$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7cvFGzmBVi1Jl2Bw9fbMcMX062w.roa File: 7cvFGzmBVi1Jl2Bw9fbMcMX062w.roa (raw, json) Hash identifier: ObTBnEULrfCWGqC0j/WChbIXVG9/Q2dqkmdZ9ezxRWU= Subject key identifier: ED:CB:C5:1B:39:81:56:2D:49:97:60:70:F5:F6:CC:70:C5:F4:EB:6C Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0889 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7cvFGzmBVi1Jl2Bw9fbMcMX062w.roa Signing time: Tue 31 Mar 2026 07:43:44 +0000 ROA not before: Tue 31 Mar 2026 07:43:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 211.1.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:43:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=EDCBC51B3981562D49976070F5F6CC70C5F4EB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:7f:cc:d3:90:4a:d7:30:fd:25:13:b3:da: d8:0b:b8:15:2f:40:f6:5b:c2:4d:f8:77:30:fe:fe: e4:d1:57:4e:fb:3e:95:6a:71:44:1d:89:27:cf:ec: 3c:ff:af:ee:60:b9:47:56:5f:3c:10:bb:26:89:47: 3b:7d:04:cb:2d:b3:96:82:ea:fc:91:2f:71:03:89: cf:43:93:48:76:1e:17:14:b0:73:f0:15:cc:9b:f2: fb:a2:e4:5c:09:78:e7:7e:10:6b:d2:80:0a:d9:76: e0:f5:d7:5c:6c:c1:43:58:b7:c2:ec:e0:d5:f3:8e: 7e:67:3d:cc:fc:15:ca:10:2c:86:5d:37:8f:6f:67: 50:6a:e1:6f:fd:d8:b6:2f:09:71:e1:0a:d5:29:20: 18:ae:77:13:f0:65:3d:25:cb:97:03:17:8f:be:2f: 34:ef:41:09:80:7a:1d:73:9a:fc:d8:e1:c6:83:ed: 2e:db:ad:96:99:72:33:0b:fb:37:af:4d:b2:b8:d2: 14:73:2b:2b:86:25:bb:cd:d9:6b:b6:c2:18:c6:10: 74:52:7a:0d:9f:52:3d:e0:0f:d6:5c:27:fd:b0:e3: 99:9f:91:a5:45:73:7c:15:8c:a7:0e:8e:86:c5:27: 3e:30:92:db:33:28:b4:82:fe:fc:be:20:6b:1b:9a: f5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CB:C5:1B:39:81:56:2D:49:97:60:70:F5:F6:CC:70:C5:F4:EB:6C X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7cvFGzmBVi1Jl2Bw9fbMcMX062w.roa sbgp-ipAddrBlock: critical IPv4: 211.1.104.0/21 Signature Algorithm: sha256WithRSAEncryption 17:bf:90:e4:bb:ab:62:c9:69:41:2c:66:df:e4:98:5b:5b:b8: 61:24:33:e5:2c:2d:5a:09:a5:74:b3:01:ac:0d:a3:1c:6d:38: 4a:90:75:3b:d0:e8:37:4c:64:00:f6:55:3d:71:53:84:d8:ab: ed:68:19:07:7c:0c:28:80:98:47:5e:56:69:be:4d:98:b7:a1: 0a:2b:88:6d:6b:60:29:49:e0:06:f7:3c:aa:f3:14:b2:61:65: 49:04:b9:dc:30:6f:eb:b7:0d:81:d7:c8:17:16:f8:8b:27:ce: 42:de:72:2b:c5:57:1d:a2:31:f6:9b:9d:c1:83:1c:df:7e:be: 34:d6:45:66:a7:37:1f:dd:d7:b8:47:20:cc:22:66:f8:34:bd: 8d:0b:27:bf:9f:3f:83:2f:0b:ba:69:2d:be:53:f1:65:3b:e1: 8d:89:45:cc:0f:a3:fd:6c:63:31:20:8e:2a:5a:04:63:bc:a1: 25:30:bd:98:dd:5e:9e:85:73:33:df:1b:18:1b:22:a3:1b:1d: 47:65:63:57:9d:a6:6c:08:e5:b6:5e:74:d9:fe:b0:71:ef:b7: b3:01:40:a2:7d:ed:b8:5e:05:ba:48:43:6e:d4:12:0d:02:49: 0f:7b:65:54:af:8e:cd:14:41:60:da:12:2f:0a:e4:f2:d5:d1: 15:f4:77:14 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQzNDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVEQ0JDNTFCMzk4MTU2 MkQ0OTk3NjA3MEY1RjZDQzcwQzVGNEVCNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8i3/M05BK1zD9JROz2tgLuBUvQPZbwk34dzD+/uTRV077PpVq cUQdiSfP7Dz/r+5guUdWXzwQuyaJRzt9BMsts5aC6vyRL3EDic9Dk0h2HhcUsHPw Fcyb8vui5FwJeOd+EGvSgArZduD111xswUNYt8Ls4NXzjn5nPcz8FcoQLIZdN49v Z1Bq4W/92LYvCXHhCtUpIBiudxPwZT0ly5cDF4++LzTvQQmAeh1zmvzY4caD7S7b rZaZcjML+zevTbK40hRzKyuGJbvN2Wu2whjGEHRSeg2fUj3gD9ZcJ/2w45mfkaVF c3wVjKcOjobFJz4wktszKLSC/vy+IGsbmvV5AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU7cvFGzmBVi1Jl2Bw9fbMcMX062wwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxLzdjdkZHem1CVmkxSmwyQnc5ZmJNY01YMDYydy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPTAWgwDQYJKoZIhvcNAQELBQADggEB ABe/kOS7q2LJaUEsZt/kmFtbuGEkM+UsLVoJpXSzAawNoxxtOEqQdTvQ6DdMZAD2 VT1xU4TYq+1oGQd8DCiAmEdeVmm+TZi3oQoriG1rYClJ4Ab3PKrzFLJhZUkEudww b+u3DYHXyBcW+IsnzkLecivFVx2iMfabncGDHN9+vjTWRWanNx/d17hHIMwiZvg0 vY0LJ7+fP4MvC7ppLb5T8WU74Y2JRcwPo/1sYzEgjipaBGO8oSUwvZjdXp6FczPf GxgbIqMbHUdlY1edpmwI5bZedNn+sHHvt7MBQKJ97bheBbpIQ27UEg0CSQ97ZVSv js0UQWDaEi8K5PLV0RX0dxQ= -----END CERTIFICATE-----Generated at Sun Apr 19 11:31:34 2026 by rpki-client