$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/MzPFR8P3zjoi-Jh5nQSKkf4uUHQ.roa File: MzPFR8P3zjoi-Jh5nQSKkf4uUHQ.roa (raw, json) Hash identifier: CO5OJNWZtv8swfgExfHTpr6FjjB3cH83qPYI2Nr99Eg= Subject key identifier: 33:33:C5:47:C3:F7:CE:3A:22:F8:98:79:9D:04:8A:91:FE:2E:50:74 Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Certificate serial: 3E Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/MzPFR8P3zjoi-Jh5nQSKkf4uUHQ.roa Signing time: Tue 31 Mar 2026 08:32:37 +0000 ROA not before: Tue 31 Mar 2026 08:32:37 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18283 IP address blocks: 101.50.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Validity Not Before: Mar 31 08:32:37 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3333C547C3F7CE3A22F898799D048A91FE2E5074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:26:7b:69:b3:58:b9:bf:56:ab:d7:06:75: 2d:1b:f9:ac:f4:58:70:fc:b6:6b:30:75:8a:60:68: 3f:b3:b2:31:d7:ad:70:07:80:22:e1:3e:f9:d0:8c: d6:c4:dc:d1:e4:8b:8f:1a:f5:ec:1e:56:f8:d1:a1: 23:49:fb:28:5d:a8:78:10:c5:a1:67:6a:74:1f:f6: d8:5d:da:4e:69:ef:37:2f:0a:b2:0b:5b:f6:92:93: 10:81:61:0b:9b:62:b4:18:4c:06:96:37:19:cb:5f: 25:1c:ea:af:ea:ce:09:5e:0d:e8:34:4a:e6:fc:87: a5:3e:63:06:46:56:81:5d:9e:79:44:f9:77:7a:68: ed:76:c7:23:76:a3:be:38:82:e7:bd:1d:92:ba:66: 51:46:82:47:fa:01:d7:fa:e2:50:62:7b:39:80:5f: 06:6b:fb:3f:da:9e:b2:ff:1d:bd:80:2d:34:80:da: 53:15:e0:f8:0a:33:31:7f:85:ef:44:1c:2c:40:cb: bb:fb:f6:30:aa:ac:58:94:0c:1c:a9:dd:61:1a:82: 86:da:08:16:83:0e:2b:9f:3b:99:23:32:62:59:49: 32:ba:ad:d6:c6:24:00:d4:1c:30:57:46:b2:96:e0: c0:63:55:ce:ce:6f:7b:0c:71:68:3b:c1:b1:a9:89: 7f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:33:C5:47:C3:F7:CE:3A:22:F8:98:79:9D:04:8A:91:FE:2E:50:74 X509v3 Authority Key Identifier: keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/MzPFR8P3zjoi-Jh5nQSKkf4uUHQ.roa sbgp-ipAddrBlock: critical IPv4: 101.50.32.0/22 Signature Algorithm: sha256WithRSAEncryption b5:42:98:22:01:57:4d:d1:e9:fb:3e:8b:95:26:69:f5:25:c1: 4d:ca:7f:29:f7:11:22:42:54:33:fd:f7:24:7e:fb:c2:68:98: 67:93:03:ed:1f:bb:1a:d4:37:04:f5:d2:e2:a0:43:0f:2e:fb: d5:c1:09:e4:47:0a:4f:9d:80:a7:24:8a:97:11:41:90:a4:57: b8:b5:f5:cd:07:36:44:81:12:ff:0e:d1:0e:0a:1c:b1:48:3d: e9:a7:4a:d5:c3:2a:1b:ba:a8:b9:f4:67:14:9d:7d:9b:0d:55: dd:7b:6f:14:72:8e:26:99:f8:25:96:c5:80:2b:ee:f1:53:47: ec:59:a8:87:0b:34:eb:30:b8:b6:c3:6a:fb:66:5d:02:59:f6: be:ea:28:b4:7f:b7:49:6e:b0:54:23:5b:c8:2d:07:a7:c8:1a: 23:66:6f:03:63:72:1f:21:45:17:13:9b:49:65:e9:85:4a:eb: 7b:d0:25:50:16:f6:e4:7c:d4:15:e1:f3:1d:ee:85:5e:c5:9c: c9:8c:d9:8b:2b:53:3b:a2:2f:56:b1:a6:c0:f8:64:a0:6b:72: bc:41:f8:2c:c8:11:7a:8c:0f:fb:5a:55:0d:5d:70:27:26:8f: 57:e1:a5:41:19:2e:48:af:2a:d8:9e:bd:71:f6:64:c1:e7:d3: 83:1c:e4:76 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NDlC QjhENUFFMTE0OTZFNzRBNTk1QUIzRDlGOEY0MDFDNEI1OENDMB4XDTI2MDMzMTA4 MzIzN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzMzM0M1NDdDM0Y3Q0Uz QTIyRjg5ODc5OUQwNDhBOTFGRTJFNTA3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMXbJntps1i5v1ar1wZ1LRv5rPRYcPy2azB1imBoP7OyMdetcAeA IuE++dCM1sTc0eSLjxr17B5W+NGhI0n7KF2oeBDFoWdqdB/22F3aTmnvNy8Ksgtb 9pKTEIFhC5titBhMBpY3GctfJRzqr+rOCV4N6DRK5vyHpT5jBkZWgV2eeUT5d3po 7XbHI3ajvjiC570dkrpmUUaCR/oB1/riUGJ7OYBfBmv7P9qesv8dvYAtNIDaUxXg +AozMX+F70QcLEDLu/v2MKqsWJQMHKndYRqChtoIFoMOK587mSMyYllJMrqt1sYk ANQcMFdGspbgwGNVzs5vewxxaDvBsamJfyUCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQzM8VHw/fOOiL4mHmdBIqR/i5QdDAfBgNVHSMEGDAWgBSEm7jVrhFJbnSllas9 n49AHEtYzDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODA3L2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4TFdNdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4 TFdNdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MDcvTXpQRlI4UDN6am9pLUpoNW5RU0trZjR1VUhRLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmUyIDANBgkqhkiG9w0BAQsFAAOCAQEA tUKYIgFXTdHp+z6LlSZp9SXBTcp/KfcRIkJUM/33JH77wmiYZ5MD7R+7GtQ3BPXS 4qBDDy771cEJ5EcKT52ApySKlxFBkKRXuLX1zQc2RIES/w7RDgocsUg96adK1cMq G7qoufRnFJ19mw1V3XtvFHKOJpn4JZbFgCvu8VNH7Fmohws06zC4tsNq+2ZdAln2 vuootH+3SW6wVCNbyC0Hp8gaI2ZvA2NyHyFFFxObSWXphUrre9AlUBb25HzUFeHz He6FXsWcyYzZiytTO6IvVrGmwPhkoGtyvEH4LMgReowP+1pVDV1wJyaPV+GlQRku SK8q2J69cfZkwefTgxzkdg== -----END CERTIFICATE-----Generated at Tue Apr 7 22:26:38 2026 by rpki-client