$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KCsWN8qEIqP9yCKhvcemujcTKBM.roa File: KCsWN8qEIqP9yCKhvcemujcTKBM.roa (raw, json) Hash identifier: Bw5CXqQKF2C5EyFpXs8kgJzThhLMn8nD4OX0SF20INs= Subject key identifier: 28:2B:16:37:CA:84:22:A3:FD:C8:22:A1:BD:C7:A6:BA:37:13:28:13 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 07BC Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KCsWN8qEIqP9yCKhvcemujcTKBM.roa Signing time: Tue 31 Mar 2026 07:42:00 +0000 ROA not before: Tue 31 Mar 2026 07:42:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 59.142.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:42:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=282B1637CA8422A3FDC822A1BDC7A6BA37132813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:10:e5:e8:2f:78:9b:a2:32:4d:27:c0:4f: 8e:3d:63:1c:14:47:0c:a4:2b:33:d0:d2:21:96:db: 12:cc:6d:5c:73:13:e9:09:19:67:8d:27:c3:bc:ce: 07:5f:17:a0:8e:c2:a5:6b:d0:be:04:73:58:74:25: 01:bb:88:fe:b4:2c:43:67:52:3c:81:70:4e:17:b4: e9:24:ea:0b:ab:27:34:8e:18:0c:a1:e8:74:83:15: 5b:3f:c2:45:20:f0:0e:5e:56:65:bc:66:74:4f:1a: b4:69:c0:56:4b:c8:a9:9c:73:d6:3e:b0:09:ef:b3: ee:ac:fc:3f:1d:a2:ae:91:cc:60:8a:df:71:18:d9: fe:f1:25:1a:66:ea:58:93:ae:4b:7c:46:73:7b:91: b3:ba:88:a6:b0:92:71:a5:f3:39:3f:b9:5a:86:f3: 56:8a:ab:03:be:ab:af:2e:c9:82:8b:7a:0a:24:e7: 05:52:07:50:29:2f:b8:b9:2f:11:f8:98:d4:18:60: f2:e2:95:86:ad:71:09:74:57:f4:3a:ed:34:2e:4d: 04:33:84:6e:96:f4:7d:06:e0:85:00:f1:ca:80:3a: ce:d3:17:5a:3f:31:1a:c4:11:d3:72:0a:02:2e:68: cc:6e:1c:30:28:98:2c:8e:69:dd:84:04:ab:dc:f1: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2B:16:37:CA:84:22:A3:FD:C8:22:A1:BD:C7:A6:BA:37:13:28:13 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KCsWN8qEIqP9yCKhvcemujcTKBM.roa sbgp-ipAddrBlock: critical IPv4: 59.142.0.0/16 Signature Algorithm: sha256WithRSAEncryption 32:26:1d:94:03:20:d5:6e:6d:63:4c:b5:7b:87:7b:40:1e:48: 31:eb:62:1d:5a:59:8e:de:cc:8b:98:fc:28:81:49:57:0a:6e: ed:df:e5:e6:3a:27:0b:7f:fc:31:f1:2c:5d:22:6d:9b:ea:ac: ec:42:89:ab:26:c3:e3:a2:16:81:8c:51:b4:aa:c3:69:70:12: b2:54:07:43:c8:58:c3:e0:09:0c:43:0f:2b:c0:38:c0:15:4e: 5d:d8:70:68:4d:ed:5f:8e:b4:a7:64:2e:24:18:21:02:d7:47: 2c:fa:f2:59:30:52:5c:ba:ab:81:59:32:2f:a4:4f:43:7e:da: 87:93:64:06:38:81:dd:cc:d6:cd:36:1e:1f:1d:1f:60:e2:3a: 26:fe:31:7d:f8:a9:bf:26:8e:83:8e:1b:1c:66:7d:a1:c2:1b: 9e:0d:07:c7:f3:5b:16:6c:9e:cd:e7:42:5e:f4:96:b7:30:73: 65:20:10:18:ee:a3:61:4b:18:23:ef:bb:7c:e0:ad:7e:84:05: dd:10:be:b5:89:6d:37:b6:25:10:f7:7f:40:09:f6:e9:f2:fc: 24:1f:c0:35:26:a4:71:49:ef:8b:ee:b8:1a:21:b4:d2:60:27: a5:f7:00:0f:37:d5:0e:dc:0c:ac:a1:4e:57:8c:33:90:e0:14: 77:c3:d4:cd -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQyMDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4MkIxNjM3Q0E4NDIy QTNGREM4MjJBMUJEQzdBNkJBMzcxMzI4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/sBDl6C94m6IyTSfAT449YxwURwykKzPQ0iGW2xLMbVxzE+kJ GWeNJ8O8zgdfF6COwqVr0L4Ec1h0JQG7iP60LENnUjyBcE4XtOkk6gurJzSOGAyh 6HSDFVs/wkUg8A5eVmW8ZnRPGrRpwFZLyKmcc9Y+sAnvs+6s/D8doq6RzGCK33EY 2f7xJRpm6liTrkt8RnN7kbO6iKawknGl8zk/uVqG81aKqwO+q68uyYKLegok5wVS B1ApL7i5LxH4mNQYYPLilYatcQl0V/Q67TQuTQQzhG6W9H0G4IUA8cqAOs7TF1o/ MRrEEdNyCgIuaMxuHDAomCyOad2EBKvc8c/7AgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUKCsWN8qEIqP9yCKhvcemujcTKBMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL0tDc1dOOHFFSXFQOXlDS2h2Y2VtdWpjVEtCTS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwA7jjANBgkqhkiG9w0BAQsFAAOCAQEA MiYdlAMg1W5tY0y1e4d7QB5IMetiHVpZjt7Mi5j8KIFJVwpu7d/l5jonC3/8MfEs XSJtm+qs7EKJqybD46IWgYxRtKrDaXASslQHQ8hYw+AJDEMPK8A4wBVOXdhwaE3t X460p2QuJBghAtdHLPryWTBSXLqrgVkyL6RPQ37ah5NkBjiB3czWzTYeHx0fYOI6 Jv4xffipvyaOg44bHGZ9ocIbng0Hx/NbFmyezedCXvSWtzBzZSAQGO6jYUsYI++7 fOCtfoQF3RC+tYltN7YlEPd/QAn26fL8JB/ANSakcUnvi+64GiG00mAnpfcADzfV DtwMrKFOV4wzkOAUd8PUzQ== -----END CERTIFICATE-----Generated at Sun Apr 19 10:04:52 2026 by rpki-client