$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/MN6SXOGYtiaumGvaMeEQ-QdaOPY.roa File: MN6SXOGYtiaumGvaMeEQ-QdaOPY.roa (raw, json) Hash identifier: 9pkKAVU4l61hu7UVeqPwpf+3Y5wLALTh9s2LCQnhnHg= Subject key identifier: 30:DE:92:5C:E1:98:B6:26:AE:98:6B:DA:31:E1:10:F9:07:5A:38:F6 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 013E Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/MN6SXOGYtiaumGvaMeEQ-QdaOPY.roa Signing time: Tue 31 Mar 2026 07:52:57 +0000 ROA not before: Tue 31 Mar 2026 07:52:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 202.234.155.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:52:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=30DE925CE198B626AE986BDA31E110F9075A38F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:8d:66:12:47:05:fc:b4:cb:fb:dd:81:03: 15:fe:9f:ce:37:af:8d:a7:9c:e6:55:0b:ce:e4:02: 77:a4:6f:c9:f6:3d:2e:ad:8a:30:2a:a3:be:1e:a4: 77:ef:ee:1d:d5:d1:60:2f:bb:21:02:4c:7f:ee:d9: 21:b3:11:7c:d6:b8:ad:e2:87:6f:91:3f:fe:36:8a: c0:ac:98:61:d2:aa:c7:4e:79:cb:fc:03:77:31:32: 7d:b0:e6:b6:28:7a:77:41:67:1d:fb:c7:85:21:81: d8:a0:f1:2d:73:95:e3:dd:e1:2e:86:a0:a5:aa:f3: 27:58:88:c8:88:c2:37:c9:bc:84:14:00:d1:ec:05: 94:8d:b1:1a:0c:49:f5:d8:56:50:4a:a5:48:3f:af: c6:2a:01:2d:17:84:d4:a9:bf:28:9d:d5:11:8b:31: a4:be:70:ee:c1:ed:72:4b:48:31:45:ec:a1:ec:5a: 1f:4d:b0:00:a9:5b:d8:f8:db:02:7c:65:fe:75:9e: b7:f0:71:b4:d1:50:3f:04:12:31:4e:cb:f3:22:b1: 9b:73:e0:ee:79:90:28:6a:57:a4:2e:18:a7:07:02: bd:fe:b5:58:5c:4d:14:c9:a5:a8:78:df:5b:3e:a2: 87:ea:3f:73:39:6e:4e:b0:8a:bb:66:be:98:84:81: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DE:92:5C:E1:98:B6:26:AE:98:6B:DA:31:E1:10:F9:07:5A:38:F6 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/MN6SXOGYtiaumGvaMeEQ-QdaOPY.roa sbgp-ipAddrBlock: critical IPv4: 202.234.155.0/24 Signature Algorithm: sha256WithRSAEncryption 86:51:e2:1a:cf:1a:a4:c9:6c:7b:22:2c:ce:97:b7:52:22:79: f5:cd:7e:28:94:33:26:54:8e:9a:7c:23:c4:8b:8d:44:b6:28: ba:4b:32:8c:b5:a9:16:3b:02:11:d8:ba:9b:39:35:a5:0f:71: f3:f2:8f:f1:80:4f:f2:3f:bf:df:cf:23:e5:21:00:b5:57:d3: 30:c9:19:95:e7:81:34:b6:f1:67:ae:6c:98:9c:61:64:3c:84: 0f:50:63:aa:d1:e3:9b:ae:06:60:f4:ab:60:62:2a:4b:72:4c: 0d:f4:47:44:d7:75:bc:f6:a8:b0:28:80:81:08:fd:d5:02:f7: 07:a3:92:78:ab:5a:d7:18:91:a0:66:f8:e6:5a:29:d9:5c:03: c7:54:b6:1d:9d:26:50:bd:1d:17:54:e3:e4:e6:62:30:31:89: ed:24:63:bb:c1:44:25:5b:e2:3f:d2:5a:c7:84:82:3b:71:a3: 80:ac:e9:76:8a:d1:8e:b1:1b:47:66:b7:ee:c3:82:5b:6f:e4: ae:e5:cd:d5:1d:3c:03:36:a9:7c:d1:16:d7:47:07:96:7e:35: 66:e2:2e:58:b4:20:f4:e9:13:3d:64:bc:be:d0:84:04:40:95: c8:4a:6c:0b:5c:35:3a:27:b6:9a:e4:64:7c:22:48:0a:8b:0a: d2:34:b1:55 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzUyNTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMwREU5MjVDRTE5OEI2 MjZBRTk4NkJEQTMxRTExMEY5MDc1QTM4RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY5I1mEkcF/LTL+92BAxX+n843r42nnOZVC87kAnekb8n2PS6t ijAqo74epHfv7h3V0WAvuyECTH/u2SGzEXzWuK3ih2+RP/42isCsmGHSqsdOecv8 A3cxMn2w5rYoendBZx37x4Uhgdig8S1zlePd4S6GoKWq8ydYiMiIwjfJvIQUANHs BZSNsRoMSfXYVlBKpUg/r8YqAS0XhNSpvyid1RGLMaS+cO7B7XJLSDFF7KHsWh9N sACpW9j42wJ8Zf51nrfwcbTRUD8EEjFOy/MisZtz4O55kChqV6QuGKcHAr3+tVhc TRTJpah431s+oofqP3M5bk6wirtmvpiEgYG1AgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUMN6SXOGYtiaumGvaMeEQ+QdaOPYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9NTjZTWE9HWXRpYXVtR3ZhTWVFUS1RZGFPUFkucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyuqbMA0GCSqGSIb3DQEBCwUA A4IBAQCGUeIazxqkyWx7IizOl7dSInn1zX4olDMmVI6afCPEi41Etii6SzKMtakW OwIR2LqbOTWlD3Hz8o/xgE/yP7/fzyPlIQC1V9MwyRmV54E0tvFnrmyYnGFkPIQP UGOq0eObrgZg9KtgYipLckwN9EdE13W89qiwKICBCP3VAvcHo5J4q1rXGJGgZvjm WinZXAPHVLYdnSZQvR0XVOPk5mIwMYntJGO7wUQlW+I/0lrHhII7caOArOl2itGO sRtHZrfuw4Jbb+Su5c3VHTwDNql80RbXRweWfjVm4i5YtCD06RM9ZLy+0IQEQJXI SmwLXDU6J7aa5GR8IkgKiwrSNLFV -----END CERTIFICATE-----Generated at Wed Apr 1 15:56:17 2026 by rpki-client