$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mhZxrfaQzhNFQ-7qmm7OFRgB0Hw.roa File: mhZxrfaQzhNFQ-7qmm7OFRgB0Hw.roa (raw, json) Hash identifier: tnkB5R2lNL0ceOrl2YwsLUHENGz95BCbGzPbs9/c7wM= Subject key identifier: 9A:16:71:AD:F6:90:CE:13:45:43:EE:EA:9A:6E:CE:15:18:01:D0:7C Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 01D9 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mhZxrfaQzhNFQ-7qmm7OFRgB0Hw.roa Signing time: Tue 31 Mar 2026 07:54:15 +0000 ROA not before: Tue 31 Mar 2026 07:54:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4694 IP address blocks: 210.189.64.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Mar 31 07:54:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9A1671ADF690CE134543EEEA9A6ECE151801D07C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:4a:18:c2:97:5d:c9:83:d8:05:1d:0e:f8: 27:b6:2c:93:de:7b:3f:5a:34:3b:12:5c:b5:16:35: 58:4c:7e:c4:1d:0c:e8:8e:dc:86:1e:af:d1:b4:64: af:0d:91:a0:a7:6a:fd:f5:f3:44:de:6f:46:a0:66: b3:dd:cd:16:5c:00:79:8d:21:21:af:a2:2a:70:ae: c0:af:9a:d6:d9:dc:19:aa:79:f7:b0:b7:ea:65:30: 30:98:52:4f:c6:42:fd:eb:2a:91:b9:96:22:d5:94: db:b4:c4:e1:51:0b:57:c3:16:43:2b:a0:ae:9b:6f: 01:fe:7b:ef:6b:33:00:c5:c6:6f:a0:e2:0c:f8:66: 10:24:30:ad:a3:a6:59:dd:92:c5:e8:67:db:37:67: f8:04:27:7c:7e:78:3c:a3:98:76:0b:01:4e:a7:db: df:db:61:8e:fd:ed:a6:a9:db:95:4f:77:1d:cd:c8: c5:26:98:a3:c4:07:a8:82:4e:33:4a:fc:99:aa:ba: fa:79:ef:0f:97:52:c3:10:72:16:b6:53:82:fb:0e: a6:4f:49:08:d4:e1:e1:98:f1:5e:39:0b:dd:d7:42: a6:c5:f3:92:79:43:70:03:19:c8:ca:89:0d:21:f3: 34:18:66:43:2e:c8:e4:22:ca:6a:e0:55:a7:79:a8: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:16:71:AD:F6:90:CE:13:45:43:EE:EA:9A:6E:CE:15:18:01:D0:7C X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mhZxrfaQzhNFQ-7qmm7OFRgB0Hw.roa sbgp-ipAddrBlock: critical IPv4: 210.189.64.0/19 Signature Algorithm: sha256WithRSAEncryption b4:41:94:b6:fb:78:8c:f3:8b:52:d3:0c:84:ca:29:64:08:12: f4:6a:9b:15:24:36:ff:e5:0a:24:8e:0b:6d:05:e3:8d:d2:42: be:b3:ab:e2:95:0a:91:8c:b7:7e:96:e9:a8:f4:3e:c3:4b:2c: dc:a2:b3:f7:d4:e5:8c:38:af:8a:07:e2:e6:ae:21:ea:69:24: ce:a9:ca:82:5f:d6:79:4a:04:0d:a0:22:5c:64:e3:73:dd:bc: 93:58:ea:27:d5:a4:c2:cd:88:de:bb:54:2d:46:3b:5a:d8:e0: 8e:e8:07:5b:fb:f0:16:7c:e1:e8:a4:c6:13:ee:0d:ed:63:6e: f4:13:fa:de:98:7d:42:0f:5c:33:93:48:ce:26:4e:92:f1:1b: ee:18:ea:b4:95:39:00:fb:e3:60:e9:3f:7d:de:4f:29:b7:4d: dd:6e:04:79:0c:ba:38:ee:3b:93:6d:61:29:7e:16:8e:07:4b: ac:2d:f2:67:02:dd:9f:38:fa:af:63:9e:8c:11:cc:52:07:c6: 0e:2e:9d:11:38:4b:57:34:09:83:20:54:91:f3:10:ef:e2:58: 46:0a:51:29:df:87:6c:77:94:f3:18:3c:87:4c:fb:90:96:1c: 21:a8:3b:44:9d:0e:4b:71:7a:c5:69:91:ae:02:3a:e8:ec:3b: 97:d8:e3:f9 -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw NzU0MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlBMTY3MUFERjY5MENF MTM0NTQzRUVFQTlBNkVDRTE1MTgwMUQwN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgTkoYwpddyYPYBR0O+Ce2LJPeez9aNDsSXLUWNVhMfsQdDOiO 3IYer9G0ZK8NkaCnav3180Teb0agZrPdzRZcAHmNISGvoipwrsCvmtbZ3Bmqefew t+plMDCYUk/GQv3rKpG5liLVlNu0xOFRC1fDFkMroK6bbwH+e+9rMwDFxm+g4gz4 ZhAkMK2jplndksXoZ9s3Z/gEJ3x+eDyjmHYLAU6n29/bYY797aap25VPdx3NyMUm mKPEB6iCTjNK/Jmquvp57w+XUsMQcha2U4L7DqZPSQjU4eGY8V45C93XQqbF85J5 Q3ADGcjKiQ0h8zQYZkMuyOQiymrgVad5qPlxAgMBAAGjggHdMIIB2TAdBgNVHQ4E FgQUmhZxrfaQzhNFQ+7qmm7OFRgB0HwwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMDA4My9taFp4cmZhUXpoTkZRLTdxbW03T0ZSZ0IwSHcucm9h MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0r1AMA0GCSqGSIb3DQEBCwUA A4IBAQC0QZS2+3iM84tS0wyEyilkCBL0apsVJDb/5QokjgttBeON0kK+s6vilQqR jLd+lumo9D7DSyzcorP31OWMOK+KB+LmriHqaSTOqcqCX9Z5SgQNoCJcZONz3byT WOon1aTCzYjeu1QtRjta2OCO6Adb+/AWfOHopMYT7g3tY270E/remH1CD1wzk0jO Jk6S8RvuGOq0lTkA++Ng6T993k8pt03dbgR5DLo47juTbWEpfhaOB0usLfJnAt2f OPqvY56MEcxSB8YOLp0ROEtXNAmDIFSR8xDv4lhGClEp34dsd5TzGDyHTPuQlhwh qDtEnQ5LcXrFaZGuAjro7DuX2OP5 -----END CERTIFICATE-----Generated at Wed Apr 1 15:59:29 2026 by rpki-client