$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mqBYXxkb9jiXMBS15vzgx1EDF1w.roa File: mqBYXxkb9jiXMBS15vzgx1EDF1w.roa (raw, json) Hash identifier: IdvlmuhJpjTVQSGBkr1ZZuXTVw4ies1D9V74j2M7hvo= Subject key identifier: 9A:A0:58:5F:19:1B:F6:38:97:30:14:B5:E6:FC:E0:C7:51:03:17:5C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1490 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mqBYXxkb9jiXMBS15vzgx1EDF1w.roa Signing time: Tue 31 Mar 2026 07:57:47 +0000 ROA not before: Tue 31 Mar 2026 07:57:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5264 (0x1490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:57:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9AA0585F191BF638973014B5E6FCE0C75103175C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:67:ca:05:21:d7:bf:c7:c1:57:0b:29:66: 88:69:4c:44:d1:3d:80:b6:d7:31:69:81:a5:a2:5f: 2e:2d:84:c9:a1:68:55:9e:37:2e:11:75:ec:ed:9b: 46:95:e2:f0:d4:1a:2b:a6:23:43:c1:97:5f:dc:68: a2:79:a7:13:8d:20:73:14:4e:6d:4a:f3:69:8b:03: d7:65:cf:60:a5:3b:82:fd:18:76:43:6f:ff:8b:23: 6d:84:a2:ab:92:f9:d9:21:17:6c:3e:5b:32:f1:49: 61:6d:1c:aa:60:b2:1b:99:fa:70:01:3d:af:75:2c: a3:3a:21:a6:4b:c2:77:6d:f0:b4:71:52:78:99:49: dc:0b:af:4a:e6:97:8e:11:fc:90:98:f5:3c:c9:2e: be:60:af:fd:5c:fe:51:60:71:b2:62:cf:41:79:19: 0e:de:7a:21:f7:8b:d8:6f:3a:70:73:af:c4:b8:45: c4:e8:76:7c:81:d6:f8:93:69:6d:df:0e:3f:7f:cb: d5:bf:e2:03:ff:f9:aa:af:16:08:13:ed:c2:e4:a5: 24:e8:b5:15:27:6d:b0:79:40:80:d7:36:b4:cf:21: 9e:13:37:9e:6c:d6:ec:f0:c7:f4:4f:0f:87:5f:08: b2:dd:3f:60:28:43:32:bb:d6:a2:5a:a7:f6:85:d1: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A0:58:5F:19:1B:F6:38:97:30:14:B5:E6:FC:E0:C7:51:03:17:5C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mqBYXxkb9jiXMBS15vzgx1EDF1w.roa sbgp-ipAddrBlock: critical IPv4: 1.79.89.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ad:fa:42:e4:9e:1d:80:5f:79:2b:d7:bb:ac:71:22:c9:45: f6:4e:7c:eb:1f:61:0d:56:74:73:b2:bf:5f:d2:7e:2f:77:e4: 35:18:f2:1b:73:8a:ca:95:5f:1d:e9:17:02:43:a8:45:26:2d: 59:38:a2:35:10:25:93:a7:1d:7f:71:35:f2:e3:a5:f3:ac:61: 7f:03:a1:2e:bf:ad:c4:4e:69:54:c7:8b:1a:63:6a:65:2c:a5: 7c:62:bf:21:0f:d0:3e:8a:8e:ed:a0:c6:95:ef:92:08:e6:8a: 5f:a2:cd:1c:a1:8c:14:5c:66:c1:22:b3:12:a5:32:b7:bf:47: 5f:24:58:77:2e:f8:50:bc:84:e4:55:a5:70:f6:3c:a8:f5:50: f4:c4:26:6a:f2:e0:16:f2:89:37:8d:83:92:91:0d:da:cb:18: d1:81:b0:43:eb:31:70:11:cb:29:a8:da:f7:c6:49:af:35:41: f4:65:f5:a4:89:2a:fa:b2:33:ae:00:b2:86:2f:be:8c:6d:1b: 13:fe:da:06:3c:94:52:7e:24:76:5e:6b:09:13:7d:ec:e9:05: 82:95:57:5a:c1:86:0d:49:96:ab:e2:ee:f6:9c:17:db:b2:fd: cf:13:28:67:c6:16:bb:82:33:76:8e:59:6e:d2:97:20:0f:73: e4:ec:10:04 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU3NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlBQTA1ODVGMTkxQkY2 Mzg5NzMwMTRCNUU2RkNFMEM3NTEwMzE3NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH22fKBSHXv8fBVwspZohpTETRPYC21zFpgaWiXy4thMmhaFWe Ny4Rdeztm0aV4vDUGiumI0PBl1/caKJ5pxONIHMUTm1K82mLA9dlz2ClO4L9GHZD b/+LI22EoquS+dkhF2w+WzLxSWFtHKpgshuZ+nABPa91LKM6IaZLwndt8LRxUniZ SdwLr0rml44R/JCY9TzJLr5gr/1c/lFgcbJiz0F5GQ7eeiH3i9hvOnBzr8S4RcTo dnyB1viTaW3fDj9/y9W/4gP/+aqvFggT7cLkpSTotRUnbbB5QIDXNrTPIZ4TN55s 1uzwx/RPD4dfCLLdP2AoQzK71qJap/aF0d+9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUmqBYXxkb9jiXMBS15vzgx1EDF1wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L21xQllYeGtiOWppWE1CUzE1dnpneDFFREYxdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABT1kwDQYJKoZIhvcNAQELBQADggEB ACWt+kLknh2AX3kr17uscSLJRfZOfOsfYQ1WdHOyv1/Sfi935DUY8htzisqVXx3p FwJDqEUmLVk4ojUQJZOnHX9xNfLjpfOsYX8DoS6/rcROaVTHixpjamUspXxivyEP 0D6Kju2gxpXvkgjmil+izRyhjBRcZsEisxKlMre/R18kWHcu+FC8hORVpXD2PKj1 UPTEJmry4BbyiTeNg5KRDdrLGNGBsEPrMXARyymo2vfGSa81QfRl9aSJKvqyM64A soYvvoxtGxP+2gY8lFJ+JHZeawkTfezpBYKVV1rBhg1Jlqvi7vacF9uy/c8TKGfG FruCM3aOWW7SlyAPc+TsEAQ= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:58 2026 by rpki-client