$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/AqH_2uG_MhauP3J4Q5sOSz2m8rw.roa File: AqH_2uG_MhauP3J4Q5sOSz2m8rw.roa (raw, json) Hash identifier: CGjNnrmfOV0C6R9i6QkOx2zeiwm5tLgV3TLbGfQLins= Subject key identifier: 02:A1:FF:DA:E1:BF:32:16:AE:3F:72:78:43:9B:0E:4B:3D:A6:F2:BC Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 08BA Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AqH_2uG_MhauP3J4Q5sOSz2m8rw.roa Signing time: Tue 31 Mar 2026 07:44:08 +0000 ROA not before: Tue 31 Mar 2026 07:44:08 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 211.7.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:44:08 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=02A1FFDAE1BF3216AE3F7278439B0E4B3DA6F2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:e7:08:f2:b2:75:0a:2f:0a:46:43:40:8b: 25:d4:78:79:cf:ad:a9:94:23:fb:ee:b2:9a:a6:33: 02:67:ea:1c:5b:69:68:c4:04:81:df:4d:4b:39:3d: 72:70:bd:4b:ff:50:fe:0d:61:af:be:cf:b7:dc:c3: 14:ae:96:ef:c9:dd:9a:1c:cd:79:1e:7a:ff:b3:81: 97:dd:71:43:ff:e5:ec:38:de:a2:ba:3f:a1:12:a6: 36:2f:38:1c:7f:35:76:eb:25:22:55:5d:14:1a:b8: 85:0c:cf:29:f6:61:a2:b0:4e:33:74:c7:3c:56:e7: 70:69:78:e9:92:a3:6e:26:81:52:50:f9:8b:f4:9d: ec:10:fd:b5:65:90:92:ea:1f:b0:29:35:6c:d8:ac: 95:a1:db:43:1d:54:ef:81:85:94:78:e1:f6:8c:2f: 33:6a:57:64:a1:ef:e1:b1:2c:89:45:a2:7d:a7:27: 62:ad:c7:e9:b5:66:bb:3d:a8:d6:a2:c2:c8:20:e7: 37:08:b2:0d:9a:59:05:7f:dd:c6:ae:36:ff:d2:e5: e9:03:3f:97:fb:4a:cc:67:96:5b:cb:3b:5c:8a:fd: 79:16:53:55:5e:53:a5:3e:d9:26:59:e5:ea:98:1c: 9c:4b:fe:6a:9d:e7:dd:5f:2c:ea:a9:46:97:40:55: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A1:FF:DA:E1:BF:32:16:AE:3F:72:78:43:9B:0E:4B:3D:A6:F2:BC X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AqH_2uG_MhauP3J4Q5sOSz2m8rw.roa sbgp-ipAddrBlock: critical IPv4: 211.7.40.0/23 Signature Algorithm: sha256WithRSAEncryption 58:8a:92:e1:28:5c:16:76:6a:ae:da:57:55:da:e6:28:8d:7e: 98:34:22:1f:e4:d7:95:95:e4:ee:06:45:a1:a5:ed:02:4c:7a: 30:f4:80:72:fb:04:3e:b2:f0:39:b1:3d:58:b1:06:c0:2a:a8: ae:94:e4:aa:61:e9:f6:94:13:48:47:6b:21:b8:89:19:4f:02: 4c:75:e8:8b:6b:20:5d:06:01:c6:7d:7b:99:a4:f2:a4:19:93: 01:40:8b:14:81:20:b5:b3:bd:b6:34:7d:a6:41:60:27:26:9f: ab:c2:bf:bf:ce:89:75:de:c6:a1:bd:62:f0:a4:0e:21:04:5f: fb:dd:76:8c:8a:87:a9:bb:87:5b:25:f1:53:ab:77:ec:3a:67: 84:40:a3:c6:c2:14:6a:30:c6:fc:03:5f:5c:8c:10:3c:22:0e: f6:8e:f2:07:cc:de:80:ed:71:10:ac:85:95:5f:df:52:26:a8: f5:1e:24:34:00:47:2b:cd:5d:de:27:da:54:e3:05:f1:9a:68: b0:a6:20:74:9c:ce:56:5d:57:4c:77:67:0e:e9:1e:89:85:93: 6e:a2:20:c1:e0:bd:13:11:d8:2e:0b:ec:80:2d:7a:63:80:ea: df:3f:f4:4a:58:f1:e5:b9:7e:b3:ce:70:8f:21:f7:d9:ba:d9: cf:ca:f7:1a -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICCLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQ0MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyQTFGRkRBRTFCRjMy MTZBRTNGNzI3ODQzOUIwRTRCM0RBNkYyQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcH+cI8rJ1Ci8KRkNAiyXUeHnPramUI/vuspqmMwJn6hxbaWjE BIHfTUs5PXJwvUv/UP4NYa++z7fcwxSulu/J3ZoczXkeev+zgZfdcUP/5ew43qK6 P6ESpjYvOBx/NXbrJSJVXRQauIUMzyn2YaKwTjN0xzxW53BpeOmSo24mgVJQ+Yv0 newQ/bVlkJLqH7ApNWzYrJWh20MdVO+BhZR44faMLzNqV2Sh7+GxLIlFon2nJ2Kt x+m1Zrs9qNaiwsgg5zcIsg2aWQV/3cauNv/S5ekDP5f7SsxnllvLO1yK/XkWU1Ve U6U+2SZZ5eqYHJxL/mqd591fLOqpRpdAVVyfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUAqH/2uG/MhauP3J4Q5sOSz2m8rwwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL0FxSF8ydUdfTWhhdVAzSjRRNXNPU3oybThydy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTBygwDQYJKoZIhvcNAQELBQADggEB AFiKkuEoXBZ2aq7aV1Xa5iiNfpg0Ih/k15WV5O4GRaGl7QJMejD0gHL7BD6y8Dmx PVixBsAqqK6U5Kph6faUE0hHayG4iRlPAkx16ItrIF0GAcZ9e5mk8qQZkwFAixSB ILWzvbY0faZBYCcmn6vCv7/OiXXexqG9YvCkDiEEX/vddoyKh6m7h1sl8VOrd+w6 Z4RAo8bCFGowxvwDX1yMEDwiDvaO8gfM3oDtcRCshZVf31ImqPUeJDQARyvNXd4n 2lTjBfGaaLCmIHSczlZdV0x3Zw7pHomFk26iIMHgvRMR2C4L7IAtemOA6t8/9EpY 8eW5frPOcI8h99m62c/K9xo= -----END CERTIFICATE-----Generated at Sun Apr 19 11:04:18 2026 by rpki-client