$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TPBhgqpCO11hLvMqVpBtiv8AH0o.roa File: TPBhgqpCO11hLvMqVpBtiv8AH0o.roa (raw, json) Hash identifier: FhgXscwebiOHCYcuc77Ua14HDS/DrCYTHF5S2vMmNeQ= Subject key identifier: 4C:F0:61:82:AA:42:3B:5D:61:2E:F3:2A:56:90:6D:8A:FF:00:1F:4A Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 07D7 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TPBhgqpCO11hLvMqVpBtiv8AH0o.roa Signing time: Tue 31 Mar 2026 07:42:15 +0000 ROA not before: Tue 31 Mar 2026 07:42:15 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 59.128.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:42:15 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4CF06182AA423B5D612EF32A56906D8AFF001F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:9d:2c:21:e8:59:dc:64:ae:e2:38:ca:b5: 20:92:0d:71:77:d2:48:19:80:69:7b:c1:96:c5:35: 3f:96:db:8a:6b:73:d0:e3:37:dc:7f:00:ce:2e:24: 4a:90:19:c9:1f:ba:dc:6d:7a:e9:7c:d3:37:bf:c6: ae:1e:03:0a:2c:37:e3:8b:40:67:08:18:d7:1f:e6: a0:84:40:47:53:37:67:70:16:54:fc:1d:a5:be:a5: 0f:b2:e8:5b:08:ac:d6:f3:3e:77:9b:04:93:fc:60: f0:83:3b:a8:3d:74:8f:56:9f:27:9f:9d:a0:6a:fd: 9c:de:b2:62:de:de:45:37:67:d3:10:88:4a:2b:60: 2b:10:63:9c:57:67:09:e3:52:3e:95:30:42:4d:ba: c0:eb:79:ab:d2:52:35:27:77:b7:92:6e:88:11:f6: a0:b6:d3:65:87:a1:99:2e:33:10:b8:ec:17:b0:10: 78:e0:06:37:aa:8e:0c:37:e0:6c:89:ca:18:35:a2: e5:dc:91:a4:91:04:43:92:a0:31:85:bc:4c:e5:fc: 54:9e:3c:3d:19:97:8c:e4:b8:07:ca:0f:1f:61:49: 0e:ab:56:0b:34:c7:0b:a1:7a:83:05:ff:dd:a0:d4: 45:79:67:cd:ae:f6:81:39:3b:82:18:ca:5e:3f:92: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:61:82:AA:42:3B:5D:61:2E:F3:2A:56:90:6D:8A:FF:00:1F:4A X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TPBhgqpCO11hLvMqVpBtiv8AH0o.roa sbgp-ipAddrBlock: critical IPv4: 59.128.0.0/18 Signature Algorithm: sha256WithRSAEncryption a8:ab:7c:63:47:66:c3:42:d9:10:1a:b2:79:5e:bb:07:ce:a0: 41:ba:87:00:1d:81:81:83:90:b6:e5:08:d7:a6:8e:e5:3b:57: f8:6a:59:f5:fc:26:8e:ba:e4:66:51:03:1b:1c:52:ee:42:f1: 1c:e3:64:e8:d4:91:c8:cf:a4:a5:4c:78:da:72:3d:11:21:4a: af:d4:88:ea:52:bd:c1:31:cf:4c:5b:a4:d2:86:5c:cb:f7:2a: 9b:f3:a9:0e:45:1e:f5:af:e4:5c:fa:14:b2:06:d1:e3:e7:f7: 38:78:d3:15:48:50:4c:8b:13:49:4e:55:3d:e3:4a:e5:99:02: e8:e2:d7:48:1a:4b:7e:c3:73:6c:44:07:b1:72:13:39:7e:80: cc:53:d7:f7:f2:a9:5b:12:97:ff:c5:e6:1f:c9:d8:db:84:e5: 5a:c6:b5:02:0f:67:24:f0:5d:db:be:7f:5a:21:18:82:cb:a3: c9:23:5f:6e:20:c3:6b:88:a2:fe:f8:be:25:58:75:4f:a6:a3: 93:5d:6d:c2:79:4f:f1:72:97:ed:86:db:f3:f5:25:04:21:b2: 94:ef:3b:20:9b:67:9d:12:64:f6:8c:cf:10:80:6e:37:1e:db: d4:11:dc:20:66:94:d7:ad:b7:5e:03:31:24:f9:50:85:b9:68: 13:23:aa:df -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQyMTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDRjA2MTgyQUE0MjNC NUQ2MTJFRjMyQTU2OTA2RDhBRkYwMDFGNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2P50sIehZ3GSu4jjKtSCSDXF30kgZgGl7wZbFNT+W24prc9Dj N9x/AM4uJEqQGckfutxteul80ze/xq4eAwosN+OLQGcIGNcf5qCEQEdTN2dwFlT8 HaW+pQ+y6FsIrNbzPnebBJP8YPCDO6g9dI9WnyefnaBq/ZzesmLe3kU3Z9MQiEor YCsQY5xXZwnjUj6VMEJNusDreavSUjUnd7eSbogR9qC202WHoZkuMxC47BewEHjg Bjeqjgw34GyJyhg1ouXckaSRBEOSoDGFvEzl/FSePD0Zl4zkuAfKDx9hSQ6rVgs0 xwuheoMF/92g1EV5Z82u9oE5O4IYyl4/kjSfAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUTPBhgqpCO11hLvMqVpBtiv8AH0owHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL1RQQmhncXBDTzExaEx2TXFWcEJ0aXY4QUgwby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY7gAAwDQYJKoZIhvcNAQELBQADggEB AKirfGNHZsNC2RAasnleuwfOoEG6hwAdgYGDkLblCNemjuU7V/hqWfX8Jo665GZR AxscUu5C8RzjZOjUkcjPpKVMeNpyPREhSq/UiOpSvcExz0xbpNKGXMv3KpvzqQ5F HvWv5Fz6FLIG0ePn9zh40xVIUEyLE0lOVT3jSuWZAuji10gaS37Dc2xEB7FyEzl+ gMxT1/fyqVsSl//F5h/J2NuE5VrGtQIPZyTwXdu+f1ohGILLo8kjX24gw2uIov74 viVYdU+mo5NdbcJ5T/Fyl+2G2/P1JQQhspTvOyCbZ50SZPaMzxCAbjce29QR3CBm lNett14DMST5UIW5aBMjqt8= -----END CERTIFICATE-----Generated at Fri Apr 17 16:28:34 2026 by rpki-client