$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mqnqwr2fUtHVGGTSV4Iv8TnDB38.roa File: Mqnqwr2fUtHVGGTSV4Iv8TnDB38.roa (raw, json) Hash identifier: Qu2BGMs+FALVtNPNg6ROPF7jlr1LpfUXd1+x2kqs30o= Subject key identifier: 32:A9:EA:C2:BD:9F:52:D1:D5:18:64:D2:57:82:2F:F1:39:C3:07:7F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1148 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mqnqwr2fUtHVGGTSV4Iv8TnDB38.roa Signing time: Sun 01 Mar 2026 02:16:48 +0000 ROA not before: Sun 01 Mar 2026 02:16:48 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4424 (0x1148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:16:48 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=32A9EAC2BD9F52D1D51864D257822FF139C3077F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:a9:5a:a5:47:73:66:eb:53:a9:6b:81:5d: 17:ce:bc:ea:f0:7c:de:16:db:24:77:75:2a:33:2e: ae:ce:89:57:48:66:60:d2:b9:1b:04:b3:20:4f:7d: 52:fd:b6:00:69:bb:47:0d:64:95:09:52:f8:cb:e1: c9:69:c0:de:18:ba:13:3f:fc:68:af:9e:cf:e3:a2: d2:7d:64:47:73:31:84:92:05:f7:28:28:d8:b5:66: 7e:69:1f:87:7a:1b:de:70:da:f8:ae:c4:e9:c4:da: f1:04:92:bf:9b:71:3e:f8:39:b2:b2:a1:60:76:f9: 76:a2:19:75:9b:88:d3:43:7e:c9:52:3c:5a:cf:ec: 46:e1:27:13:30:7f:25:01:85:31:5d:d4:c5:a7:fe: 0f:b8:60:25:e5:35:61:68:87:ef:48:7b:84:0c:80: 54:df:e8:b9:57:48:4f:73:63:ec:b5:4e:10:e2:95: ae:69:90:b4:17:85:6e:d7:2b:d3:44:9e:4f:b1:19: 85:f8:d9:eb:9f:88:6c:db:9f:da:d4:54:8d:5e:04: a5:64:89:cb:e1:a5:61:16:54:28:99:38:62:10:c2: fd:1c:14:77:7c:8d:b7:2d:ae:2b:d5:d4:02:da:3a: 77:8b:43:6a:2a:dc:d2:f5:e1:2d:18:8c:d1:82:c5: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:EA:C2:BD:9F:52:D1:D5:18:64:D2:57:82:2F:F1:39:C3:07:7F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mqnqwr2fUtHVGGTSV4Iv8TnDB38.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.81.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:45:e7:d3:0b:2a:0e:a6:36:16:be:7a:bd:2a:7c:61:f8:c1: 7c:6f:58:e4:df:c2:de:c5:e7:3a:95:28:cd:ea:03:79:14:95: d7:d8:0c:1b:84:2c:04:ff:e9:c2:84:dd:7b:7b:23:78:58:ae: 25:dc:3c:71:52:28:30:b7:0e:98:f7:1f:62:24:b6:3d:1d:cc: 8a:39:51:a8:a7:27:fd:03:63:db:b8:a7:24:47:d7:c1:cf:d3: ab:c3:bb:57:a6:b5:65:30:3e:e8:57:bb:a8:96:29:0d:c5:b2: 4b:44:a0:58:5c:4a:3f:f8:0a:bd:c2:cd:a8:1f:7d:0d:30:14: 68:c1:b6:81:c2:e8:4e:67:f1:9a:a5:8a:eb:15:3e:0e:10:93: e1:a2:50:c5:2d:f4:0d:27:c5:d5:b6:e8:cb:aa:35:7c:2c:ba: 98:6e:ce:1e:bc:b0:51:7f:a5:f9:eb:15:e4:70:fb:ca:dc:d0: 34:c6:96:22:85:f6:5e:d5:7f:e7:1d:2d:34:ff:77:cb:88:e5: 82:9a:4b:8f:6f:45:cb:9f:ca:a7:92:87:2a:47:bf:d1:23:6d: c6:66:24:14:43:6d:11:ac:01:79:58:13:22:50:d0:70:bc:86: 2c:56:5b:60:22:48:83:b6:12:e1:d4:0d:8b:44:66:af:c2:e3: dd:39:5a:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjE2NDhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMyQTlFQUMyQkQ5RjUy RDFENTE4NjREMjU3ODIyRkYxMzlDMzA3N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS/KlapUdzZutTqWuBXRfOvOrwfN4W2yR3dSozLq7OiVdIZmDS uRsEsyBPfVL9tgBpu0cNZJUJUvjL4clpwN4YuhM//Givns/jotJ9ZEdzMYSSBfco KNi1Zn5pH4d6G95w2viuxOnE2vEEkr+bcT74ObKyoWB2+XaiGXWbiNNDfslSPFrP 7EbhJxMwfyUBhTFd1MWn/g+4YCXlNWFoh+9Ie4QMgFTf6LlXSE9zY+y1ThDila5p kLQXhW7XK9NEnk+xGYX42eufiGzbn9rUVI1eBKVkicvhpWEWVCiZOGIQwv0cFHd8 jbctrivV1ALaOneLQ2oq3NL14S0YjNGCxUDpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMqnqwr2fUtHVGGTSV4Iv8TnDB38wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01xbnF3cjJmVXRIVkdHVFNWNEl2OFRuREIzOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT1EwDQYJKoZIhvcNAQELBQADggEBAC5F59MLKg6mNha+er0qfGH4wXxv WOTfwt7F5zqVKM3qA3kUldfYDBuELAT/6cKE3Xt7I3hYriXcPHFSKDC3Dpj3H2Ik tj0dzIo5UainJ/0DY9u4pyRH18HP06vDu1emtWUwPuhXu6iWKQ3FsktEoFhcSj/4 Cr3CzagffQ0wFGjBtoHC6E5n8ZqliusVPg4Qk+GiUMUt9A0nxdW26MuqNXwsuphu zh68sFF/pfnrFeRw+8rc0DTGliKF9l7Vf+cdLTT/d8uI5YKaS49vRcufyqeShypH v9EjbcZmJBRDbRGsAXlYEyJQ0HC8hixWW2AiSIO2EuHUDYtEZq/C4905WkI= -----END CERTIFICATE-----Generated at Mon Mar 2 13:09:22 2026 by rpki-client