$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/SDO0XHo_D2b1Y6368YrTHc2tda0.roa File: SDO0XHo_D2b1Y6368YrTHc2tda0.roa (raw, json) Hash identifier: VOuWkTVULh6CUJEn6wvcKUBbTikFRz9avrrVm0eW/9E= Subject key identifier: 48:33:B4:5C:7A:3F:0F:66:F5:63:AD:FA:F1:8A:D3:1D:CD:AD:75:AD Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 090B Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/SDO0XHo_D2b1Y6368YrTHc2tda0.roa Signing time: Tue 31 Mar 2026 07:44:43 +0000 ROA not before: Tue 31 Mar 2026 07:44:43 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 210.224.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2315 (0x90b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:44:43 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4833B45C7A3F0F66F563ADFAF18AD31DCDAD75AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f6:7e:8e:da:34:42:46:01:55:b7:e8:69:23: 4a:73:3f:55:44:c1:a2:db:a9:06:3e:82:57:2f:30: 28:71:62:0d:21:6d:93:c4:bf:6d:0f:59:9b:cf:9b: f6:b4:9f:66:fa:5e:89:c9:37:f5:80:db:79:06:1e: e6:9c:a6:8b:c4:f5:f4:68:46:82:f5:cf:21:77:be: ab:b3:98:cd:68:9f:90:d8:d2:3c:9a:6c:6a:ed:90: 23:f6:7b:a1:55:8b:a2:00:76:9a:78:b6:23:66:ca: 30:b9:83:3a:26:a6:fa:cc:5f:cc:8e:8f:5f:8f:4b: 72:1c:7e:f4:b7:68:65:c5:4f:2f:31:04:90:b3:30: 88:17:87:a2:19:c0:1c:80:c7:d5:04:21:db:58:0b: a9:ad:e1:74:94:61:94:1a:61:be:67:ac:4b:61:d2: 7d:a8:f0:c9:a9:9c:38:cf:99:5e:06:5e:81:74:21: e8:03:46:06:5d:d7:6e:1c:bd:b0:d2:64:c6:1b:cc: bf:8a:fb:7d:d0:f2:4e:95:34:c1:2f:4d:82:b1:f5: ed:f5:20:c7:2d:ba:59:df:5b:b2:d3:19:76:c4:40: af:42:a5:75:2f:e6:89:15:8a:a9:28:0f:15:32:a8: 13:ce:9e:41:03:08:41:5f:fe:9e:8c:e9:15:d2:73: c7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:33:B4:5C:7A:3F:0F:66:F5:63:AD:FA:F1:8A:D3:1D:CD:AD:75:AD X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/SDO0XHo_D2b1Y6368YrTHc2tda0.roa sbgp-ipAddrBlock: critical IPv4: 210.224.128.0/19 Signature Algorithm: sha256WithRSAEncryption 7f:8d:67:b3:9e:3c:da:8e:1a:1c:ca:0d:cd:41:39:95:5e:3d: 62:85:94:4a:f7:3d:52:9e:e7:d4:29:53:d5:a6:2a:ca:39:21: ff:81:f9:83:35:d3:bf:e1:4f:98:25:75:5e:a5:24:47:c2:9d: b2:c1:b8:f4:82:90:9d:d7:64:72:bc:01:45:9a:14:19:ef:06: 32:a2:90:3b:82:3f:1a:b6:4b:0d:c9:d5:2b:f7:12:7c:9b:5b: f3:55:45:10:57:44:93:c0:a7:a1:04:2c:c0:0b:29:f5:3f:33: a6:9b:5b:c5:07:e7:1b:57:b1:79:dd:88:04:3a:c2:2f:9f:91: 37:f6:31:fe:1e:d7:7b:54:ea:14:55:4a:eb:0b:b1:e5:87:44: f4:39:5c:ad:55:91:bf:0f:8c:d1:86:a0:5a:b6:f4:29:a8:8e: 2a:9e:05:4c:14:e7:18:a8:95:bd:66:25:30:27:a9:b6:d8:5b: ae:d6:d3:82:52:58:3c:13:a8:59:bf:52:44:5f:2f:dd:70:1f: b1:f1:df:b6:4f:fa:03:d6:b9:27:fc:29:a2:81:1a:7d:6f:ec: 84:40:19:79:5b:f4:60:47:b3:ba:f9:e9:7c:92:a2:70:9b:85: c6:02:dc:66:20:42:4f:8f:6b:2c:1d:c0:85:1e:c4:5a:5f:eb: c9:f6:cc:24 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICCQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQ0NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ4MzNCNDVDN0EzRjBG NjZGNTYzQURGQUYxOEFEMzFEQ0RBRDc1QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe9n6O2jRCRgFVt+hpI0pzP1VEwaLbqQY+glcvMChxYg0hbZPE v20PWZvPm/a0n2b6XonJN/WA23kGHuacpovE9fRoRoL1zyF3vquzmM1on5DY0jya bGrtkCP2e6FVi6IAdpp4tiNmyjC5gzompvrMX8yOj1+PS3IcfvS3aGXFTy8xBJCz MIgXh6IZwByAx9UEIdtYC6mt4XSUYZQaYb5nrEth0n2o8MmpnDjPmV4GXoF0IegD RgZd124cvbDSZMYbzL+K+33Q8k6VNMEvTYKx9e31IMctulnfW7LTGXbEQK9CpXUv 5okViqkoDxUyqBPOnkEDCEFf/p6M6RXSc8eLAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUSDO0XHo/D2b1Y6368YrTHc2tda0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL1NETzBYSG9fRDJiMVk2MzY4WXJUSGMydGRhMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS4IAwDQYJKoZIhvcNAQELBQADggEB AH+NZ7OePNqOGhzKDc1BOZVePWKFlEr3PVKe59QpU9WmKso5If+B+YM107/hT5gl dV6lJEfCnbLBuPSCkJ3XZHK8AUWaFBnvBjKikDuCPxq2Sw3J1Sv3EnybW/NVRRBX RJPAp6EELMALKfU/M6abW8UH5xtXsXndiAQ6wi+fkTf2Mf4e13tU6hRVSusLseWH RPQ5XK1Vkb8PjNGGoFq29CmojiqeBUwU5xiolb1mJTAnqbbYW67W04JSWDwTqFm/ UkRfL91wH7Hx37ZP+gPWuSf8KaKBGn1v7IRAGXlb9GBHs7r56XySonCbhcYC3GYg Qk+PaywdwIUexFpf68n2zCQ= -----END CERTIFICATE-----Generated at Fri Apr 17 08:12:30 2026 by rpki-client