5D:EA:76:BA:87:16:CC:48:F9 Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Certificate serial: 73 Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/MAZefK8_CMM2yhld6na6hxbMSPk.roa Signing time: Tue 31 Mar 2026 08:07:18 +0000 ROA not before: Tue 31 Mar 2026 08:07:18 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 23637 IP address blocks: 101.203.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Validity Not Before: Mar 31 08:07:18 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=30065E7CAF3F08C336CA195DEA76BA8716CC48F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9c:a0:40:6f:11:99:7d:34:9d:2c:ae:fc:e4: b0:68:e4:49:f9:4e:b3:49:bc:4d:58:b4:f6:dc:e8: 2c:bb:c8:c8:f3:a7:1e:59:0b:61:e1:e2:cf:4b:bf: 6e:8e:21:a2:bf:78:82:45:43:79:17:a9:1a:57:6b: 8e:7a:c8:18:fe:c8:24:81:6f:2c:3e:98:dd:b2:99: 3e:ad:c0:56:f6:de:f4:71:be:e7:38:05:0c:6e:d4: ae:00:3f:91:5d:3e:f2:e2:72:5f:11:f7:b3:1e:9c: 81:70:2f:da:87:d7:80:3b:40:c6:5b:fc:a3:26:3e: 99:c9:8c:25:11:49:28:6b:86:34:10:8c:73:62:29: 38:ca:ac:79:ca:77:c1:f5:d3:b4:52:de:59:fa:4a: f5:2b:50:7e:b5:d3:d8:b2:3a:cc:e1:c7:cf:44:ec: 22:06:4c:01:9d:d4:2d:f8:66:0d:cd:68:c4:88:5c: d7:f9:e1:4b:45:9e:03:ab:1a:6a:50:b1:6b:53:6d: 2c:93:a9:e5:a3:a7:bd:9f:bc:99:bf:dd:e5:32:03: e9:ed:72:f3:5a:10:99:17:25:12:a6:c0:b8:91:24: 81:82:f5:59:7a:4f:a0:a4:98:97:ba:c1:c6:ed:0c: 82:ac:99:47:cf:b1:4a:29:6f:14:09:3c:db:6b:ef: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:06:5E:7C:AF:3F:08:C3:36:CA:19:5D:EA:76:BA:87:16:CC:48:F9 X509v3 Authority Key Identifier: keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/MAZefK8_CMM2yhld6na6hxbMSPk.roa sbgp-ipAddrBlock: critical IPv4: 101.203.192.0/18 Signature Algorithm: sha256WithRSAEncryption 34:e2:2e:9c:c1:e0:53:61:b8:18:f0:18:af:a2:29:91:6e:b6: d8:28:2e:3a:1d:f4:c8:d5:1a:f9:44:17:da:2a:80:09:d4:02: 8b:6b:1b:5f:df:9c:62:b1:65:52:a8:6a:a8:8c:b7:9f:f7:2e: 0d:ac:63:66:1b:c2:2b:dd:9d:40:24:68:05:fb:44:96:ec:6c: 5f:3b:f1:9a:a8:4a:f5:75:da:bc:bb:80:d4:10:4b:97:9b:80: cb:d1:da:1d:45:c6:a5:3f:d5:b6:90:9d:26:32:04:4c:19:e0: 8f:52:a0:ca:28:74:64:83:86:e5:3a:ad:28:ac:a8:58:e4:61: a8:03:48:7d:7e:b5:5f:9e:e9:db:33:66:8a:fd:f2:43:d9:bc: f2:d1:ed:91:6a:64:a7:18:03:61:10:47:1d:26:77:ac:0f:67: c1:29:6e:fe:93:74:05:3c:ae:3d:2d:06:a4:45:fb:41:c3:96: 3e:cc:92:2d:02:8c:c1:16:b1:88:bc:30:54:1a:36:07:f4:7e: 1f:96:4b:f0:1b:53:4c:85:de:4e:e9:6a:5f:97:67:ed:68:1c: 49:65:48:7f:ed:9f:c9:40:0a:38:db:06:be:b3:8e:c4:17:ca: 26:60:bc:7b:fa:77:8a:5f:e7:5d:67:d5:69:46:74:7e:a2:7e: 39:86:30:61 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI2MDMzMTA4 MDcxOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzAwNjVFN0NBRjNGMDhD MzM2Q0ExOTVERUE3NkJBODcxNkNDNDhGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANqcoEBvEZl9NJ0srvzksGjkSflOs0m8TVi09tzoLLvIyPOnHlkL YeHiz0u/bo4hor94gkVDeRepGldrjnrIGP7IJIFvLD6Y3bKZPq3AVvbe9HG+5zgF DG7UrgA/kV0+8uJyXxH3sx6cgXAv2ofXgDtAxlv8oyY+mcmMJRFJKGuGNBCMc2Ip OMqsecp3wfXTtFLeWfpK9StQfrXT2LI6zOHHz0TsIgZMAZ3ULfhmDc1oxIhc1/nh S0WeA6saalCxa1NtLJOp5aOnvZ+8mb/d5TID6e1y81oQmRclEqbAuJEkgYL1WXpP oKSYl7rBxu0MgqyZR8+xSilvFAk822vvCPcCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQwBl58rz8IwzbKGV3qdrqHFsxI+TAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIxMDQyL01BWmVmSzhfQ01NMnlobGQ2bmE2aHhiTVNQay5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZly8AwDQYJKoZIhvcNAQELBQAD ggEBADTiLpzB4FNhuBjwGK+iKZFuttgoLjod9MjVGvlEF9oqgAnUAotrG1/fnGKx ZVKoaqiMt5/3Lg2sY2YbwivdnUAkaAX7RJbsbF878ZqoSvV12ry7gNQQS5ebgMvR 2h1FxqU/1baQnSYyBEwZ4I9SoMoodGSDhuU6rSisqFjkYagDSH1+tV+e6dszZor9 8kPZvPLR7ZFqZKcYA2EQRx0md6wPZ8Epbv6TdAU8rj0tBqRF+0HDlj7Mki0CjMEW sYi8MFQaNgf0fh+WS/AbU0yF3k7pal+XZ+1oHEllSH/tn8lACjjbBr6zjsQXyiZg vHv6d4pf511n1WlGdH6ifjmGMGE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:16 2026 by rpki-client