$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LC3NfXNDQbHag9SYSssq5IHIzCc.roa File: LC3NfXNDQbHag9SYSssq5IHIzCc.roa (raw, json) Hash identifier: suzUTf3cdtcUD81Z59CeYPRqRZkyo+7SuJ7n36t3kbM= Subject key identifier: 2C:2D:CD:7D:73:43:41:B1:DA:83:D4:98:4A:CB:2A:E4:81:C8:CC:27 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0868 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LC3NfXNDQbHag9SYSssq5IHIzCc.roa Signing time: Tue 31 Mar 2026 07:43:29 +0000 ROA not before: Tue 31 Mar 2026 07:43:29 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 210.249.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:43:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=2C2DCD7D734341B1DA83D4984ACB2AE481C8CC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f1:12:6e:d5:91:91:62:8d:19:c2:05:16:3f: e3:0a:9a:1d:5b:41:d1:d1:5d:1d:5c:f1:f9:5b:38: eb:3b:83:af:a3:ca:07:af:d4:46:bd:7e:07:71:bf: b6:1e:48:92:83:08:27:bd:77:68:ca:e5:d9:db:c4: c5:58:8f:75:96:e3:ce:d7:d6:eb:54:6d:77:c9:6e: 5d:c1:26:e9:4e:5f:3f:ab:02:8e:8b:0c:83:0d:7b: c9:72:56:4a:f8:4c:37:f2:a2:2d:fb:8f:d4:02:1a: 50:e7:f6:5f:5a:6b:7c:a3:58:27:de:12:2b:f2:75: 8a:a9:bd:2b:1e:26:83:44:cb:39:83:6d:f2:61:77: 2a:d2:dd:7c:6f:3c:cd:b0:65:af:8b:0e:b7:af:93: 86:a7:6f:cf:01:0e:d5:b7:15:c1:1a:f0:28:83:cb: 3d:18:03:1f:d5:d4:dd:0c:56:d4:c5:09:2d:ed:87: 80:58:94:82:8d:cc:bd:ca:1d:3b:86:d0:20:e1:d3: 74:a7:ef:52:a9:18:22:ae:ed:2e:f4:83:c4:6e:3a: 74:7e:b6:ed:c9:06:c0:22:58:57:91:67:19:17:de: 84:ee:bc:b2:45:63:2d:89:15:89:15:e4:e2:0a:cc: fc:b4:72:c8:40:c6:38:85:f6:61:73:7a:61:7a:46: 14:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2D:CD:7D:73:43:41:B1:DA:83:D4:98:4A:CB:2A:E4:81:C8:CC:27 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LC3NfXNDQbHag9SYSssq5IHIzCc.roa sbgp-ipAddrBlock: critical IPv4: 210.249.149.0/24 Signature Algorithm: sha256WithRSAEncryption 71:fe:fe:d5:0d:b5:14:74:f7:52:f5:91:28:59:36:a9:e5:2d: d1:dd:d4:08:27:40:7b:5d:55:eb:0a:c4:23:f7:88:66:b8:18: 7f:b4:39:96:60:1f:49:06:3f:a4:9e:64:19:99:28:e4:45:77: a6:a2:63:41:01:36:d2:8f:c7:34:c1:12:ad:91:f0:9a:f2:a0: f4:6c:62:1b:a2:c7:7c:fd:27:94:4e:2d:a8:bb:22:44:bf:73: 76:06:8a:b8:11:71:dc:4c:89:05:56:8f:f5:e0:33:f7:4b:b6: 13:e9:22:9b:b2:59:29:67:45:5e:ad:34:8a:df:1f:cf:9f:96: d6:c6:c6:92:1b:c9:3e:9d:38:90:0c:ca:8f:5c:61:8e:18:11: 72:58:aa:6a:af:68:4f:87:47:a3:c9:ed:b0:8a:db:3d:c6:e7: 3a:da:87:57:40:1e:65:a9:ef:58:84:05:36:f0:6a:b5:6e:41: 25:54:4a:7c:c8:20:5f:a9:17:42:af:c7:28:4e:10:09:d1:1b: d0:4c:97:2e:d0:bb:60:12:b5:96:ca:22:a7:48:7a:34:c3:30: 5a:2e:42:1f:eb:36:b4:ba:37:92:d8:69:bb:d1:3c:cb:69:d0: 30:7e:12:91:cb:d3:a9:01:1f:b7:9f:59:71:55:ed:37:f9:1c: 1b:9b:7b:d0 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQzMjlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJDMkRDRDdENzM0MzQx QjFEQTgzRDQ5ODRBQ0IyQUU0ODFDOENDMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCT8RJu1ZGRYo0ZwgUWP+MKmh1bQdHRXR1c8flbOOs7g6+jygev 1Ea9fgdxv7YeSJKDCCe9d2jK5dnbxMVYj3WW487X1utUbXfJbl3BJulOXz+rAo6L DIMNe8lyVkr4TDfyoi37j9QCGlDn9l9aa3yjWCfeEivydYqpvSseJoNEyzmDbfJh dyrS3XxvPM2wZa+LDrevk4anb88BDtW3FcEa8CiDyz0YAx/V1N0MVtTFCS3th4BY lIKNzL3KHTuG0CDh03Sn71KpGCKu7S70g8RuOnR+tu3JBsAiWFeRZxkX3oTuvLJF Yy2JFYkV5OIKzPy0cshAxjiF9mFzemF6RhT1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQULC3NfXNDQbHag9SYSssq5IHIzCcwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL0xDM05mWE5EUWJIYWc5U1lTc3NxNUlISXpDYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS+ZUwDQYJKoZIhvcNAQELBQADggEB AHH+/tUNtRR091L1kShZNqnlLdHd1AgnQHtdVesKxCP3iGa4GH+0OZZgH0kGP6Se ZBmZKORFd6aiY0EBNtKPxzTBEq2R8JryoPRsYhuix3z9J5ROLai7IkS/c3YGirgR cdxMiQVWj/XgM/dLthPpIpuyWSlnRV6tNIrfH8+fltbGxpIbyT6dOJAMyo9cYY4Y EXJYqmqvaE+HR6PJ7bCK2z3G5zrah1dAHmWp71iEBTbwarVuQSVUSnzIIF+pF0Kv xyhOEAnRG9BMly7Qu2AStZbKIqdIejTDMFouQh/rNrS6N5LYabvRPMtp0DB+EpHL 06kBH7efWXFV7Tf5HBube9A= -----END CERTIFICATE-----Generated at Sun Apr 19 08:49:40 2026 by rpki-client