$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/MnEK1kCnqpVBGX-q5KGClylO1Xk.roa File: MnEK1kCnqpVBGX-q5KGClylO1Xk.roa (raw, json) Hash identifier: NHWBQpyDkH1c0yWiHWksEAvVh3RfHRDB9K6PW+G7JFE= Subject key identifier: 32:71:0A:D6:40:A7:AA:95:41:19:7F:AA:E4:A1:82:97:29:4E:D5:79 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 0208 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/MnEK1kCnqpVBGX-q5KGClylO1Xk.roa Signing time: Tue 31 Mar 2026 07:40:15 +0000 ROA not before: Tue 31 Mar 2026 07:40:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2527 IP address blocks: 126.209.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Mar 31 07:40:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=32710AD640A7AA9541197FAAE4A18297294ED579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:05:91:09:0f:89:6b:85:f7:ce:9b:18:0a: 7d:c0:9d:1d:97:69:a2:b5:15:33:43:18:14:45:52: dd:88:26:b1:f1:c6:84:26:5e:1e:60:5d:11:ac:6a: 30:2b:41:9f:3d:70:df:c5:b1:d2:a7:79:83:59:37: f0:63:dc:10:90:8a:bf:13:a6:af:3a:0f:6e:9b:3a: cb:c7:a7:7d:27:bf:aa:48:8d:bd:af:dc:7e:2b:13: df:1f:82:e0:0f:96:bf:1f:df:d0:f9:c0:16:33:85: a3:0f:d2:59:4a:b9:b1:5a:52:22:a9:96:f3:15:36: 08:6d:84:24:87:6c:76:e9:6f:da:f0:a2:71:6d:d5: 4c:e2:8e:3e:29:f7:32:0c:0b:e5:c7:10:05:e8:a3: 5b:73:18:6f:c2:2a:98:43:c3:27:d0:91:22:5f:8c: 29:d4:63:b3:38:2d:88:16:43:cc:2f:7f:5a:38:84: bc:8c:7d:4c:f6:46:68:b3:11:91:ce:ac:7e:c8:bd: eb:67:ab:b5:e4:fd:4d:81:54:44:52:9a:da:cf:a2: 12:59:8c:5c:47:f8:e2:ca:c4:bb:71:1f:5f:29:23: 3b:32:84:56:f5:47:95:8e:bd:74:6f:a1:e7:88:18: 6b:c2:2a:3b:7f:a8:13:38:5e:3f:35:c5:63:00:fc: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:0A:D6:40:A7:AA:95:41:19:7F:AA:E4:A1:82:97:29:4E:D5:79 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/MnEK1kCnqpVBGX-q5KGClylO1Xk.roa sbgp-ipAddrBlock: critical IPv4: 126.209.128.0/18 Signature Algorithm: sha256WithRSAEncryption 90:5e:c9:28:e9:ec:46:da:88:0e:6e:65:1d:6d:7e:38:1d:8f: 12:98:fd:6d:70:38:e9:7b:82:82:8a:8d:fe:6e:9e:4c:c1:b6: 02:f5:48:37:af:23:72:d0:25:71:40:ec:49:2b:6f:8d:46:88: f3:85:29:74:37:2c:50:2e:55:dc:36:fc:91:71:a9:2b:07:df: 48:0d:fb:27:83:08:5b:58:98:8c:f8:98:dc:51:e1:31:03:1b: 77:8b:dd:dd:ca:11:0b:a9:56:f5:90:44:0c:53:4e:66:29:4e: 91:3e:75:a1:a1:9f:63:cc:ac:35:97:83:c5:03:78:1d:00:42: 01:80:69:02:4a:8a:ec:74:3b:a7:2c:a6:4f:e8:a7:31:f1:c8: a7:0c:a6:d6:00:ab:26:84:5f:bf:e2:3a:55:b4:8a:81:5e:49: 29:ff:cd:f0:78:5e:e6:38:37:39:08:71:62:79:3a:91:4f:16: 8f:7b:3d:3d:a2:ad:71:06:88:10:cd:68:19:47:a9:97:07:50: a0:8b:0d:6f:37:38:52:d1:b1:ae:4c:d5:da:ae:c8:f1:22:8f: b9:0c:32:3a:df:f9:75:fc:22:35:59:ca:7f:06:e4:76:1b:3d: f5:0d:23:e6:52:5e:10:cd:2c:cd:25:4f:b5:b2:07:d3:a6:b9: 60:c4:66:89 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgICAggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw NzQwMTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMyNzEwQUQ2NDBBN0FB OTU0MTE5N0ZBQUU0QTE4Mjk3Mjk0RUQ1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrIAWRCQ+Ja4X3zpsYCn3AnR2XaaK1FTNDGBRFUt2IJrHxxoQm Xh5gXRGsajArQZ89cN/FsdKneYNZN/Bj3BCQir8Tpq86D26bOsvHp30nv6pIjb2v 3H4rE98fguAPlr8f39D5wBYzhaMP0llKubFaUiKplvMVNghthCSHbHbpb9rwonFt 1Uzijj4p9zIMC+XHEAXoo1tzGG/CKphDwyfQkSJfjCnUY7M4LYgWQ8wvf1o4hLyM fUz2RmizEZHOrH7Ivetnq7Xk/U2BVERSmtrPohJZjFxH+OLKxLtxH18pIzsyhFb1 R5WOvXRvoeeIGGvCKjt/qBM4Xj81xWMA/BVNAgMBAAGjggHXMIIB0zAdBgNVHQ4E FgQUMnEK1kCnqpVBGX+q5KGClylO1XkwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC80My9NbkVLMWtDbnFwVkJHWC1xNUtHQ2x5bE8xWGsucm9hMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGftGAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ Xsko6exG2ogObmUdbX44HY8SmP1tcDjpe4KCio3+bp5MwbYC9Ug3ryNy0CVxQOxJ K2+NRojzhSl0NyxQLlXcNvyRcakrB99IDfsngwhbWJiM+JjcUeExAxt3i93dyhEL qVb1kEQMU05mKU6RPnWhoZ9jzKw1l4PFA3gdAEIBgGkCSorsdDunLKZP6Kcx8cin DKbWAKsmhF+/4jpVtIqBXkkp/83weF7mODc5CHFieTqRTxaPez09oq1xBogQzWgZ R6mXB1Cgiw1vNzhS0bGuTNXarsjxIo+5DDI63/l1/CI1Wcp/BuR2Gz31DSPmUl4Q zSzNJU+1sgfTprlgxGaJ -----END CERTIFICATE-----Generated at Sun Apr 19 09:19:40 2026 by rpki-client