$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MSxjlq8TEII_Xdy4b-VAVuFD8bk.roa File: MSxjlq8TEII_Xdy4b-VAVuFD8bk.roa (raw, json) Hash identifier: MGhNPvV66mtD+PxcpEUw97pBX7W1GyM6k2hiCrwQy6g= Subject key identifier: 31:2C:63:96:AF:13:10:82:3F:5D:DC:B8:6F:E5:40:56:E1:43:F1:B9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12DE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MSxjlq8TEII_Xdy4b-VAVuFD8bk.roa Signing time: Sun 01 Mar 2026 03:20:37 +0000 ROA not before: Sun 01 Mar 2026 03:20:37 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 219.114.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4830 (0x12de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:20:37 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=312C6396AF1310823F5DDCB86FE54056E143F1B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:58:5d:6a:c6:5c:ee:a0:f0:eb:14:0f:7d: a6:d4:3e:81:f9:1d:c4:06:70:3b:b2:dd:3c:df:4d: eb:4b:97:a4:78:6d:f6:fb:0c:ef:35:a8:23:60:f8: b7:48:6d:f7:fa:2f:8f:86:66:fc:8b:79:ee:56:f8: 35:36:15:a8:0c:9f:c4:aa:58:c3:47:fc:4c:32:26: 42:8c:50:eb:a0:80:ed:66:b6:c8:66:6d:5a:24:89: a9:92:58:d1:53:8a:f6:b9:87:10:d3:56:26:04:0f: fc:c2:88:c2:5e:da:c1:37:3f:79:ca:b0:61:50:f9: 15:6d:de:ee:01:3f:01:ff:9e:eb:36:0f:43:63:3f: 76:14:8e:7f:84:88:1a:c8:10:14:17:60:e1:b7:95: aa:cf:2c:a1:2e:3a:06:42:a4:9c:3c:3c:dc:8b:38: 9a:1d:d4:81:cf:56:5c:80:03:56:51:f1:6d:82:ee: fc:a0:a9:94:a1:78:c4:9a:d1:33:51:d4:31:10:c6: 02:21:5f:28:7e:2a:e4:e7:d0:49:f7:5e:6b:e4:73: 9d:a1:12:7a:8c:dc:7d:4a:5c:b0:2f:9d:bb:23:c9: 59:c2:2a:56:7e:5f:4c:f4:2b:4b:bd:af:97:68:0e: 61:1a:7b:39:8a:d1:21:e4:d8:35:8f:7f:2d:51:78: 11:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2C:63:96:AF:13:10:82:3F:5D:DC:B8:6F:E5:40:56:E1:43:F1:B9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MSxjlq8TEII_Xdy4b-VAVuFD8bk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.188.0/22 Signature Algorithm: sha256WithRSAEncryption bb:4a:dc:6b:18:3d:12:35:8b:87:b1:c0:b0:af:ce:94:9e:6c: a9:76:73:4c:5b:78:34:c0:51:b7:aa:92:0d:17:c7:06:0d:25: 7b:6d:64:38:df:a7:1d:4e:68:0a:7c:ce:78:8b:fa:a1:78:32: f7:f4:a2:84:3d:6f:85:71:31:29:d3:a1:e4:86:b8:92:83:de: c5:5b:26:47:93:e7:a4:fa:41:3f:5a:27:08:26:f7:50:e0:b7: b3:4f:d4:3d:20:42:af:ca:d2:16:29:fe:9d:5b:e0:b1:12:bd: da:5e:80:d5:0f:57:2a:a2:bc:71:cb:d6:2e:02:64:f8:d6:ff: 40:68:1a:0d:f6:9e:12:a4:3b:3a:7f:14:21:31:1c:e6:4b:50: 5e:26:45:0f:0f:ce:0a:f4:81:e0:f6:a6:28:4b:5c:a0:fd:96: b8:aa:14:4d:8d:bd:16:f0:6e:6a:71:42:5b:8f:69:02:87:22: b8:a4:4e:72:d1:7c:cc:ce:93:00:59:bc:91:e5:7c:e1:cc:54: d7:b4:77:e8:0d:96:55:ba:30:ab:cc:01:19:55:b3:df:a5:79: 4b:68:5e:a7:96:e0:fd:82:b2:cd:4b:97:8d:09:a2:83:64:c3: f4:27:6e:19:24:8b:ec:a1:9e:60:82:17:58:75:ba:10:4c:04: ad:e9:7d:7e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzIwMzdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMxMkM2Mzk2QUYxMzEw ODIzRjVERENCODZGRTU0MDU2RTE0M0YxQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtWlhdasZc7qDw6xQPfabUPoH5HcQGcDuy3TzfTetLl6R4bfb7 DO81qCNg+LdIbff6L4+GZvyLee5W+DU2FagMn8SqWMNH/EwyJkKMUOuggO1mtshm bVokiamSWNFTiva5hxDTViYED/zCiMJe2sE3P3nKsGFQ+RVt3u4BPwH/nus2D0Nj P3YUjn+EiBrIEBQXYOG3larPLKEuOgZCpJw8PNyLOJod1IHPVlyAA1ZR8W2C7vyg qZSheMSa0TNR1DEQxgIhXyh+KuTn0En3Xmvkc52hEnqM3H1KXLAvnbsjyVnCKlZ+ X0z0K0u9r5doDmEaezmK0SHk2DWPfy1ReBFnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMSxjlq8TEII/Xdy4b+VAVuFD8bkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01TeGpscThURUlJX1hkeTRiLVZBVnVGRDhiay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcrwwDQYJKoZIhvcNAQELBQADggEBALtK3GsYPRI1i4exwLCvzpSebKl2 c0xbeDTAUbeqkg0XxwYNJXttZDjfpx1OaAp8zniL+qF4Mvf0ooQ9b4VxMSnToeSG uJKD3sVbJkeT56T6QT9aJwgm91Dgt7NP1D0gQq/K0hYp/p1b4LESvdpegNUPVyqi vHHL1i4CZPjW/0BoGg32nhKkOzp/FCExHOZLUF4mRQ8Pzgr0geD2pihLXKD9lriq FE2NvRbwbmpxQluPaQKHIrikTnLRfMzOkwBZvJHlfOHMVNe0d+gNllW6MKvMARlV s9+leUtoXqeW4P2Css1Ll40JooNkw/Qnbhkki+yhnmCCF1h1uhBMBK3pfX4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:07:59 2026 by rpki-client