$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MhX1wWldWYXMM_9xXVf5Dd6pjJM.roa File: MhX1wWldWYXMM_9xXVf5Dd6pjJM.roa (raw, json) Hash identifier: 2uI/j0NYj5Fn1LvcDa5zk/75H/zfuWIntieR2sYgw54= Subject key identifier: 32:15:F5:C1:69:5D:59:85:CC:33:FF:71:5D:57:F9:0D:DE:A9:8C:93 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1856 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MhX1wWldWYXMM_9xXVf5Dd6pjJM.roa Signing time: Tue 31 Mar 2026 08:05:48 +0000 ROA not before: Tue 31 Mar 2026 08:05:48 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6230 (0x1856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:48 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3215F5C1695D5985CC33FF715D57F90DDEA98C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:b6:01:26:c1:ea:88:a0:17:6f:d7:9b:9c: a3:fb:e7:fb:c2:35:ef:47:64:fd:bf:0f:bb:1d:87: 0e:62:77:8b:9c:28:ba:f2:ab:93:ba:9f:76:d1:ca: b5:ae:cb:86:79:8d:b2:4a:e5:fb:0f:b9:72:b1:18: 99:41:ed:b0:c3:de:8f:23:72:96:92:ae:a6:85:ac: 44:25:d4:c1:f5:16:1a:ac:79:09:40:ce:b3:51:f5: a1:b1:33:96:90:e1:27:4f:c9:38:54:e7:2e:e7:a0: 64:ab:16:95:fb:53:75:cd:56:4b:ec:02:9b:ca:26: e3:b9:11:f0:03:d9:2e:a0:5d:6a:87:3b:d8:da:f5: 29:4a:28:19:27:45:c6:85:78:4b:68:6d:a1:f9:07: 03:22:15:24:8e:dd:11:fc:3c:4f:92:a9:f6:47:7a: c3:4f:1f:14:f2:e9:e4:41:de:4f:f5:17:4b:9c:41: 3a:33:95:28:35:56:d1:03:9d:82:42:73:43:64:17: a5:77:02:93:8b:38:43:f1:07:a0:05:b2:79:ae:c3: f9:1f:c4:2e:2e:d0:42:00:e9:5d:82:9f:38:49:87: 8d:74:53:1a:8a:fd:e6:3d:7d:af:61:0b:ce:d8:96: c1:60:3c:80:97:3f:96:b4:e3:3e:97:7c:03:f0:3a: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:15:F5:C1:69:5D:59:85:CC:33:FF:71:5D:57:F9:0D:DE:A9:8C:93 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MhX1wWldWYXMM_9xXVf5Dd6pjJM.roa sbgp-ipAddrBlock: critical IPv4: 1.75.150.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:00:3c:7e:b7:37:99:05:54:6f:9f:91:bd:ff:04:f1:e6:c3: e7:fd:58:f8:57:f3:e5:e8:fb:94:07:b3:82:b7:a1:9c:f6:41: 35:4a:66:0f:ce:fd:a8:93:d3:d3:e8:e1:61:4b:56:d5:8c:f1: 26:a5:17:6c:63:2d:13:72:8b:74:63:ca:54:76:25:13:c3:87: 5c:7c:ea:f8:0c:d9:a2:fa:a9:5f:38:ca:6f:14:d7:db:9b:cb: 24:7e:8d:a6:90:36:67:2f:df:eb:dd:5c:a4:b3:d0:36:57:1e: e6:66:c0:85:d3:c8:2e:4b:fa:f8:71:1c:3c:c2:4a:a6:5e:51: d1:00:ee:0d:0f:d5:23:29:fa:b3:dc:e1:cd:45:74:4f:d8:fa: 43:9f:60:b5:40:8e:65:8f:f0:3a:9f:6d:7b:c6:49:2b:91:08: 22:60:b2:50:8c:26:b2:c1:58:5c:45:c6:e4:73:1f:c3:ae:8a: 19:2a:49:49:94:ad:d8:43:1e:90:45:88:f3:6c:d6:68:1f:82: 40:0d:72:f7:e0:a4:96:ad:bb:74:aa:48:bc:30:f9:3f:3b:bd: be:f9:7e:b0:bd:07:60:65:16:e2:61:b5:a5:27:39:bf:14:a0: ca:8d:ba:42:9c:a1:ce:ae:d6:a6:40:e3:42:12:b7:d9:7a:25: 26:5d:01:fe -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1NDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMyMTVGNUMxNjk1RDU5 ODVDQzMzRkY3MTVENTdGOTBEREVBOThDOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+G7YBJsHqiKAXb9ebnKP75/vCNe9HZP2/D7sdhw5id4ucKLry q5O6n3bRyrWuy4Z5jbJK5fsPuXKxGJlB7bDD3o8jcpaSrqaFrEQl1MH1FhqseQlA zrNR9aGxM5aQ4SdPyThU5y7noGSrFpX7U3XNVkvsApvKJuO5EfAD2S6gXWqHO9ja 9SlKKBknRcaFeEtobaH5BwMiFSSO3RH8PE+SqfZHesNPHxTy6eRB3k/1F0ucQToz lSg1VtEDnYJCc0NkF6V3ApOLOEPxB6AFsnmuw/kfxC4u0EIA6V2CnzhJh410UxqK /eY9fa9hC87YlsFgPICXP5a04z6XfAPwOm5xAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUMhX1wWldWYXMM/9xXVf5Dd6pjJMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L01oWDF3V2xkV1lYTU1fOXhYVmY1RGQ2cGpKTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABS5YwDQYJKoZIhvcNAQELBQADggEB AI4APH63N5kFVG+fkb3/BPHmw+f9WPhX8+Xo+5QHs4K3oZz2QTVKZg/O/aiT09Po 4WFLVtWM8SalF2xjLRNyi3RjylR2JRPDh1x86vgM2aL6qV84ym8U19ubyyR+jaaQ Nmcv3+vdXKSz0DZXHuZmwIXTyC5L+vhxHDzCSqZeUdEA7g0P1SMp+rPc4c1FdE/Y +kOfYLVAjmWP8DqfbXvGSSuRCCJgslCMJrLBWFxFxuRzH8OuihkqSUmUrdhDHpBF iPNs1mgfgkANcvfgpJatu3SqSLww+T87vb75frC9B2BlFuJhtaUnOb8UoMqNukKc oc6u1qZA40ISt9l6JSZdAf4= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:58 2026 by rpki-client