$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/nMBDGAj5nA2MnYqv0cXPsRdQxHE.roa File: nMBDGAj5nA2MnYqv0cXPsRdQxHE.roa (raw, json) Hash identifier: LrfqJJyXAEKPHlsLsfdYoPQE9tEXD+mTUjw72k/D5vM= Subject key identifier: 9C:C0:43:18:08:F9:9C:0D:8C:9D:8A:AF:D1:C5:CF:B1:17:50:C4:71 Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Certificate serial: 55 Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/nMBDGAj5nA2MnYqv0cXPsRdQxHE.roa Signing time: Tue 31 Mar 2026 08:23:56 +0000 ROA not before: Tue 31 Mar 2026 08:23:56 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18274 IP address blocks: 210.236.112.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Validity Not Before: Mar 31 08:23:56 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9CC0431808F99C0D8C9D8AAFD1C5CFB11750C471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ba:22:71:c1:75:cd:6c:be:35:86:33:2b:fd: b1:a2:57:57:7d:b7:01:ff:06:47:a7:5b:29:61:f3: 34:f9:0a:73:9b:4d:52:97:25:80:74:6e:67:5b:71: 9a:8a:6d:06:96:c5:d2:62:9b:4d:35:08:d6:4d:e2: 76:b7:cd:08:3b:9e:d9:93:82:d7:f0:09:89:4d:25: 82:ca:3b:0c:ac:ae:f0:a4:b4:03:73:e8:30:ba:e3: 63:0a:62:79:12:29:b8:5b:16:fc:94:d6:ed:64:e6: b1:93:43:ac:9a:c2:7f:85:c1:36:47:f4:8b:3e:18: 77:03:2e:15:df:8c:95:d1:10:26:c3:d5:2f:23:9c: ba:50:68:7d:4c:8f:38:6e:26:da:a2:37:37:5e:ce: 4c:76:17:dd:8c:7a:18:98:9e:d5:c7:3f:ba:34:be: eb:63:45:94:5b:39:70:a3:25:75:32:f1:79:15:d2: d4:18:82:9d:c5:20:b4:d9:a7:d3:86:f1:12:2a:55: fd:35:13:ff:1d:21:ef:d4:8b:01:ba:13:86:46:31: 25:01:e2:03:fd:f6:7b:4a:0c:3b:8c:2a:1c:b4:f3: 38:cb:c0:87:46:39:f3:1c:bc:2d:bb:c6:92:59:5b: b1:36:2f:2c:d2:ff:8c:14:a9:f2:5b:3c:45:28:8b: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C0:43:18:08:F9:9C:0D:8C:9D:8A:AF:D1:C5:CF:B1:17:50:C4:71 X509v3 Authority Key Identifier: keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/nMBDGAj5nA2MnYqv0cXPsRdQxHE.roa sbgp-ipAddrBlock: critical IPv4: 210.236.112.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:a6:6c:6d:a0:61:19:70:0c:d0:21:fc:13:1c:a5:83:99:88: 73:56:da:9d:e5:67:38:cc:f3:30:5d:22:7e:47:7d:c9:0a:38: d4:69:63:5b:f8:08:d9:7c:3f:ca:7d:3d:0b:ce:87:9a:b9:69: d5:24:66:7a:d6:18:c7:eb:dd:78:90:4d:d0:d1:06:c6:0f:42: 24:38:1c:77:80:9d:fc:88:a8:c6:e3:be:7a:ff:61:b3:76:ba: ed:cf:f4:ab:74:76:5d:cf:6e:23:cc:85:22:48:3d:ab:80:fb: d8:ad:df:40:4c:f4:37:59:ca:5f:4a:94:77:04:a5:4c:5d:37: 83:ba:69:1e:c4:76:6c:bb:64:d3:b0:8d:43:9f:81:f1:a1:d6: 62:1e:b6:08:ca:4c:92:cf:06:bc:4c:c1:71:f1:72:36:f1:3f: 8e:23:2f:9a:b9:1d:0e:55:9b:53:5e:30:d8:8c:df:d6:b1:9c: de:98:13:9d:d3:a4:13:0f:d9:f9:43:8e:7b:16:b6:ee:29:8c: 47:0b:83:99:5b:71:af:35:10:00:eb:29:a2:18:5f:a9:2d:7b: cb:2b:c8:4b:ca:2c:8c:2f:e7:da:94:5b:26:36:52:8a:50:6e: a1:a5:bc:36:9c:4a:d7:d3:fb:4a:3e:12:be:f4:1b:33:30:d5: 15:e8:04:90 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDhE MjY1ODgxNUNBM0M0RUU1QTUzRjkxQkE2MTI2OEUzRjRDMEUxMB4XDTI2MDMzMTA4 MjM1NloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOUNDMDQzMTgwOEY5OUMw RDhDOUQ4QUFGRDFDNUNGQjExNzUwQzQ3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOO6InHBdc1svjWGMyv9saJXV323Af8GR6dbKWHzNPkKc5tNUpcl gHRuZ1txmoptBpbF0mKbTTUI1k3idrfNCDue2ZOC1/AJiU0lgso7DKyu8KS0A3Po MLrjYwpieRIpuFsW/JTW7WTmsZNDrJrCf4XBNkf0iz4YdwMuFd+MldEQJsPVLyOc ulBofUyPOG4m2qI3N17OTHYX3Yx6GJie1cc/ujS+62NFlFs5cKMldTLxeRXS1BiC ncUgtNmn04bxEipV/TUT/x0h79SLAboThkYxJQHiA/32e0oMO4wqHLTzOMvAh0Y5 8xy8LbvGkllbsTYvLNL/jBSp8ls8RSiL+PkCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBScwEMYCPmcDYydiq/Rxc+xF1DEcTAfBgNVHSMEGDAWgBSNjSZYgVyjxO5aU/kb phJo4/TA4TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzkzL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9QMHdPRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9Q MHdPRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC83OTMvbk1CREdBajVuQTJNbllxdjBjWFBzUmRReEhFLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNLscDANBgkqhkiG9w0BAQsFAAOCAQEA XqZsbaBhGXAM0CH8Exylg5mIc1baneVnOMzzMF0ifkd9yQo41GljW/gI2Xw/yn09 C86Hmrlp1SRmetYYx+vdeJBN0NEGxg9CJDgcd4Cd/IioxuO+ev9hs3a67c/0q3R2 Xc9uI8yFIkg9q4D72K3fQEz0N1nKX0qUdwSlTF03g7ppHsR2bLtk07CNQ5+B8aHW Yh62CMpMks8GvEzBcfFyNvE/jiMvmrkdDlWbU14w2Izf1rGc3pgTndOkEw/Z+UOO exa27imMRwuDmVtxrzUQAOspohhfqS17yyvIS8osjC/n2pRbJjZSilBuoaW8NpxK 19P7Sj4SvvQbMzDVFegEkA== -----END CERTIFICATE-----Generated at Tue Apr 7 21:01:39 2026 by rpki-client