$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BMAGQx18-E4vYBVFPZs9pJXu3mY.roa File: BMAGQx18-E4vYBVFPZs9pJXu3mY.roa (raw, json) Hash identifier: F0VN/wV9UaXRdWReSyIPdz6Fr8GrRmiWrUbDtIC5mgE= Subject key identifier: 04:C0:06:43:1D:7C:F8:4E:2F:60:15:45:3D:9B:3D:A4:95:EE:DE:66 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15F0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BMAGQx18-E4vYBVFPZs9pJXu3mY.roa Signing time: Tue 31 Mar 2026 08:00:44 +0000 ROA not before: Tue 31 Mar 2026 08:00:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.73.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5616 (0x15f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=04C006431D7CF84E2F6015453D9B3DA495EEDE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:35:4f:e1:e9:5b:b6:19:77:76:0e:d7:ec: f6:69:6e:94:7b:2f:49:6f:82:3c:cc:67:d7:2e:b2: 51:16:ad:4d:b5:f4:85:dc:c7:8d:ac:ee:07:6d:47: d2:89:b7:8d:e2:a6:0b:de:ed:4d:56:74:d7:7e:f6: fc:32:32:76:91:a8:9c:c8:1e:75:12:74:9d:7f:22: 9f:ca:95:03:0f:14:f0:e4:4d:c1:3a:27:87:bb:0d: 0c:dc:27:a9:24:38:02:47:72:9f:c3:c1:9f:99:a1: e7:9d:55:18:18:d6:f8:3f:fe:6c:7e:1a:c7:28:ee: 02:13:a6:08:65:4f:fe:10:1b:fd:2d:68:45:fb:9a: 4e:dc:d4:73:81:d6:4b:2b:49:28:fe:a6:2f:c2:80: eb:43:19:68:fe:46:24:65:35:67:49:c7:cc:ee:f2: 9d:4a:02:69:67:94:9f:a1:47:b0:b6:91:9f:1d:52: 51:fa:c6:da:9d:71:6b:e9:4f:3e:b7:be:0b:ce:e1: 35:32:d3:69:71:a2:17:cf:76:b2:1a:97:b3:c1:b4: dd:ca:a2:0b:d5:e9:33:db:9f:8e:11:59:7f:40:d6: f5:c6:ed:7f:5a:5e:66:13:5b:31:67:8a:95:d1:04: 8b:62:e2:b0:d5:ef:0f:ee:88:ed:b8:33:68:d8:80: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C0:06:43:1D:7C:F8:4E:2F:60:15:45:3D:9B:3D:A4:95:EE:DE:66 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BMAGQx18-E4vYBVFPZs9pJXu3mY.roa sbgp-ipAddrBlock: critical IPv4: 1.73.232.0/22 Signature Algorithm: sha256WithRSAEncryption 38:61:2c:4a:89:96:8d:9e:0a:19:67:ef:c5:98:be:0d:2e:1e: f2:bf:ff:f6:5f:02:88:7f:d1:9f:fc:b8:67:ea:ef:6b:fe:c2: 2b:6b:bc:20:41:08:4b:ed:4c:47:60:b2:2f:32:0f:21:56:34: 47:3a:52:b4:75:1d:ac:ff:3c:49:55:e6:d7:aa:ab:07:33:46: 91:65:58:96:08:87:9d:b5:e7:45:9a:4b:28:9c:ce:3b:3c:7f: 70:5c:8f:0f:be:29:eb:19:9a:50:e9:04:90:fa:24:92:50:2c: ae:94:04:41:e3:6f:c9:a7:5f:23:69:31:89:b4:8e:90:67:ed: c0:eb:d1:5c:1e:07:74:6f:b9:14:8d:f2:15:90:38:18:ae:83: b0:3d:be:85:a4:e1:a2:f0:1f:14:7a:e7:d9:9f:ca:02:7d:19: de:95:46:52:ae:51:a4:78:22:ca:70:0a:a9:d2:a4:a4:af:42: b2:61:e2:f7:49:d9:41:d8:f9:4d:bf:ff:5f:36:00:57:b4:7d: 97:93:72:3a:92:af:cf:cf:5e:9d:1c:57:af:e7:1a:95:b1:82: b0:ff:a0:cd:bb:f1:e1:c3:8e:ae:a1:96:b5:22:25:97:9d:8e: ca:15:9d:a8:48:ee:89:de:5a:73:2e:ce:c9:53:11:89:72:24: 1e:7f:bf:e0 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA0QzAwNjQzMUQ3Q0Y4 NEUyRjYwMTU0NTNEOUIzREE0OTVFRURFNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCV9TVP4elbthl3dg7X7PZpbpR7L0lvgjzMZ9cuslEWrU219IXc x42s7gdtR9KJt43ipgve7U1WdNd+9vwyMnaRqJzIHnUSdJ1/Ip/KlQMPFPDkTcE6 J4e7DQzcJ6kkOAJHcp/DwZ+ZoeedVRgY1vg//mx+Gsco7gITpghlT/4QG/0taEX7 mk7c1HOB1ksrSSj+pi/CgOtDGWj+RiRlNWdJx8zu8p1KAmlnlJ+hR7C2kZ8dUlH6 xtqdcWvpTz63vgvO4TUy02lxohfPdrIal7PBtN3KogvV6TPbn44RWX9A1vXG7X9a XmYTWzFnipXRBIti4rDV7w/uiO24M2jYgDvRAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUBMAGQx18+E4vYBVFPZs9pJXu3mYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0JNQUdReDE4LUU0dllCVkZQWnM5cEpYdTNtWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBSegwDQYJKoZIhvcNAQELBQADggEB ADhhLEqJlo2eChln78WYvg0uHvK///ZfAoh/0Z/8uGfq72v+witrvCBBCEvtTEdg si8yDyFWNEc6UrR1Haz/PElV5teqqwczRpFlWJYIh52150WaSyiczjs8f3Bcjw++ KesZmlDpBJD6JJJQLK6UBEHjb8mnXyNpMYm0jpBn7cDr0VweB3RvuRSN8hWQOBiu g7A9voWk4aLwHxR659mfygJ9Gd6VRlKuUaR4IspwCqnSpKSvQrJh4vdJ2UHY+U2/ /182AFe0fZeTcjqSr8/PXp0cV6/nGpWxgrD/oM278eHDjq6hlrUiJZedjsoVnahI 7oneWnMuzslTEYlyJB5/v+A= -----END CERTIFICATE-----Generated at Tue Apr 7 19:47:39 2026 by rpki-client