$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BQ4KUW0-Ofd_g8LT9aioU-l6EJY.roa File: BQ4KUW0-Ofd_g8LT9aioU-l6EJY.roa (raw, json) Hash identifier: dzQ2UlXfw0zRfxvFNSVSqEuUH0RrJaYyGokaoTr+rfI= Subject key identifier: 05:0E:0A:51:6D:3E:39:F7:7F:83:C2:D3:F5:A8:A8:53:E9:7A:10:96 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 079D Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BQ4KUW0-Ofd_g8LT9aioU-l6EJY.roa Signing time: Tue 31 Mar 2026 07:41:45 +0000 ROA not before: Tue 31 Mar 2026 07:41:45 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 222.7.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:41:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=050E0A516D3E39F77F83C2D3F5A8A853E97A1096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f5:a6:b6:ce:3d:fb:38:af:1e:66:95:f1:e1: e0:3a:ab:4c:24:f6:88:dd:5d:cb:75:6f:bc:ec:bb: bd:b9:95:c7:79:6b:cf:cd:49:69:57:28:d8:25:40: 95:49:d2:8c:5a:7b:00:a0:1c:90:7d:5a:7c:4d:1d: cc:e3:36:fb:ee:88:5e:84:df:1c:b6:19:af:a2:22: 93:cf:4b:70:15:0a:13:1c:02:a1:30:97:75:1d:ab: 82:71:92:15:26:bf:8d:f6:91:b2:cf:cc:55:69:57: 9c:a9:9d:bc:5b:75:85:5c:7f:8f:6c:06:cc:7b:4f: 22:7c:3b:9f:f2:61:61:a8:96:9b:18:0d:c8:6e:ce: 32:58:77:e3:95:99:4b:cc:37:47:75:e7:74:30:a0: 54:de:88:46:8b:f1:fd:43:27:10:93:98:01:a3:9e: 8a:ad:be:8d:a1:99:7d:9e:3d:a2:c4:e4:09:d3:eb: 76:07:ec:82:67:3a:2c:9d:4a:e4:42:7f:d3:b6:f6: 81:de:e7:a8:bb:40:ce:67:e7:ec:b4:e3:15:d6:85: d4:1b:b3:60:99:cc:d4:0d:e2:5f:c7:6a:f6:00:e9: 68:dd:39:33:6c:fd:ab:a2:16:4a:1d:34:d3:1f:8c: 44:f7:e3:ed:ef:1b:f1:29:66:05:e9:69:d6:b0:e1: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0E:0A:51:6D:3E:39:F7:7F:83:C2:D3:F5:A8:A8:53:E9:7A:10:96 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BQ4KUW0-Ofd_g8LT9aioU-l6EJY.roa sbgp-ipAddrBlock: critical IPv4: 222.7.0.0/16 Signature Algorithm: sha256WithRSAEncryption ad:8b:4e:8e:39:c2:bc:93:c2:e2:73:f0:81:b7:d0:c5:d8:6b: 72:f6:e9:50:de:55:b4:31:e2:0f:da:81:64:0f:f4:14:38:b4: ca:5f:04:54:5d:48:ae:8c:48:64:f8:cc:d4:37:f9:39:88:41: 7c:b6:dd:7e:71:2f:ed:ef:07:b9:2f:b3:e2:f4:ac:fa:0b:17: df:5a:91:fe:a7:92:e2:0b:b7:53:d5:55:97:7f:b4:e3:80:f3: d4:d8:fd:99:15:33:a6:75:e3:c5:ae:2f:b1:cc:50:62:1a:25: 18:2a:b7:4e:8d:43:10:ca:63:9d:c8:21:da:2c:9e:3c:69:85: 3e:93:c2:c9:e6:84:5a:de:0b:f6:0b:16:eb:7d:4d:c9:63:8b: b8:b7:01:02:91:cb:26:54:29:28:d9:f4:f7:a4:a9:f2:e1:d3: 39:72:96:c7:7c:7a:90:c9:f7:e8:df:fd:75:a5:e6:e6:0a:a9: fe:82:58:10:d8:f5:13:09:5c:dc:8d:8c:24:f9:b8:fd:1e:c3: 2e:cb:ef:e2:8d:55:a8:4f:12:76:8c:7c:0a:1e:95:0c:5b:d7: b9:a4:3c:97:0c:d7:27:20:22:91:1f:b8:6c:0b:ac:54:11:9a: 8e:09:59:f5:2a:f4:f0:21:80:f6:93:cf:5a:c0:f9:92:7e:67: cc:14:33:65 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICB50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQxNDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA1MEUwQTUxNkQzRTM5 Rjc3RjgzQzJEM0Y1QThBODUzRTk3QTEwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd9aa2zj37OK8eZpXx4eA6q0wk9ojdXct1b7zsu725lcd5a8/N SWlXKNglQJVJ0oxaewCgHJB9WnxNHczjNvvuiF6E3xy2Ga+iIpPPS3AVChMcAqEw l3Udq4JxkhUmv432kbLPzFVpV5ypnbxbdYVcf49sBsx7TyJ8O5/yYWGolpsYDchu zjJYd+OVmUvMN0d153QwoFTeiEaL8f1DJxCTmAGjnoqtvo2hmX2ePaLE5AnT63YH 7IJnOiydSuRCf9O29oHe56i7QM5n5+y04xXWhdQbs2CZzNQN4l/HavYA6WjdOTNs /auiFkodNNMfjET34+3vG/EpZgXpadaw4eAPAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUBQ4KUW0+Ofd/g8LT9aioU+l6EJYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL0JRNEtVVzAtT2ZkX2c4TFQ5YWlvVS1sNkVKWS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDeBzANBgkqhkiG9w0BAQsFAAOCAQEA rYtOjjnCvJPC4nPwgbfQxdhrcvbpUN5VtDHiD9qBZA/0FDi0yl8EVF1IroxIZPjM 1Df5OYhBfLbdfnEv7e8HuS+z4vSs+gsX31qR/qeS4gu3U9VVl3+044Dz1Nj9mRUz pnXjxa4vscxQYholGCq3To1DEMpjncgh2iyePGmFPpPCyeaEWt4L9gsW631NyWOL uLcBApHLJlQpKNn096Sp8uHTOXKWx3x6kMn36N/9daXm5gqp/oJYENj1Ewlc3I2M JPm4/R7DLsvv4o1VqE8Sdox8Ch6VDFvXuaQ8lwzXJyAikR+4bAusVBGajglZ9Sr0 8CGA9pPPWsD5kn5nzBQzZQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:57:22 2026 by rpki-client