$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KHXFYjC5VKevKbzakbSGdXIsDss.roa File: KHXFYjC5VKevKbzakbSGdXIsDss.roa (raw, json) Hash identifier: ovTkUsBWJpXTch8A2IF3ua6AYtYGOXXsukEHtR97Ah4= Subject key identifier: 28:75:C5:62:30:B9:54:A7:AF:29:BC:DA:91:B4:86:75:72:2C:0E:CB Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 07BD Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KHXFYjC5VKevKbzakbSGdXIsDss.roa Signing time: Tue 31 Mar 2026 07:42:00 +0000 ROA not before: Tue 31 Mar 2026 07:42:00 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 124.211.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:42:00 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2875C56230B954A7AF29BCDA91B48675722C0ECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:05:fd:c8:f4:68:7b:f9:6d:49:61:2a:78:49: 8a:e0:24:24:35:f6:f3:f3:86:c9:71:3b:7a:b8:60: d2:15:0a:76:46:06:98:8a:14:1e:27:df:3a:ac:a8: 45:90:d5:ae:c9:30:e8:7e:16:10:86:a8:8b:da:5e: e2:15:69:87:af:cc:f7:5a:04:a7:fb:4e:41:d9:4d: c5:67:f3:52:b2:42:42:48:d4:11:13:ab:25:d4:b5: d5:62:30:55:1d:d2:48:70:b0:2a:cc:6b:98:0b:87: a7:8e:72:95:e0:bf:43:9a:49:1b:46:dc:d3:f8:1e: 61:95:78:99:f7:32:5f:ac:4f:17:e6:1c:3a:84:a1: 51:9a:c2:36:00:88:29:70:b4:73:7b:49:52:65:03: ab:ee:fd:7d:ab:27:ca:62:38:aa:94:53:14:99:55: ce:c6:5d:7c:79:83:d5:9b:4d:73:0b:63:51:9a:f3: 96:50:53:d2:72:c5:3d:f2:78:6f:5b:d1:41:e8:7f: f7:65:a0:e6:f9:b3:e2:1b:3e:82:06:b6:87:72:cb: 86:02:94:d4:e3:ad:d2:93:75:32:d6:ec:0c:f4:4a: 57:c9:30:37:0d:0f:a8:c6:82:2a:24:ca:c4:b8:32: 10:ef:22:22:4b:0c:dd:4c:ba:af:d9:9e:9b:5d:a2: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:C5:62:30:B9:54:A7:AF:29:BC:DA:91:B4:86:75:72:2C:0E:CB X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KHXFYjC5VKevKbzakbSGdXIsDss.roa sbgp-ipAddrBlock: critical IPv4: 124.211.0.0/19 Signature Algorithm: sha256WithRSAEncryption 3d:d9:71:a9:82:59:a2:6e:6c:11:db:d3:b1:49:75:bb:32:ad: e9:e2:32:df:29:43:4d:85:4d:51:3f:f9:1d:98:75:e4:77:be: fc:fa:ad:5b:d4:be:3a:bc:fd:09:8e:b4:dd:c5:6a:b5:89:f4: 00:2c:60:fa:04:e8:1a:b7:28:e6:eb:7a:db:c5:dc:97:a7:f3: 48:4c:54:b6:bc:02:48:3d:03:7a:4e:b4:23:5f:63:d1:10:f4: 17:7d:81:db:ae:07:7f:9f:4a:e3:cd:98:26:e1:e9:32:2c:57: 5b:c3:bd:b3:2b:23:26:c1:c3:84:8d:b9:0d:dd:86:7c:76:f4: 07:77:b3:f5:55:96:22:f1:35:1b:7e:62:9b:a0:3b:49:e4:cc: 49:53:5b:f4:d6:e4:da:6e:bb:28:96:29:88:3f:f3:b0:7a:90: 24:c0:0c:91:63:ea:38:68:29:29:b0:9d:e1:c6:91:a9:81:41: c8:b1:7b:24:c4:54:f5:5b:cf:5d:a4:a9:23:dc:da:e2:dc:73: 3e:6c:4b:fd:99:34:b3:ca:73:d4:c1:29:0a:5f:e9:29:3f:57: e8:39:23:d3:78:e6:d6:08:cb:c9:0f:3f:af:2f:9c:d4:d7:0c: b5:06:be:51:c2:ee:f2:38:59:00:21:0a:9b:e4:e6:6e:98:8e: 34:82:e7:2d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICB70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQyMDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4NzVDNTYyMzBCOTU0 QTdBRjI5QkNEQTkxQjQ4Njc1NzIyQzBFQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqBf3I9Gh7+W1JYSp4SYrgJCQ19vPzhslxO3q4YNIVCnZGBpiK FB4n3zqsqEWQ1a7JMOh+FhCGqIvaXuIVaYevzPdaBKf7TkHZTcVn81KyQkJI1BET qyXUtdViMFUd0khwsCrMa5gLh6eOcpXgv0OaSRtG3NP4HmGVeJn3Ml+sTxfmHDqE oVGawjYAiClwtHN7SVJlA6vu/X2rJ8piOKqUUxSZVc7GXXx5g9WbTXMLY1Ga85ZQ U9JyxT3yeG9b0UHof/dloOb5s+IbPoIGtodyy4YClNTjrdKTdTLW7Az0SlfJMDcN D6jGgiokysS4MhDvIiJLDN1Muq/ZnptdondpAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUKHXFYjC5VKevKbzakbSGdXIsDsswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL0tIWEZZakM1VktldktiemFrYlNHZFhJc0Rzcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV80wAwDQYJKoZIhvcNAQELBQADggEB AD3ZcamCWaJubBHb07FJdbsyreniMt8pQ02FTVE/+R2YdeR3vvz6rVvUvjq8/QmO tN3FarWJ9AAsYPoE6Bq3KObretvF3Jen80hMVLa8Akg9A3pOtCNfY9EQ9Bd9gduu B3+fSuPNmCbh6TIsV1vDvbMrIybBw4SNuQ3dhnx29Ad3s/VVliLxNRt+YpugO0nk zElTW/TW5NpuuyiWKYg/87B6kCTADJFj6jhoKSmwneHGkamBQcixeyTEVPVbz12k qSPc2uLccz5sS/2ZNLPKc9TBKQpf6Sk/V+g5I9N45tYIy8kPP68vnNTXDLUGvlHC 7vI4WQAhCpvk5m6YjjSC5y0= -----END CERTIFICATE-----Generated at Fri Apr 17 08:13:41 2026 by rpki-client