$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NMChNy0xDA3HIVOtZ0UUFrmBVlA.roa File: NMChNy0xDA3HIVOtZ0UUFrmBVlA.roa (raw, json) Hash identifier: lqg/o/T1ONP/TSS7XoazoMxBgjFTVq7+KI47NkRve9M= Subject key identifier: 34:C0:A1:37:2D:31:0C:0D:C7:21:53:AD:67:45:14:16:B9:81:56:50 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 148D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NMChNy0xDA3HIVOtZ0UUFrmBVlA.roa Signing time: Tue 31 Mar 2026 07:57:46 +0000 ROA not before: Tue 31 Mar 2026 07:57:46 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5261 (0x148d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:46 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=34C0A1372D310C0DC72153AD67451416B9815650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:d0:8c:2a:a1:b6:c1:1a:e7:89:16:9d:35: d3:5f:9e:49:67:ff:47:93:3c:ad:26:5a:53:90:2e: 93:76:21:1a:3f:61:9a:e0:a3:49:e3:ac:ac:6f:26: 4b:1d:ee:ce:1c:22:15:f3:83:84:e5:8f:fa:b0:d6: cb:e1:91:3c:c2:84:27:5e:ed:25:5b:d9:5d:6f:0c: 64:a2:e6:ff:b5:12:b1:85:73:d8:39:b2:ea:c6:32: bf:ae:6d:a1:7c:0a:3e:40:2f:25:7d:ac:51:7b:53: 07:92:f1:36:39:49:94:7f:33:a9:2d:bc:8c:ea:3b: 4f:5a:87:41:8e:35:6e:fc:95:92:05:83:3c:02:71: 16:b0:de:8b:91:30:79:49:dc:eb:d9:ed:b4:a1:38: a8:71:fb:f7:6f:05:a2:dd:d4:1c:7e:db:87:b8:70: cb:ca:c5:5b:a9:5b:87:2e:17:21:65:62:58:94:51: 55:65:af:8c:7d:9c:d5:ac:42:89:64:3a:f4:63:bb: ac:52:74:08:9d:7b:9f:fe:4c:ba:82:a3:9f:58:b4: 4b:17:8d:f6:09:0a:9b:0c:2a:8b:79:a0:34:5f:37: b0:5c:2e:37:8d:ce:a7:d9:fd:ea:aa:02:b9:a7:a1: 53:6a:c2:4b:90:00:e3:da:49:40:00:46:3b:d6:23: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C0:A1:37:2D:31:0C:0D:C7:21:53:AD:67:45:14:16:B9:81:56:50 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NMChNy0xDA3HIVOtZ0UUFrmBVlA.roa sbgp-ipAddrBlock: critical IPv4: 1.78.16.0/23 Signature Algorithm: sha256WithRSAEncryption cd:4f:47:7b:33:5d:e6:7e:70:b8:27:dd:d6:50:7b:df:12:9c: 0a:62:48:f8:2c:4f:80:03:9e:38:93:80:a6:3a:ab:08:37:a0: d4:73:ba:d8:41:7c:f1:69:7a:2b:00:d1:b3:67:c1:66:98:6d: c2:e2:8c:b4:8b:29:e3:bd:98:f6:21:02:4b:0a:d9:65:19:f9: fa:c8:08:bd:f9:b2:32:3c:dd:af:fe:61:00:dd:ee:df:d1:07: 7c:c5:42:f9:f0:3b:b7:31:86:fb:7a:95:7a:54:6e:e0:ee:10: a5:22:00:c0:7f:34:9f:e1:66:5b:9f:41:b0:59:25:13:10:e5: e7:87:a6:9b:a2:8a:22:8f:5c:ff:06:1d:bb:50:db:97:90:7d: 7e:b3:69:bd:35:6a:b7:eb:3b:5d:e5:95:2f:61:87:4b:4d:2e: 66:a0:8c:18:59:cd:71:2a:5d:ec:1a:4b:12:1d:51:f5:ee:d3: 83:39:6c:16:fc:fc:2b:76:c0:f1:a7:ab:fb:8e:e0:b7:80:8d: 38:59:e2:9d:d9:72:33:f8:92:77:37:a7:25:12:4b:bf:40:1a: 33:24:39:a7:22:26:0f:f8:f7:23:c3:16:ff:d2:bf:0f:6e:09: 53:34:e0:88:33:3f:d3:51:96:23:6e:18:57:0c:90:6e:ab:80: b7:45:dc:dc -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3NDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM0QzBBMTM3MkQzMTBD MERDNzIxNTNBRDY3NDUxNDE2Qjk4MTU2NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJjNCMKqG2wRrniRadNdNfnkln/0eTPK0mWlOQLpN2IRo/YZrg o0njrKxvJksd7s4cIhXzg4Tlj/qw1svhkTzChCde7SVb2V1vDGSi5v+1ErGFc9g5 surGMr+ubaF8Cj5ALyV9rFF7UweS8TY5SZR/M6ktvIzqO09ah0GONW78lZIFgzwC cRaw3ouRMHlJ3OvZ7bShOKhx+/dvBaLd1Bx+24e4cMvKxVupW4cuFyFlYliUUVVl r4x9nNWsQolkOvRju6xSdAide5/+TLqCo59YtEsXjfYJCpsMKot5oDRfN7BcLjeN zqfZ/eqqArmnoVNqwkuQAOPaSUAARjvWIw4BAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUNMChNy0xDA3HIVOtZ0UUFrmBVlAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L05NQ2hOeTB4REEzSElWT3RaMFVVRnJtQlZsQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEBThAwDQYJKoZIhvcNAQELBQADggEB AM1PR3szXeZ+cLgn3dZQe98SnApiSPgsT4ADnjiTgKY6qwg3oNRzuthBfPFpeisA 0bNnwWaYbcLijLSLKeO9mPYhAksK2WUZ+frICL35sjI83a/+YQDd7t/RB3zFQvnw O7cxhvt6lXpUbuDuEKUiAMB/NJ/hZlufQbBZJRMQ5eeHppuiiiKPXP8GHbtQ25eQ fX6zab01arfrO13llS9hh0tNLmagjBhZzXEqXewaSxIdUfXu04M5bBb8/Ct2wPGn q/uO4LeAjThZ4p3ZcjP4knc3pyUSS79AGjMkOaciJg/49yPDFv/Svw9uCVM04Igz P9NRliNuGFcMkG6rgLdF3Nw= -----END CERTIFICATE-----Generated at Tue Apr 7 19:44:41 2026 by rpki-client