$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/mAw9fS2MkL22Kj-Gy1T-VJvVsmc.roa File: mAw9fS2MkL22Kj-Gy1T-VJvVsmc.roa (raw, json) Hash identifier: Kqxp1BD5GdPKwonFcMP0s2MT75S5cOpIdI5uxfnpebE= Subject key identifier: 98:0C:3D:7D:2D:8C:90:BD:B6:2A:3F:86:CB:54:FE:54:9B:D5:B2:67 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: EE Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/mAw9fS2MkL22Kj-Gy1T-VJvVsmc.roa Signing time: Tue 31 Mar 2026 08:16:57 +0000 ROA not before: Tue 31 Mar 2026 08:16:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2514 IP address blocks: 128.53.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Mar 31 08:16:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=980C3D7D2D8C90BDB62A3F86CB54FE549BD5B267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:36:d8:eb:86:40:bb:86:4b:51:7e:6e:fd: 59:c5:7c:b1:5a:72:90:4b:62:61:07:24:2e:ac:4f: f7:64:36:c1:26:55:53:08:41:80:dc:b3:13:2c:85: e8:0b:45:5d:4b:13:5f:63:59:5e:bb:92:f7:81:d7: 38:28:e7:83:48:7d:b9:b9:14:a3:42:94:e9:91:9a: 07:f8:65:0c:5b:16:57:f7:0d:2e:77:4f:a1:b7:3f: 63:98:9e:de:85:45:2d:e0:0e:7d:5e:e3:61:27:9c: 17:b5:76:28:f2:fb:8e:d1:f7:17:69:05:a5:a9:ae: c0:36:28:10:af:d1:4a:43:8f:9a:67:3d:80:a3:73: 5e:9c:7d:30:32:5d:80:f2:e7:73:82:b3:85:35:e1: 27:5e:6b:4b:23:b5:54:71:07:b6:b4:1b:d3:b0:28: 99:d4:2b:9d:3e:9f:d6:21:2c:af:27:5d:0c:cc:87: b7:c1:48:14:b1:d7:9a:c8:68:6d:02:f2:64:98:7c: 45:74:9e:42:97:9d:e8:8a:f7:0a:dc:8d:d0:e3:06: 93:03:05:77:f9:af:ae:55:76:61:a4:8c:2d:6f:f3: 35:b1:d2:77:f9:5c:ee:ce:9d:8b:1a:92:46:a0:a7: 9e:51:25:18:fe:80:4a:9b:6b:2f:a5:f8:0b:cc:c5: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:3D:7D:2D:8C:90:BD:B6:2A:3F:86:CB:54:FE:54:9B:D5:B2:67 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/mAw9fS2MkL22Kj-Gy1T-VJvVsmc.roa sbgp-ipAddrBlock: critical IPv4: 128.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:b9:df:5d:87:55:e7:2b:98:79:70:90:07:b2:49:6e:fc:81: 11:10:48:5b:46:d5:31:2b:c1:bd:da:95:d4:ea:9d:71:f2:5a: 8f:42:6c:54:b0:1f:4e:46:af:7b:0f:8a:77:ac:b8:9f:34:53: a5:be:6a:e4:84:8e:45:57:bc:d3:3b:f6:99:ec:aa:56:c9:00: b3:2e:8b:7a:6d:8e:a9:ba:20:39:97:a5:0d:b3:8e:e6:1b:a4: 3f:d8:4b:f8:b4:54:3f:3e:b1:2a:31:a8:54:2e:0e:a4:6c:d9: 89:f5:8b:08:96:95:56:11:c5:44:04:00:c0:82:6a:ec:b2:3c: 92:1b:7e:8e:e4:dc:e2:f3:90:cd:a5:60:6b:b8:c3:eb:48:63: 07:1f:f0:02:1f:fa:16:a4:e8:f2:e0:55:70:84:f8:a6:b6:5a: cc:74:16:26:df:62:50:51:3d:45:11:1b:69:d5:5f:5e:75:fd: 05:c7:fe:89:3f:0b:72:c6:96:5a:d3:83:d0:07:f7:a9:9f:fa: 8b:79:10:cc:f1:94:c3:16:8e:27:78:67:c7:e0:a8:34:6e:b1: 69:b3:1e:ca:c4:a4:c8:c0:81:17:d4:98:fd:a2:f1:7b:4b:61: 70:bc:74:cd:1f:47:ed:91:b3:3a:17:79:d7:55:1f:13:b7:b0: d4:33:2a:c3 -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0 MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw ODE2NTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk4MEMzRDdEMkQ4Qzkw QkRCNjJBM0Y4NkNCNTRGRTU0OUJENUIyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY2jbY64ZAu4ZLUX5u/VnFfLFacpBLYmEHJC6sT/dkNsEmVVMI QYDcsxMshegLRV1LE19jWV67kveB1zgo54NIfbm5FKNClOmRmgf4ZQxbFlf3DS53 T6G3P2OYnt6FRS3gDn1e42EnnBe1dijy+47R9xdpBaWprsA2KBCv0UpDj5pnPYCj c16cfTAyXYDy53OCs4U14Sdea0sjtVRxB7a0G9OwKJnUK50+n9YhLK8nXQzMh7fB SBSx15rIaG0C8mSYfEV0nkKXneiK9wrcjdDjBpMDBXf5r65VdmGkjC1v8zWx0nf5 XO7OnYsakkagp55RJRj+gEqbay+l+AvMxSjrAgMBAAGjggHWMIIB0jAdBgNVHQ4E FgQUmAw9fS2MkL22Kj+Gy1T+VJvVsmcwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yOS9tQXc5ZlMyTWtMMjJLai1HeTFULVZKdlZzbWMucm9hMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgDUwDQYJKoZIhvcNAQELBQADggEBAA+5 312HVecrmHlwkAeySW78gREQSFtG1TErwb3aldTqnXHyWo9CbFSwH05Gr3sPines uJ80U6W+auSEjkVXvNM79pnsqlbJALMui3ptjqm6IDmXpQ2zjuYbpD/YS/i0VD8+ sSoxqFQuDqRs2Yn1iwiWlVYRxUQEAMCCauyyPJIbfo7k3OLzkM2lYGu4w+tIYwcf 8AIf+hak6PLgVXCE+Ka2Wsx0FibfYlBRPUURG2nVX151/QXH/ok/C3LGllrTg9AH 96mf+ot5EMzxlMMWjid4Z8fgqDRusWmzHsrEpMjAgRfUmP2i8XtLYXC8dM0fR+2R szoXeddVHxO3sNQzKsM= -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:26 2026 by rpki-client