$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CUg2l5r_CL-z5QlVOVpWm-IED_Y.roa File: CUg2l5r_CL-z5QlVOVpWm-IED_Y.roa (raw, json) Hash identifier: 8ptfFvfb05Kn1D3pojPjv8c7lGPOxN6Hvnv2lEHDzWY= Subject key identifier: 09:48:36:97:9A:FF:08:BF:B3:E5:09:55:39:5A:56:9B:E2:04:0F:F6 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 07DB Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CUg2l5r_CL-z5QlVOVpWm-IED_Y.roa Signing time: Tue 31 Mar 2026 07:42:17 +0000 ROA not before: Tue 31 Mar 2026 07:42:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 27.87.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:42:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=094836979AFF08BFB3E50955395A569BE2040FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:73:5e:62:5a:54:a6:08:3a:89:c9:ee:2e: 30:49:13:b2:1b:c5:0d:62:cf:59:ac:a5:95:6e:e5: 28:75:89:85:ce:b3:05:8c:08:be:01:3d:58:1c:a4: 5d:24:2c:94:22:54:ac:07:b2:4f:2b:23:da:23:fc: 36:f9:30:3d:9c:91:e6:5f:b6:19:84:ca:93:99:b3: 97:d7:e1:ee:4f:f5:d2:d0:5b:cd:74:dd:a7:da:03: 60:c4:57:cb:9f:d1:79:d4:2c:09:33:58:cb:c2:5a: b1:43:e2:8c:3f:ed:db:74:c4:ea:a7:b7:f7:7c:0b: 47:39:72:a7:7c:c4:34:cf:be:5c:a2:65:c9:db:f1: 9a:61:3e:15:2f:a3:24:dd:7a:e5:89:d1:b3:14:19: e4:f2:1c:6f:da:7c:d1:c1:36:40:a1:12:95:c2:3f: 7a:57:42:1a:71:59:4a:9c:67:06:61:e9:7b:60:6d: b1:7f:b2:92:9e:a3:a6:f0:33:b1:f7:7d:e1:23:23: 3b:64:14:05:6e:8a:f8:ec:8c:ec:03:d1:04:13:1b: 14:e5:25:29:dd:29:ce:4e:36:11:dd:82:dc:12:e4: 6c:67:ba:e1:78:b8:83:9f:1f:be:13:d6:c9:73:9c: 12:57:18:df:65:1e:b4:53:50:e8:57:a4:a0:cd:9e: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:48:36:97:9A:FF:08:BF:B3:E5:09:55:39:5A:56:9B:E2:04:0F:F6 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CUg2l5r_CL-z5QlVOVpWm-IED_Y.roa sbgp-ipAddrBlock: critical IPv4: 27.87.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6f:84:f5:97:0b:19:43:1c:bc:64:80:73:9c:54:fd:54:6d:10: cd:3c:50:d6:a7:09:ae:04:39:79:f8:a4:e6:6b:fc:46:e8:a5: 48:dd:05:6d:a4:b3:9b:2f:a5:f4:c4:51:50:c3:c5:f8:71:04: 34:56:49:96:31:f5:a4:57:89:cc:cd:69:13:09:1a:d0:0d:88: 38:b7:ad:74:e6:e8:bd:85:4a:b2:8f:37:60:aa:f2:ff:aa:5d: c4:4d:fd:21:44:27:ed:1a:76:06:4e:dd:07:d9:0f:37:15:a3: fd:46:2f:b8:41:9b:95:06:08:7c:f6:05:27:35:16:a1:b5:18: a8:ad:eb:41:af:48:14:fc:b3:02:9f:fa:86:7f:00:42:40:79: dc:65:0f:b3:b0:bc:7f:c2:0f:6f:aa:48:bc:e2:3f:29:67:11: 0b:24:3e:a5:75:bd:8a:ac:45:f2:b8:65:66:b4:58:92:10:a1: b6:11:c9:2b:7d:bc:ca:04:84:10:16:11:95:a8:d6:bd:24:48: 49:b5:e0:9e:8f:3e:fa:f2:ad:d3:2d:a7:5d:96:14:57:de:18: 21:bf:8a:70:b0:56:a3:57:4b:79:d6:fd:2b:7a:6c:d4:b8:5b: f6:ac:83:30:a1:ad:b2:59:9f:c2:07:38:54:60:c1:da:c0:19: b0:11:fe:4b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICB9swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQyMTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA5NDgzNjk3OUFGRjA4 QkZCM0U1MDk1NTM5NUE1NjlCRTIwNDBGRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG1XNeYlpUpgg6icnuLjBJE7IbxQ1iz1mspZVu5Sh1iYXOswWM CL4BPVgcpF0kLJQiVKwHsk8rI9oj/Db5MD2ckeZfthmEypOZs5fX4e5P9dLQW810 3afaA2DEV8uf0XnULAkzWMvCWrFD4ow/7dt0xOqnt/d8C0c5cqd8xDTPvlyiZcnb 8ZphPhUvoyTdeuWJ0bMUGeTyHG/afNHBNkChEpXCP3pXQhpxWUqcZwZh6XtgbbF/ spKeo6bwM7H3feEjIztkFAVuivjsjOwD0QQTGxTlJSndKc5ONhHdgtwS5GxnuuF4 uIOfH74T1slznBJXGN9lHrRTUOhXpKDNnsSlAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUCUg2l5r/CL+z5QlVOVpWm+IED/YwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL0NVZzJsNXJfQ0wtejVRbFZPVnBXbS1JRURfWS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAbVzANBgkqhkiG9w0BAQsFAAOCAQEA b4T1lwsZQxy8ZIBznFT9VG0QzTxQ1qcJrgQ5efik5mv8RuilSN0FbaSzmy+l9MRR UMPF+HEENFZJljH1pFeJzM1pEwka0A2IOLetdObovYVKso83YKry/6pdxE39IUQn 7Rp2Bk7dB9kPNxWj/UYvuEGblQYIfPYFJzUWobUYqK3rQa9IFPyzAp/6hn8AQkB5 3GUPs7C8f8IPb6pIvOI/KWcRCyQ+pXW9iqxF8rhlZrRYkhChthHJK328ygSEEBYR lajWvSRISbXgno8++vKt0y2nXZYUV94YIb+KcLBWo1dLedb9K3ps1Lhb9qyDMKGt slmfwgc4VGDB2sAZsBH+Sw== -----END CERTIFICATE-----Generated at Sun Apr 19 10:13:36 2026 by rpki-client