$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MVG3AdyZSYozBE1JjmJkCopjgIg.roa File: MVG3AdyZSYozBE1JjmJkCopjgIg.roa (raw, json) Hash identifier: aMX++mx3k5Bo91GBXR0UUu3eV75Z4IHC9Kzn1rsjwXs= Subject key identifier: 31:51:B7:01:DC:99:49:8A:33:04:4D:49:8E:62:64:0A:8A:63:80:88 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1787 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MVG3AdyZSYozBE1JjmJkCopjgIg.roa Signing time: Tue 31 Mar 2026 08:04:00 +0000 ROA not before: Tue 31 Mar 2026 08:04:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6023 (0x1787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:04:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3151B701DC99498A33044D498E62640A8A638088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3a:25:ae:6c:9c:85:7f:de:e9:c9:2d:ff:78: ae:2f:fb:84:bd:ef:f3:df:1f:59:f9:7c:09:15:22: 7f:cc:53:e7:75:44:67:1e:00:e6:f6:51:60:8b:ca: 2f:a2:18:ac:f8:7a:7c:f2:4a:14:d6:28:36:f2:b6: c0:66:42:a7:f2:a0:9b:7f:09:9d:ee:7a:89:5a:80: e9:1a:4f:27:d6:c5:90:f1:ce:97:69:f2:55:54:a9: fa:21:83:4a:a3:f4:cb:68:a5:32:6a:17:a9:d3:86: 6a:ec:40:be:78:dc:10:c1:9a:fb:eb:57:41:b1:78: c1:36:a9:4d:26:bc:14:65:86:ec:39:26:84:4b:99: 60:b3:26:31:57:95:52:b7:8f:27:2a:c6:a4:bd:3c: 10:9e:15:e3:e9:b3:85:92:f2:02:09:27:3f:90:d8: 62:4b:4b:0e:69:2f:32:3d:d0:0b:c1:6c:ad:4f:f7: 94:07:1a:da:c3:83:a1:19:8c:50:4a:3a:03:18:78: f2:bc:8e:50:68:f4:46:98:89:c2:dd:de:85:c1:9a: 1d:20:19:5f:ca:74:70:04:72:3e:37:7f:d8:a4:24: ef:fe:1f:50:47:4e:60:07:05:0a:af:7b:93:98:9a: b0:90:85:58:62:87:79:ea:ab:d7:fb:11:bf:bb:41: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:51:B7:01:DC:99:49:8A:33:04:4D:49:8E:62:64:0A:8A:63:80:88 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MVG3AdyZSYozBE1JjmJkCopjgIg.roa sbgp-ipAddrBlock: critical IPv4: 1.76.152.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:3f:41:a4:89:e2:57:49:07:82:03:29:64:2a:cb:c0:c7:00: 95:93:45:e2:39:bc:42:b6:3f:37:6c:83:7e:ac:04:9a:5c:2e: 1d:4d:ec:46:52:8f:87:35:99:26:97:4a:76:43:8f:d6:3e:db: fe:5c:ab:e3:d2:93:3d:ec:27:4c:f3:ca:e4:d9:dd:0b:43:57: 99:75:de:99:6c:46:c8:cc:d6:7b:3d:87:cd:c4:f2:6c:18:a6: a1:c0:57:f4:16:85:21:8d:b9:73:83:56:2e:2e:a2:2a:68:ef: a4:0e:bf:b3:6c:b3:22:b8:1e:89:70:01:50:b4:e5:0e:60:7a: 6f:3e:82:5c:f6:9e:e5:e5:3f:4c:ca:f4:5e:5b:21:15:0a:b1: 64:40:71:77:da:2d:1a:51:9c:1a:47:64:70:64:08:44:4b:08: 58:d9:cc:27:85:49:16:18:93:c9:18:33:da:e3:4a:b9:31:3c: a3:e4:f1:b4:9c:21:ab:74:5c:c6:4c:c6:f7:3d:4c:be:b7:53: 4e:1d:53:1f:43:76:af:8c:7b:a4:fa:0c:70:1f:ba:a5:bd:ab: de:4d:cb:e1:b2:05:85:cc:40:e6:48:71:82:c7:3b:f4:dd:e1: 29:03:5b:78:16:ef:f5:1a:56:38:33:b0:a0:30:5c:2d:b0:af: 5c:74:0e:eb -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICF4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA0MDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMxNTFCNzAxREM5OTQ5 OEEzMzA0NEQ0OThFNjI2NDBBOEE2MzgwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhOiWubJyFf97pyS3/eK4v+4S97/PfH1n5fAkVIn/MU+d1RGce AOb2UWCLyi+iGKz4enzyShTWKDbytsBmQqfyoJt/CZ3ueolagOkaTyfWxZDxzpdp 8lVUqfohg0qj9MtopTJqF6nThmrsQL543BDBmvvrV0GxeME2qU0mvBRlhuw5JoRL mWCzJjFXlVK3jycqxqS9PBCeFePps4WS8gIJJz+Q2GJLSw5pLzI90AvBbK1P95QH GtrDg6EZjFBKOgMYePK8jlBo9EaYicLd3oXBmh0gGV/KdHAEcj43f9ikJO/+H1BH TmAHBQqve5OYmrCQhVhih3nqq9f7Eb+7QWkBAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUMVG3AdyZSYozBE1JjmJkCopjgIgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L01WRzNBZHlaU1lvekJFMUpqbUprQ29wamdJZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIBTJgwDQYJKoZIhvcNAQELBQADggEB AJ8/QaSJ4ldJB4IDKWQqy8DHAJWTReI5vEK2Pzdsg36sBJpcLh1N7EZSj4c1mSaX SnZDj9Y+2/5cq+PSkz3sJ0zzyuTZ3QtDV5l13plsRsjM1ns9h83E8mwYpqHAV/QW hSGNuXODVi4uoipo76QOv7NssyK4HolwAVC05Q5gem8+glz2nuXlP0zK9F5bIRUK sWRAcXfaLRpRnBpHZHBkCERLCFjZzCeFSRYYk8kYM9rjSrkxPKPk8bScIat0XMZM xvc9TL63U04dUx9Ddq+Me6T6DHAfuqW9q95Ny+GyBYXMQOZIcYLHO/Td4SkDW3gW 7/UaVjgzsKAwXC2wr1x0Dus= -----END CERTIFICATE-----Generated at Tue Apr 7 22:24:14 2026 by rpki-client