$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/GBNnZX8UZCEK6GmIkD5o0xMNTd8.roa File: GBNnZX8UZCEK6GmIkD5o0xMNTd8.roa (raw, json) Hash identifier: ACbMmkQ/mT1GVgVm8kiW6ORGxbMgKmV4LwMCXlg1FIQ= Subject key identifier: 18:13:67:65:7F:14:64:21:0A:E8:69:88:90:3E:68:D3:13:0D:4D:DF Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0915 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GBNnZX8UZCEK6GmIkD5o0xMNTd8.roa Signing time: Tue 31 Mar 2026 07:44:47 +0000 ROA not before: Tue 31 Mar 2026 07:44:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 14.8.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2325 (0x915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:44:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=181367657F1464210AE86988903E68D3130D4DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:55:1c:29:eb:9f:0f:88:62:bb:01:49:64:7c: b4:ed:74:b4:20:7b:4d:99:7f:1e:2e:fa:63:82:4f: 1d:00:60:4f:de:ed:3b:03:6e:9a:b9:00:af:8e:c4: b7:02:c5:5a:3e:fc:b1:35:f0:a4:1d:be:c1:2d:f1: bf:16:7d:45:a3:84:61:9d:34:ca:14:ef:34:f9:b9: 1f:dd:3d:81:bd:65:53:c2:c6:96:32:4e:1a:b7:17: bc:c0:d3:b0:fd:bb:f5:91:8a:f5:b6:f9:08:48:03: 35:28:9f:c4:ac:df:5c:5c:a5:e4:a9:a9:2a:d0:cc: 2d:b6:9a:87:72:bf:23:a0:d9:6e:76:f9:2c:82:2a: 77:08:75:92:7c:87:09:dd:02:17:30:2d:ae:a7:63: 85:9f:b9:b8:7f:1f:1c:0d:b9:e4:15:ae:4b:e6:78: 31:c4:ec:68:99:ab:a1:9c:a4:5f:c8:02:1d:bc:98: f9:6d:f5:8a:e2:7e:3a:42:fb:f8:88:03:4e:e2:92: 1f:f4:88:12:b3:0a:34:6d:c9:85:91:fb:76:d2:f4: 57:e1:95:75:98:1f:9f:be:ab:18:4f:f7:a9:90:57: d7:d7:69:4c:23:ff:8b:8e:0c:30:77:ee:38:e6:01: cd:cb:0e:f5:aa:39:d1:7a:0e:29:32:9c:b9:b3:88: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:13:67:65:7F:14:64:21:0A:E8:69:88:90:3E:68:D3:13:0D:4D:DF X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GBNnZX8UZCEK6GmIkD5o0xMNTd8.roa sbgp-ipAddrBlock: critical IPv4: 14.8.0.0/15 Signature Algorithm: sha256WithRSAEncryption 7b:80:7c:b5:52:99:0d:92:bd:e3:08:5a:39:02:e2:68:58:34: 9f:e6:fa:6f:5b:51:a0:af:c6:d1:70:dd:93:94:24:60:46:6b: e7:df:97:2b:a7:5d:26:55:6e:eb:10:13:91:2c:fa:e3:23:0c: 35:2b:22:d1:98:b8:44:db:80:0d:5d:0c:ac:12:45:36:74:90: cd:a6:8e:8a:f3:4b:58:c8:c4:90:c7:f8:13:96:14:54:95:d3: 04:10:08:64:90:af:2a:06:82:05:6b:eb:f8:32:b7:96:1e:18: fe:18:d2:66:e5:2a:84:b5:ae:4e:04:67:40:27:6b:8b:52:5c: 3e:0f:67:f6:b7:d6:57:1c:93:ad:89:db:13:39:94:6a:0b:0b: ff:97:e7:be:b8:f7:ee:87:27:7d:b3:17:e8:63:73:a0:96:ad: f9:35:7d:33:af:f7:1d:54:a2:9c:8d:6e:4d:aa:34:93:a3:aa: 2f:75:b7:81:b9:c5:b2:26:8c:39:ab:31:17:bf:ae:79:c7:a1: f3:0b:08:e1:03:54:52:c3:e9:8c:c5:5e:dc:8f:f8:88:ce:bf: e7:c2:22:7c:ec:46:95:34:e1:7c:15:3d:91:22:25:fe:05:f2: b4:16:df:48:fa:bf:8e:4c:75:10:cd:d9:98:75:0d:4d:b3:53: 34:c7:e3:a7 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQ0NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE4MTM2NzY1N0YxNDY0 MjEwQUU4Njk4ODkwM0U2OEQzMTMwRDREREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeVRwp658PiGK7AUlkfLTtdLQge02Zfx4u+mOCTx0AYE/e7TsD bpq5AK+OxLcCxVo+/LE18KQdvsEt8b8WfUWjhGGdNMoU7zT5uR/dPYG9ZVPCxpYy Thq3F7zA07D9u/WRivW2+QhIAzUon8Ss31xcpeSpqSrQzC22modyvyOg2W52+SyC KncIdZJ8hwndAhcwLa6nY4Wfubh/HxwNueQVrkvmeDHE7GiZq6GcpF/IAh28mPlt 9YrifjpC+/iIA07ikh/0iBKzCjRtyYWR+3bS9FfhlXWYH5++qxhP96mQV9fXaUwj /4uODDB37jjmAc3LDvWqOdF6DikynLmziCZrAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUGBNnZX8UZCEK6GmIkD5o0xMNTd8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL0dCTm5aWDhVWkNFSzZHbUlrRDVvMHhNTlRkOC5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwEOCDANBgkqhkiG9w0BAQsFAAOCAQEA e4B8tVKZDZK94whaOQLiaFg0n+b6b1tRoK/G0XDdk5QkYEZr59+XK6ddJlVu6xAT kSz64yMMNSsi0Zi4RNuADV0MrBJFNnSQzaaOivNLWMjEkMf4E5YUVJXTBBAIZJCv KgaCBWvr+DK3lh4Y/hjSZuUqhLWuTgRnQCdri1JcPg9n9rfWVxyTrYnbEzmUagsL /5fnvrj37ocnfbMX6GNzoJat+TV9M6/3HVSinI1uTao0k6OqL3W3gbnFsiaMOasx F7+ueceh8wsI4QNUUsPpjMVe3I/4iM6/58IifOxGlTThfBU9kSIl/gXytBbfSPq/ jkx1EM3ZmHUNTbNTNMfjpw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:18:11 2026 by rpki-client