$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKMRDVZxmnAMu_sTUNL4KAm7AJI.roa File: mKMRDVZxmnAMu_sTUNL4KAm7AJI.roa (raw, json) Hash identifier: oMnOvkR5hJeBpdm7jOMiDws1L2W2G88OX1IASUpIjqs= Subject key identifier: 98:A3:11:0D:56:71:9A:70:0C:BB:FB:13:50:D2:F8:28:09:BB:00:92 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 147D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKMRDVZxmnAMu_sTUNL4KAm7AJI.roa Signing time: Tue 31 Mar 2026 07:57:39 +0000 ROA not before: Tue 31 Mar 2026 07:57:39 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 183.74.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5245 (0x147d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:39 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=98A3110D56719A700CBBFB1350D2F82809BB0092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:bd:1e:88:a7:f8:bb:74:64:15:c4:82:16: 44:18:c9:b4:b0:59:fd:ca:b2:5f:e6:8e:db:21:3a: f0:6e:67:26:10:d8:79:6a:95:f0:ba:5b:bd:db:88: 06:c6:29:f9:2a:3d:30:37:1c:4a:d2:13:13:10:d2: ac:fb:1b:cb:d1:7b:05:00:88:ad:24:77:e9:38:65: 64:71:12:5f:53:f9:89:56:4c:7f:56:2b:76:b1:0e: 8d:a8:c9:07:d9:76:44:59:57:b3:fe:b1:72:27:c8: 3f:a1:2f:f2:e5:20:15:d8:dc:69:0b:e2:15:25:e1: be:3b:21:0b:4a:d1:a8:d8:41:fa:1b:19:c3:a4:eb: d4:04:34:43:1e:b0:da:f4:3e:06:05:36:2a:df:da: 48:c4:25:e2:ca:1d:8a:6c:d1:da:64:ae:10:53:a7: de:62:64:61:e3:d7:6a:c8:8b:c2:81:d4:f6:62:76: f6:a6:aa:47:5e:1c:2f:c2:dd:4d:03:ab:d5:02:05: 5a:ef:7c:b0:ad:5e:3e:b4:96:f4:fa:37:57:51:b9: eb:a1:c5:cc:1f:73:51:81:74:f1:be:a9:01:fe:6b: be:8c:91:e0:02:99:79:1c:0f:f9:09:ba:75:0d:36: f3:0c:f5:45:7b:3c:42:c9:e1:46:5f:12:9e:8f:bc: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A3:11:0D:56:71:9A:70:0C:BB:FB:13:50:D2:F8:28:09:BB:00:92 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mKMRDVZxmnAMu_sTUNL4KAm7AJI.roa sbgp-ipAddrBlock: critical IPv4: 183.74.202.0/23 Signature Algorithm: sha256WithRSAEncryption b6:4f:a7:62:2b:c4:cc:16:7c:de:b2:36:b2:c8:3c:2e:6e:0a: cd:8f:83:3c:14:f8:df:7a:ed:62:8a:2e:12:49:46:96:7f:16: dc:f5:5c:d6:27:2a:95:20:5e:1e:81:4a:52:40:71:f4:30:1b: 55:be:88:ec:f5:7b:d5:c7:51:61:12:16:2c:c8:4c:92:1c:ff: 64:ff:cb:ab:f7:6d:a8:75:bf:41:ba:93:c0:90:6d:62:e0:78: 3d:6f:b5:a8:82:24:bf:02:32:f0:e3:c1:3c:a7:cd:26:05:5e: 55:43:70:53:72:3c:da:bc:82:93:55:53:ea:94:07:69:80:72: cf:f6:72:68:7e:7a:ff:d1:45:65:7c:bd:f6:e7:dd:78:d6:7f: 75:a5:f3:dd:dd:5c:77:14:8d:46:67:f6:5a:ea:1c:53:60:10: ee:c4:0d:61:49:f5:ba:4b:0a:9d:c5:23:3d:b3:f4:e3:df:a9: b0:3f:30:9e:83:db:04:fd:b8:6e:12:e8:f8:52:bc:87:9f:98: 3e:89:3c:c3:11:16:2a:46:ed:d4:24:24:f8:68:82:9b:94:a9: 04:e6:75:2b:53:8d:56:a5:96:ce:63:75:de:9a:5f:e1:25:1b: 59:83:c2:df:b4:41:40:9f:dd:66:39:73:a4:25:f1:57:66:ce: fd:2e:54:2b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk4QTMxMTBENTY3MTlB NzAwQ0JCRkIxMzUwRDJGODI4MDlCQjAwOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ8r0eiKf4u3RkFcSCFkQYybSwWf3Ksl/mjtshOvBuZyYQ2Hlq lfC6W73biAbGKfkqPTA3HErSExMQ0qz7G8vRewUAiK0kd+k4ZWRxEl9T+YlWTH9W K3axDo2oyQfZdkRZV7P+sXInyD+hL/LlIBXY3GkL4hUl4b47IQtK0ajYQfobGcOk 69QENEMesNr0PgYFNirf2kjEJeLKHYps0dpkrhBTp95iZGHj12rIi8KB1PZidvam qkdeHC/C3U0Dq9UCBVrvfLCtXj60lvT6N1dRueuhxcwfc1GBdPG+qQH+a76MkeAC mXkcD/kJunUNNvMM9UV7PELJ4UZfEp6PvD6/AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUmKMRDVZxmnAMu/sTUNL4KAm7AJIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L21LTVJEVlp4bW5BTXVfc1RVTkw0S0FtN0FKSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG3SsowDQYJKoZIhvcNAQELBQADggEB ALZPp2IrxMwWfN6yNrLIPC5uCs2PgzwU+N967WKKLhJJRpZ/Ftz1XNYnKpUgXh6B SlJAcfQwG1W+iOz1e9XHUWESFizITJIc/2T/y6v3bah1v0G6k8CQbWLgeD1vtaiC JL8CMvDjwTynzSYFXlVDcFNyPNq8gpNVU+qUB2mAcs/2cmh+ev/RRWV8vfbn3XjW f3Wl893dXHcUjUZn9lrqHFNgEO7EDWFJ9bpLCp3FIz2z9OPfqbA/MJ6D2wT9uG4S 6PhSvIefmD6JPMMRFipG7dQkJPhogpuUqQTmdStTjValls5jdd6aX+ElG1mDwt+0 QUCf3WY5c6Ql8Vdmzv0uVCs= -----END CERTIFICATE-----Generated at Tue Apr 7 22:24:15 2026 by rpki-client