$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/mKoDzEJN4ro4Q3bgjsswSkLK2U4.roa File: mKoDzEJN4ro4Q3bgjsswSkLK2U4.roa (raw, json) Hash identifier: TXNeJaY4TGn8OHrfcTIV3aly+XE8uagCre1Na6L1f6c= Subject key identifier: 98:AA:03:CC:42:4D:E2:BA:38:43:76:E0:8E:CB:30:4A:42:CA:D9:4E Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A Certificate serial: 22 Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/mKoDzEJN4ro4Q3bgjsswSkLK2U4.roa Signing time: Tue 31 Mar 2026 08:44:55 +0000 ROA not before: Tue 31 Mar 2026 08:44:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24253 IP address blocks: 202.79.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A Validity Not Before: Mar 31 08:44:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=98AA03CC424DE2BA384376E08ECB304A42CAD94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:0e:27:30:6c:c1:36:ee:a3:30:61:64:b1: 02:e2:2c:2d:c5:56:98:d3:8b:e0:b6:ef:66:03:9c: 0b:c5:6b:a6:c1:a0:ef:61:88:38:53:d9:97:e2:f9: b9:a1:a8:41:80:6e:b0:87:ba:c0:41:22:87:c2:ee: ef:63:c8:ab:ec:27:8d:1c:23:a0:d6:2d:8d:97:63: 9f:c2:29:2e:ba:0e:e4:c7:c6:d3:7c:07:f3:cf:d8: d5:93:16:22:7e:6f:aa:2c:91:1c:fd:7d:de:fe:a8: 49:a9:21:3a:58:52:80:6a:2d:0b:f2:53:91:a3:eb: 83:2f:64:6b:1a:d7:b0:ad:d4:3c:ae:7e:66:cc:b1: 7a:27:73:37:31:26:13:f1:62:59:0d:83:3a:2f:2a: 20:d0:be:3b:2e:6b:53:55:9e:19:4d:01:13:9f:b0: 51:03:36:e2:ba:d7:47:62:d4:36:85:ef:e3:6a:de: 16:2f:63:67:98:4b:d1:72:7a:21:b5:96:6b:2f:38: 72:bb:37:e1:10:14:c2:0f:0c:4c:1e:b4:0d:8a:c9: cf:9f:bf:0a:70:30:d7:de:8e:0a:c8:3f:61:0a:b6: e7:4f:3d:4d:50:f9:63:f2:51:a9:2e:e1:27:1e:3a: c1:e5:ad:3a:a2:fd:61:27:fc:14:4d:e6:eb:67:3e: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AA:03:CC:42:4D:E2:BA:38:43:76:E0:8E:CB:30:4A:42:CA:D9:4E X509v3 Authority Key Identifier: keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/mKoDzEJN4ro4Q3bgjsswSkLK2U4.roa sbgp-ipAddrBlock: critical IPv4: 202.79.240.0/21 Signature Algorithm: sha256WithRSAEncryption b6:52:51:76:23:d6:d6:57:b1:d9:f4:94:cf:68:5f:52:c0:0a: 39:a5:2e:6e:0d:36:92:20:b6:5f:d5:fd:42:3d:c0:39:68:f8: ed:8e:2e:27:7d:1d:ba:e4:59:6c:5b:06:35:99:b7:6f:2b:18: d3:57:7a:ef:97:a6:3b:4f:ca:81:30:88:22:03:59:fb:1c:bc: 6c:87:18:54:09:37:a4:88:4a:df:f9:f6:0b:47:00:dd:41:e4: 45:16:10:ee:e4:56:9b:03:3c:14:fa:e4:07:68:9f:c2:71:fe: 26:d1:c4:37:c9:31:32:db:92:d5:0f:52:27:2e:71:2c:b3:4e: 1d:1e:23:64:a0:24:85:04:49:92:55:e7:7b:fd:90:34:da:62: f3:bc:ea:83:e0:2e:10:cd:3d:75:cc:d0:64:1b:32:27:b4:66: 0f:7f:ff:3d:b7:57:cb:d6:bf:a2:40:d1:4c:d3:5b:a3:b8:d7: ae:24:c2:f4:ee:78:e4:f7:a1:41:40:83:2c:74:ea:e8:41:cc: 79:19:8a:07:d6:30:cf:24:98:bf:3e:94:95:c3:0d:c4:68:2b: ca:1a:7e:ff:cc:3f:16:c8:bb:9a:7e:92:4d:1f:f9:2a:49:45: e3:e7:e0:20:a9:7c:6a:b5:5d:8e:03:ef:69:4b:6f:0f:e5:cd: df:12:ce:64 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEMy RjBCRTE4MDA4OUE3NTkzRDlFRDM3RDA0RTg1MkVENUEyNTlBMB4XDTI2MDMzMTA4 NDQ1NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOThBQTAzQ0M0MjRERTJC QTM4NDM3NkUwOEVDQjMwNEE0MkNBRDk0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKMqDicwbME27qMwYWSxAuIsLcVWmNOL4LbvZgOcC8VrpsGg72GI OFPZl+L5uaGoQYBusIe6wEEih8Lu72PIq+wnjRwjoNYtjZdjn8IpLroO5MfG03wH 88/Y1ZMWIn5vqiyRHP193v6oSakhOlhSgGotC/JTkaPrgy9kaxrXsK3UPK5+Zsyx eidzNzEmE/FiWQ2DOi8qINC+Oy5rU1WeGU0BE5+wUQM24rrXR2LUNoXv42reFi9j Z5hL0XJ6IbWWay84crs34RAUwg8MTB60DYrJz5+/CnAw196OCsg/YQq25089TVD5 Y/JRqS7hJx46weWtOqL9YSf8FE3m62c+uJ8CAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSYqgPMQk3iujhDduCOyzBKQsrZTjAfBgNVHSMEGDAWgBSUwvC+GACJp1k9ntN9 BOhS7VolmjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTAzL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUxYUpaby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUx YUpaby5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MDMvbUtvRHpFSk40cm80UTNiZ2pzc3dTa0xLMlU0LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pP8DANBgkqhkiG9w0BAQsFAAOCAQEA tlJRdiPW1lex2fSUz2hfUsAKOaUubg02kiC2X9X9Qj3AOWj47Y4uJ30duuRZbFsG NZm3bysY01d675emO0/KgTCIIgNZ+xy8bIcYVAk3pIhK3/n2C0cA3UHkRRYQ7uRW mwM8FPrkB2ifwnH+JtHEN8kxMtuS1Q9SJy5xLLNOHR4jZKAkhQRJklXne/2QNNpi 87zqg+AuEM09dczQZBsyJ7RmD3//PbdXy9a/okDRTNNbo7jXriTC9O545PehQUCD LHTq6EHMeRmKB9YwzySYvz6UlcMNxGgryhp+/8w/Fsi7mn6STR/5KklF4+fgIKl8 arVdjgPvaUtvD+XN3xLOZA== -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:16 2026 by rpki-client