$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MHVkEJbVmA6V2n3Ju-uaenJ_HDs.roa File: MHVkEJbVmA6V2n3Ju-uaenJ_HDs.roa (raw, json) Hash identifier: 2ZpQwwXBbqTxAGYFT/T2VG1KZaNCEnIapvciJwyOcC8= Subject key identifier: 30:75:64:10:96:D5:98:0E:95:DA:7D:C9:BB:EB:9A:7A:72:7F:1C:3B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11CF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MHVkEJbVmA6V2n3Ju-uaenJ_HDs.roa Signing time: Sun 01 Mar 2026 02:40:35 +0000 ROA not before: Sun 01 Mar 2026 02:40:35 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4559 (0x11cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:40:35 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=3075641096D5980E95DA7DC9BBEB9A7A727F1C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:78:29:2a:24:c3:8a:d4:e1:60:a7:cd:67: a9:d3:f4:3b:01:99:23:a8:a3:87:c1:68:da:c6:54: 9b:86:43:5e:1a:91:4b:3c:50:5a:8a:5d:b7:bf:88: 7e:11:b7:08:67:77:29:88:bf:ba:e9:8c:de:28:94: 5a:a8:1e:cf:3a:9e:82:31:12:86:4d:f0:8d:52:e7: 4a:3b:ab:b4:23:6d:0e:f8:67:3f:71:0c:47:f7:ee: a1:e9:5c:4d:9b:d4:f2:45:a1:87:00:ac:0e:8c:a6: 7f:4d:c4:15:eb:e7:b6:bd:d3:65:6f:07:da:25:e0: 52:07:ef:28:ac:41:b9:3b:18:a3:bd:fe:86:14:dc: ff:59:f0:d1:22:d5:91:f7:88:55:58:da:99:f5:20: 4a:c9:28:63:d9:cf:cb:92:4c:20:6d:0f:70:2b:57: 07:e6:cf:e7:a7:13:9d:d5:92:53:df:0c:40:70:0a: b6:ed:ff:e4:b9:8d:2b:42:04:d8:a5:03:41:57:9d: 7e:a3:94:c3:9c:6f:ff:b6:be:47:2d:17:da:17:56: 4a:20:6c:7e:d1:15:59:59:9e:87:b7:f7:12:c2:be: 8c:6a:0e:c9:67:98:f6:d9:81:66:c4:a4:00:f5:c3: df:61:f3:30:ed:d2:f2:2e:22:5e:54:02:fc:50:b9: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:75:64:10:96:D5:98:0E:95:DA:7D:C9:BB:EB:9A:7A:72:7F:1C:3B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MHVkEJbVmA6V2n3Ju-uaenJ_HDs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.3.0/24 Signature Algorithm: sha256WithRSAEncryption 08:a2:96:20:06:b8:4f:ad:66:59:6c:16:c0:d4:50:70:08:21: 00:4d:47:f4:e2:3a:65:5f:67:c3:70:f2:f0:cb:46:eb:dd:f2: 86:68:21:da:57:c4:62:d0:9a:3a:ee:d0:df:98:60:e2:a3:7f: fc:82:bb:9a:0b:cb:72:42:37:29:d5:bd:42:9c:cc:7d:80:c3: ac:6d:32:d9:28:42:1c:3c:db:60:a7:28:c2:a6:b8:b0:51:09: 6d:b0:81:44:69:93:10:91:9b:c6:9b:f9:05:46:ee:04:8b:a7: 99:80:9a:d5:54:43:b6:c7:81:bb:aa:5e:ab:21:c1:c2:d2:b6: ae:d3:db:05:de:15:36:c2:0b:83:4c:64:20:3a:a0:c2:74:ca: 82:e3:61:7b:d5:2d:84:1f:37:ea:e2:2e:30:8b:42:cd:ee:d0: 9d:fc:de:ca:f6:ac:c7:e2:8e:d0:b7:ce:c6:39:47:83:c5:80: f3:e5:00:9b:69:7d:55:21:f3:1d:65:c1:86:22:00:bc:8e:e4: f8:06:5c:5d:c8:ad:d5:da:17:dd:00:c2:da:3b:3a:44:aa:c9: e6:cb:c8:93:bc:f4:07:43:98:d9:f0:93:fe:00:8f:d6:ab:9a: 96:4e:c0:42:0c:47:7c:cc:24:6d:db:69:3e:2f:55:d5:a9:a4: bb:b8:fe:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQwMzVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMwNzU2NDEwOTZENTk4 MEU5NURBN0RDOUJCRUI5QTdBNzI3RjFDM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3nHgpKiTDitThYKfNZ6nT9DsBmSOoo4fBaNrGVJuGQ14akUs8 UFqKXbe/iH4RtwhndymIv7rpjN4olFqoHs86noIxEoZN8I1S50o7q7QjbQ74Zz9x DEf37qHpXE2b1PJFoYcArA6Mpn9NxBXr57a902VvB9ol4FIH7yisQbk7GKO9/oYU 3P9Z8NEi1ZH3iFVY2pn1IErJKGPZz8uSTCBtD3ArVwfmz+enE53VklPfDEBwCrbt /+S5jStCBNilA0FXnX6jlMOcb/+2vkctF9oXVkogbH7RFVlZnoe39xLCvoxqDsln mPbZgWbEpAD1w99h8zDt0vIuIl5UAvxQuc0hAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMHVkEJbVmA6V2n3Ju+uaenJ/HDswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01IVmtFSmJWbUE2VjJuM0p1LXVhZW5KX0hEcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTwMwDQYJKoZIhvcNAQELBQADggEBAAiiliAGuE+tZllsFsDUUHAIIQBN R/TiOmVfZ8Nw8vDLRuvd8oZoIdpXxGLQmjru0N+YYOKjf/yCu5oLy3JCNynVvUKc zH2Aw6xtMtkoQhw822CnKMKmuLBRCW2wgURpkxCRm8ab+QVG7gSLp5mAmtVUQ7bH gbuqXqshwcLStq7T2wXeFTbCC4NMZCA6oMJ0yoLjYXvVLYQfN+riLjCLQs3u0J38 3sr2rMfijtC3zsY5R4PFgPPlAJtpfVUh8x1lwYYiALyO5PgGXF3IrdXaF90Awto7 OkSqyebLyJO89AdDmNnwk/4Aj9armpZOwEIMR3zMJG3baT4vVdWppLu4/rQ= -----END CERTIFICATE-----Generated at Mon Mar 2 05:17:24 2026 by rpki-client