$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20099/mSTOXHtNCqxssQsZ3pyGw5UJzDI.roa File: mSTOXHtNCqxssQsZ3pyGw5UJzDI.roa (raw, json) Hash identifier: GMIPgKGJmzLdVsFHzJ9Zh2QZPdsyNZO5YLl+yJl61dk= Subject key identifier: 99:24:CE:5C:7B:4D:0A:AC:6C:B1:0B:19:DE:9C:86:C3:95:09:CC:32 Certificate issuer: /CN=2327CD1B4F1F8B8956861597E494314A68561591 Certificate serial: 45 Authority key identifier: 23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/mSTOXHtNCqxssQsZ3pyGw5UJzDI.roa Signing time: Sun 01 Feb 2026 01:32:59 +0000 ROA not before: Sun 01 Feb 2026 01:32:59 +0000 ROA not after: Fri 15 Jan 2027 01:30:02 +0000 asID: 131966 IP address blocks: 103.141.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 00:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2327CD1B4F1F8B8956861597E494314A68561591 Validity Not Before: Feb 1 01:32:59 2026 GMT Not After : Jan 15 01:30:02 2027 GMT Subject: CN=9924CE5C7B4D0AAC6CB10B19DE9C86C39509CC32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:88:ef:ae:74:6f:24:f1:d1:26:d2:34:e8: ae:71:dd:bf:10:6d:d6:3d:1a:6d:bd:8b:44:4d:a3: ca:fd:f4:4b:97:ba:d2:3f:6f:34:ea:ec:b3:13:a6: 52:bb:44:ba:47:85:e6:04:91:04:2c:a6:0f:ec:dc: 15:5c:69:10:1d:4b:f8:d8:89:68:9d:43:87:dd:42: a1:d8:2e:23:b1:81:82:db:58:16:89:96:fd:35:ab: 3a:2c:6f:15:07:64:65:8e:fd:68:96:16:15:95:ac: 18:27:05:b4:bf:d9:ce:aa:21:fd:54:d3:04:fe:b5: 0c:8d:07:cd:e7:8a:53:2e:02:d6:e6:3a:df:2f:8a: 25:30:cc:ad:4f:de:c3:47:d4:b0:23:f4:42:62:3a: 67:1d:38:69:21:f9:e9:73:0d:30:89:1e:d5:87:27: e6:38:21:da:79:c4:2b:b8:78:5c:fe:90:6f:37:0e: e2:7f:65:ad:d2:87:a3:11:f2:93:e5:2c:ba:af:78: 63:38:46:cb:38:a0:9d:05:9e:38:3f:50:f4:d4:1e: ee:2a:af:65:a9:e8:62:4a:86:d9:7a:fa:c3:bb:4c: e5:5f:c0:ff:99:fc:5a:45:7c:22:98:cc:8a:54:6f: e1:53:70:71:62:d2:b6:ee:d4:9b:79:c4:45:97:c0: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:24:CE:5C:7B:4D:0A:AC:6C:B1:0B:19:DE:9C:86:C3:95:09:CC:32 X509v3 Authority Key Identifier: keyid:23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/mSTOXHtNCqxssQsZ3pyGw5UJzDI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.94.0/23 Signature Algorithm: sha256WithRSAEncryption a5:09:e2:4b:84:14:08:1b:70:f8:ce:b9:78:2f:3a:a6:de:d1: 2b:40:72:fc:d6:21:47:4f:f2:3c:49:5f:32:e1:8d:8b:a8:74: 72:39:b3:7b:ab:f8:53:16:95:f4:ad:08:f9:6b:6b:a2:e0:41: 93:da:3b:1e:21:4a:cf:a5:53:39:cc:d9:0c:1e:7b:d0:16:a1: 70:b9:85:f6:eb:58:3f:f4:9e:af:e3:2c:c4:50:64:38:23:5c: d7:01:41:a3:cc:80:ac:97:bf:dc:87:97:44:d6:2f:c9:02:60: 3d:77:37:94:d8:ae:12:cd:35:e4:d8:b9:fc:82:c6:73:04:36: 27:f1:8a:31:24:d8:7a:6c:74:ec:09:fc:2c:9c:43:e8:5e:14: 39:11:22:90:0b:77:24:b9:c4:df:14:1b:b0:0c:e0:68:65:a1: f6:6c:b8:f2:ac:26:7a:78:17:e8:a7:1d:fd:6c:38:08:52:85: 51:80:e1:66:84:84:42:a0:ea:e3:c3:e2:dd:6a:97:db:7e:fe: 62:9b:d2:46:04:c5:41:08:df:51:29:4b:d6:97:05:80:dc:a7: ff:43:5d:ff:ad:9b:8a:9e:14:0d:02:86:9c:95:7d:44:6f:a3: 52:56:b3:3f:d2:d0:bc:cd:30:6e:d9:3b:c1:0f:86:26:3d:ee: 56:f9:6b:97 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMzI3 Q0QxQjRGMUY4Qjg5NTY4NjE1OTdFNDk0MzE0QTY4NTYxNTkxMB4XDTI2MDIwMTAx MzI1OVoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoOTkyNENFNUM3QjREMEFB QzZDQjEwQjE5REU5Qzg2QzM5NTA5Q0MzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANGeiO+udG8k8dEm0jTornHdvxBt1j0abb2LRE2jyv30S5e60j9v NOrssxOmUrtEukeF5gSRBCymD+zcFVxpEB1L+NiJaJ1Dh91CodguI7GBgttYFomW /TWrOixvFQdkZY79aJYWFZWsGCcFtL/Zzqoh/VTTBP61DI0HzeeKUy4C1uY63y+K JTDMrU/ew0fUsCP0QmI6Zx04aSH56XMNMIke1Ycn5jgh2nnEK7h4XP6QbzcO4n9l rdKHoxHyk+Usuq94YzhGyzignQWeOD9Q9NQe7iqvZanoYkqG2Xr6w7tM5V/A/5n8 WkV8IpjMilRv4VNwcWLStu7Um3nERZfAGXkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSZJM5ce00KrGyxCxnenIbDlQnMMjAfBgNVHSMEGDAWgBQjJ80bTx+LiVaGFZfk lDFKaFYVkTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwOTkvSXlmTkcwOGZpNGxXaGhXWDVKUXhTbWhXRlpFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSXlmTkcwOGZpNGxXaGhXWDVKUXhT bWhXRlpFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDk5L21TVE9YSHROQ3F4c3NRc1ozcHlHdzVVSnpESS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnjV4wDQYJKoZIhvcNAQELBQADggEBAKUJ4kuEFAgbcPjOuXgvOqbe 0StAcvzWIUdP8jxJXzLhjYuodHI5s3ur+FMWlfStCPlra6LgQZPaOx4hSs+lUznM 2Qwee9AWoXC5hfbrWD/0nq/jLMRQZDgjXNcBQaPMgKyXv9yHl0TWL8kCYD13N5TY rhLNNeTYufyCxnMENifxijEk2HpsdOwJ/CycQ+heFDkRIpALdyS5xN8UG7AM4Ghl ofZsuPKsJnp4F+inHf1sOAhShVGA4WaEhEKg6uPD4t1ql9t+/mKb0kYExUEI31Ep S9aXBYDcp/9DXf+tm4qeFA0ChpyVfURvo1JWsz/S0LzNMG7ZO8EPhiY97lb5a5c= -----END CERTIFICATE-----Generated at Tue Mar 3 01:57:12 2026 by rpki-client