$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MFFp73ITpOJr810y-q3Zxx8ObmU.roa File: MFFp73ITpOJr810y-q3Zxx8ObmU.roa (raw, json) Hash identifier: vsMM4rrbvns+RMx4K1GalqUPRH6kWOOdeX6XzMnfxcE= Subject key identifier: 30:51:69:EF:72:13:A4:E2:6B:F3:5D:32:FA:AD:D9:C7:1F:0E:6E:65 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 14C4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MFFp73ITpOJr810y-q3Zxx8ObmU.roa Signing time: Tue 31 Mar 2026 07:58:15 +0000 ROA not before: Tue 31 Mar 2026 07:58:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5316 (0x14c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=305169EF7213A4E26BF35D32FAADD9C71F0E6E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d8:68:bb:96:e4:40:71:2f:a4:f3:b1:69:08: 38:0c:d9:4e:ae:81:0b:dc:cc:c8:7c:94:4c:09:91: 35:e0:23:c2:30:06:ce:69:85:76:0e:9c:84:e3:b1: 6a:51:e0:3e:7b:e2:0e:d8:91:a4:f4:e8:3e:9a:ef: 98:a8:66:14:88:6d:02:2d:95:95:2e:54:e9:5e:32: ee:06:fd:18:fd:bd:45:ee:a1:74:1b:fc:a4:e7:0c: 8e:59:71:a9:70:52:39:a8:93:37:b2:00:0a:92:2b: 8a:cb:eb:74:86:a7:da:f4:be:00:87:5a:68:32:89: 74:b2:b3:83:85:66:5d:cb:7d:10:4f:48:19:c1:13: 92:53:f5:e0:f3:dd:40:85:0e:d2:e3:64:72:48:aa: ad:47:db:41:86:15:db:37:37:02:b7:e8:dc:09:67: 2c:4b:71:74:b1:c1:89:16:1b:67:8a:bb:47:b0:f2: ae:0c:97:86:2e:4f:37:11:b3:21:fe:4e:50:5b:c0: 44:4f:83:78:17:dd:06:14:1f:f3:e4:e3:e0:14:2e: f0:11:d4:bb:fa:96:b4:80:10:72:c1:dc:4c:a3:e8: 17:31:c5:c9:e5:4e:19:e8:60:3f:9b:81:4f:8c:4d: e4:de:26:e8:ca:4e:16:36:f2:ad:19:30:32:e9:0d: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:51:69:EF:72:13:A4:E2:6B:F3:5D:32:FA:AD:D9:C7:1F:0E:6E:65 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MFFp73ITpOJr810y-q3Zxx8ObmU.roa sbgp-ipAddrBlock: critical IPv4: 1.78.0.0/22 Signature Algorithm: sha256WithRSAEncryption 50:a8:d1:53:8d:8c:04:14:63:06:a3:bc:99:87:29:9a:2d:d8: dd:6e:1f:c4:a3:66:95:f6:5e:db:64:c0:71:c5:6c:25:9a:95: 6e:ef:3b:42:94:99:ce:df:4c:5e:66:cd:17:c0:e6:6c:7d:1d: 7e:f7:2f:19:50:68:a0:23:a1:ab:5b:ab:79:fd:a8:46:8c:cf: f7:7d:ed:69:bf:15:75:9b:5f:33:9e:48:c8:95:a8:73:ea:bd: 18:11:82:2e:17:d1:58:2b:d9:f2:90:4a:5e:96:0e:f6:d7:97: 8b:74:f4:f1:1f:8c:21:7b:6b:92:fa:59:86:b8:db:31:31:87: 07:a4:67:ed:e4:b1:60:3d:c2:ae:9d:d3:32:f1:b0:a6:d2:2e: 91:d3:85:79:ea:54:c1:29:83:a2:ba:3a:99:3e:33:cf:52:4d: 5c:a3:4c:05:8c:34:4b:50:72:6a:6d:1c:a6:ba:4d:e1:2e:3c: 56:9e:e1:ba:c0:c8:4d:a0:c0:27:53:5b:4b:60:76:75:06:ee: 2b:91:3e:ca:9a:a8:fa:1f:1f:d7:7b:10:bd:f7:48:56:e9:eb: 10:47:be:72:2c:94:4c:ed:13:7b:a4:b3:b6:f2:f3:a7:11:14: 5c:2f:d0:6d:a4:96:6a:c6:61:6f:56:63:43:18:32:39:ea:a2: 71:8b:1f:ae -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMwNTE2OUVGNzIxM0E0 RTI2QkYzNUQzMkZBQUREOUM3MUYwRTZFNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa2Gi7luRAcS+k87FpCDgM2U6ugQvczMh8lEwJkTXgI8IwBs5p hXYOnITjsWpR4D574g7YkaT06D6a75ioZhSIbQItlZUuVOleMu4G/Rj9vUXuoXQb /KTnDI5ZcalwUjmokzeyAAqSK4rL63SGp9r0vgCHWmgyiXSys4OFZl3LfRBPSBnB E5JT9eDz3UCFDtLjZHJIqq1H20GGFds3NwK36NwJZyxLcXSxwYkWG2eKu0ew8q4M l4YuTzcRsyH+TlBbwERPg3gX3QYUH/Pk4+AULvAR1Lv6lrSAEHLB3Eyj6Bcxxcnl ThnoYD+bgU+MTeTeJujKThY28q0ZMDLpDTw/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUMFFp73ITpOJr810y+q3Zxx8ObmUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L01GRnA3M0lUcE9KcjgxMHktcTNaeHg4T2JtVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBTgAwDQYJKoZIhvcNAQELBQADggEB AFCo0VONjAQUYwajvJmHKZot2N1uH8SjZpX2XttkwHHFbCWalW7vO0KUmc7fTF5m zRfA5mx9HX73LxlQaKAjoatbq3n9qEaMz/d97Wm/FXWbXzOeSMiVqHPqvRgRgi4X 0Vgr2fKQSl6WDvbXl4t09PEfjCF7a5L6WYa42zExhwekZ+3ksWA9wq6d0zLxsKbS LpHThXnqVMEpg6K6Opk+M89STVyjTAWMNEtQcmptHKa6TeEuPFae4brAyE2gwCdT W0tgdnUG7iuRPsqaqPofH9d7EL33SFbp6xBHvnIslEztE3uks7by86cRFFwv0G2k lmrGYW9WY0MYMjnqonGLH64= -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:26 2026 by rpki-client