$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Up2G9y97l_QENg9vq2ZEZ7RFTDQ.roa File: Up2G9y97l_QENg9vq2ZEZ7RFTDQ.roa (raw, json) Hash identifier: iBpaC4gAdbQzKuSj0iAFQk8T8H/fojWivkSmIgtctpI= Subject key identifier: 52:9D:86:F7:2F:7B:97:F4:04:36:0F:6F:AB:66:44:67:B4:45:4C:34 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0840 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Up2G9y97l_QENg9vq2ZEZ7RFTDQ.roa Signing time: Tue 31 Mar 2026 07:43:08 +0000 ROA not before: Tue 31 Mar 2026 07:43:08 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 111.97.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:43:08 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=529D86F72F7B97F404360F6FAB664467B4454C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:f4:a4:9f:e7:c0:8d:23:f1:7b:56:d1:ec: ec:d2:28:9e:dc:b1:15:e4:47:1a:ec:77:a0:4f:f1: be:1d:c7:46:35:05:f0:22:a0:6b:00:c5:cd:ca:b1: a4:7f:bb:5f:f9:04:3f:bb:2b:37:45:dc:a0:08:df: f0:7f:ac:86:4f:47:a0:e0:0f:60:df:3c:ab:18:ef: c5:65:e2:15:da:e3:af:c9:0d:f8:18:df:5f:4c:b7: a1:42:2c:48:da:60:f8:e8:c0:ce:9e:6b:9f:91:35: a4:93:35:7b:70:27:8b:7c:02:ef:ac:17:96:0a:f6: ac:97:b9:77:27:9f:f1:9a:a3:97:74:16:e2:a5:d7: 23:95:95:8e:2f:f8:a1:16:db:d8:d6:24:69:fa:81: 31:d1:cb:03:21:0c:75:83:12:86:f9:8b:bf:0a:9f: 2f:3e:f5:99:4c:78:85:21:87:a9:0e:96:d7:96:cc: 6f:fb:21:ba:be:20:d4:44:6a:0a:19:af:4f:ac:d4: ad:af:5f:e0:8a:11:e5:62:fc:b1:6c:ea:38:db:8f: 83:e2:c5:32:8a:bf:7f:2b:65:84:39:21:a6:75:ad: 68:80:40:63:ed:22:c1:74:58:6a:ee:a9:1b:ff:bb: cc:03:2b:92:af:dd:0a:61:a4:fb:49:e5:90:dd:e7: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9D:86:F7:2F:7B:97:F4:04:36:0F:6F:AB:66:44:67:B4:45:4C:34 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Up2G9y97l_QENg9vq2ZEZ7RFTDQ.roa sbgp-ipAddrBlock: critical IPv4: 111.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:be:ab:a6:8b:fc:37:4e:8b:23:c1:f4:64:65:b9:90:d3:c0: 52:61:83:26:19:24:db:7c:6b:4e:13:20:be:c6:13:3b:94:ff: 64:b1:a9:e6:97:2e:71:18:7e:8c:54:d3:1b:e9:47:c5:e3:af: 54:95:d2:13:3e:aa:ff:89:1e:1b:52:24:bd:7b:86:32:2e:13: 1a:af:33:f4:ac:db:45:e0:35:2f:8f:34:88:39:9e:d0:33:69: aa:00:c4:fc:7c:7f:0c:14:22:97:56:a8:d4:64:dc:72:74:5f: 95:fb:54:41:22:d0:dd:f9:07:34:a5:80:2b:37:50:1c:4b:ee: 53:fe:29:b9:30:0c:50:87:13:83:78:54:c7:d3:89:e5:46:3f: 2c:a6:ba:7a:b5:32:31:50:00:ae:0f:09:60:8e:41:b8:2c:c1: ee:9c:82:37:6f:b7:a3:a4:1f:68:18:28:dc:9e:cd:00:43:c9: ad:68:24:db:d5:a9:50:9a:34:9d:ed:21:71:04:65:ea:5d:c6: 54:d6:c5:77:19:a7:7e:b2:5f:70:3d:7a:51:cb:89:81:1e:13: 6d:52:27:cd:9f:aa:b6:d9:a5:02:6f:1b:af:83:50:ff:14:bf: a7:f2:8a:32:a0:4a:ef:8e:71:d2:a0:48:cc:99:96:4d:c9:6f: 1a:e5:4f:de -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQzMDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUyOUQ4NkY3MkY3Qjk3 RjQwNDM2MEY2RkFCNjY0NDY3QjQ0NTRDMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNRfSkn+fAjSPxe1bR7OzSKJ7csRXkRxrsd6BP8b4dx0Y1BfAi oGsAxc3KsaR/u1/5BD+7KzdF3KAI3/B/rIZPR6DgD2DfPKsY78Vl4hXa46/JDfgY 319Mt6FCLEjaYPjowM6ea5+RNaSTNXtwJ4t8Au+sF5YK9qyXuXcnn/Gao5d0FuKl 1yOVlY4v+KEW29jWJGn6gTHRywMhDHWDEob5i78Kny8+9ZlMeIUhh6kOlteWzG/7 Ibq+INREagoZr0+s1K2vX+CKEeVi/LFs6jjbj4PixTKKv38rZYQ5IaZ1rWiAQGPt IsF0WGruqRv/u8wDK5Kv3QphpPtJ5ZDd57FvAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUUp2G9y97l/QENg9vq2ZEZ7RFTDQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL1VwMkc5eTk3bF9RRU5nOXZxMlpFWjdSRlREUS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBvYTANBgkqhkiG9w0BAQsFAAOCAQEA TL6rpov8N06LI8H0ZGW5kNPAUmGDJhkk23xrThMgvsYTO5T/ZLGp5pcucRh+jFTT G+lHxeOvVJXSEz6q/4keG1IkvXuGMi4TGq8z9KzbReA1L480iDme0DNpqgDE/Hx/ DBQil1ao1GTccnRflftUQSLQ3fkHNKWAKzdQHEvuU/4puTAMUIcTg3hUx9OJ5UY/ LKa6erUyMVAArg8JYI5BuCzB7pyCN2+3o6QfaBgo3J7NAEPJrWgk29WpUJo0ne0h cQRl6l3GVNbFdxmnfrJfcD16UcuJgR4TbVInzZ+qttmlAm8br4NQ/xS/p/KKMqBK 745x0qBIzJmWTclvGuVP3g== -----END CERTIFICATE-----Generated at Fri Apr 17 07:12:44 2026 by rpki-client