$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UkiW3DAFq3YnsxPg6HG5tPiJllc.roa File: UkiW3DAFq3YnsxPg6HG5tPiJllc.roa (raw, json) Hash identifier: nfRz5pjdWShSfT62+m31cWvXqG3Q+4W/2yk0g4pnlOA= Subject key identifier: 52:48:96:DC:30:05:AB:76:27:B3:13:E0:E8:71:B9:B4:F8:89:96:57 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 07B3 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UkiW3DAFq3YnsxPg6HG5tPiJllc.roa Signing time: Tue 31 Mar 2026 07:41:55 +0000 ROA not before: Tue 31 Mar 2026 07:41:55 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 118.159.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:41:55 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=524896DC3005AB7627B313E0E871B9B4F8899657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:87:3f:22:e7:01:ce:bf:b3:5a:98:62:a5:ea: 09:86:cf:49:11:9c:fe:21:cf:1d:45:ec:ff:70:64: c9:c9:d0:b9:80:c3:15:62:7f:6b:26:e3:3c:fd:88: 20:71:6f:e8:fa:44:40:2c:94:fd:66:6f:7f:d9:6d: 73:5d:6c:17:56:83:1f:19:7b:b4:b7:13:6b:cb:3f: 9a:43:1e:4c:e3:21:ff:c6:87:6e:ee:0f:e3:a2:66: c5:4d:f5:29:99:14:81:40:c2:ec:d9:03:c5:3c:2d: f5:c2:0d:f1:37:33:00:90:13:92:a9:98:85:d8:85: 42:ca:27:ff:e1:b8:cb:61:1b:de:dc:a3:98:dd:47: e5:3c:6a:fa:25:19:48:43:b7:97:30:3e:87:8e:bf: 82:70:43:a0:40:ec:06:9b:5e:10:d0:0e:30:93:57: bb:34:6b:fd:88:17:92:8f:4f:41:4a:ea:0e:eb:f9: 6f:65:bb:41:99:c9:43:d6:ca:55:0b:c5:91:0b:01: 4f:8b:32:1b:6b:c5:fc:15:86:1e:33:3a:60:da:72: e2:50:e6:cc:1d:f7:8e:ae:a0:02:58:6d:9c:18:b8: 6f:c2:f4:b3:ea:ce:2f:fa:46:4c:66:e8:60:4d:ce: e8:b0:6c:8c:32:e9:b6:90:ba:31:cc:cf:47:8a:3d: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:48:96:DC:30:05:AB:76:27:B3:13:E0:E8:71:B9:B4:F8:89:96:57 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UkiW3DAFq3YnsxPg6HG5tPiJllc.roa sbgp-ipAddrBlock: critical IPv4: 118.159.0.0/17 Signature Algorithm: sha256WithRSAEncryption 39:ac:96:c4:f1:b2:c1:66:92:49:25:c4:d2:22:c8:4a:13:ed: 2b:15:a9:e6:65:27:93:f7:f8:7c:b5:ec:b4:a3:47:07:b9:ea: 6b:8b:e0:8f:dc:13:4e:f4:20:77:b8:5d:72:64:47:48:44:d1: 9a:80:28:2c:a3:c2:51:0e:b8:ad:17:a9:cc:b5:5e:c2:27:f0: d5:1e:98:0e:66:92:61:69:8a:ad:19:82:95:c2:0a:e4:e1:19: 8c:ed:63:80:93:db:a6:b2:ac:1e:4f:bb:79:27:8c:c6:c0:f3: 39:4f:39:de:01:2c:62:c9:5d:f4:93:3e:40:67:b2:36:33:3b: ef:37:80:0a:6e:b5:45:e9:16:dc:ca:74:68:e1:e1:24:f1:43: bb:ba:23:b0:16:41:56:3f:e3:5b:00:f4:18:ea:6f:c8:64:fb: 09:d5:59:4f:6a:66:d5:19:52:1c:3d:46:5c:94:05:a2:26:5e: 71:07:52:6c:ae:91:6e:20:f6:6e:86:1a:26:50:ef:d2:d8:5f: 90:9f:b0:c9:cc:b3:11:a4:b5:bb:7c:25:a0:f5:5a:2a:14:0b: 37:33:a4:08:36:98:2e:8b:1a:e0:5a:2e:0a:1f:56:68:59:1d: eb:c1:91:89:4e:9f:90:04:58:08:d8:45:ed:63:d1:51:c5:6f: 2f:b0:7d:44 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQxNTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUyNDg5NkRDMzAwNUFC NzYyN0IzMTNFMEU4NzFCOUI0Rjg4OTk2NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvhz8i5wHOv7NamGKl6gmGz0kRnP4hzx1F7P9wZMnJ0LmAwxVi f2sm4zz9iCBxb+j6REAslP1mb3/ZbXNdbBdWgx8Ze7S3E2vLP5pDHkzjIf/Gh27u D+OiZsVN9SmZFIFAwuzZA8U8LfXCDfE3MwCQE5KpmIXYhULKJ//huMthG97co5jd R+U8avolGUhDt5cwPoeOv4JwQ6BA7AabXhDQDjCTV7s0a/2IF5KPT0FK6g7r+W9l u0GZyUPWylULxZELAU+LMhtrxfwVhh4zOmDacuJQ5swd946uoAJYbZwYuG/C9LPq zi/6Rkxm6GBNzuiwbIwy6baQujHMz0eKPY4JAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUUkiW3DAFq3YnsxPg6HG5tPiJllcwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL1VraVczREFGcTNZbnN4UGc2SEc1dFBpSmxsYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd2nwAwDQYJKoZIhvcNAQELBQADggEB ADmslsTxssFmkkklxNIiyEoT7SsVqeZlJ5P3+Hy17LSjRwe56muL4I/cE070IHe4 XXJkR0hE0ZqAKCyjwlEOuK0Xqcy1XsIn8NUemA5mkmFpiq0ZgpXCCuThGYztY4CT 26ayrB5Pu3knjMbA8zlPOd4BLGLJXfSTPkBnsjYzO+83gAputUXpFtzKdGjh4STx Q7u6I7AWQVY/41sA9Bjqb8hk+wnVWU9qZtUZUhw9RlyUBaImXnEHUmyukW4g9m6G GiZQ79LYX5CfsMnMsxGktbt8JaD1WioUCzczpAg2mC6LGuBaLgofVmhZHevBkYlO n5AEWAjYRe1j0VHFby+wfUQ= -----END CERTIFICATE-----Generated at Fri Apr 17 08:13:39 2026 by rpki-client