$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/WDiNv9fan-7ij6ZRNSh4qc-MQDE.roa File: WDiNv9fan-7ij6ZRNSh4qc-MQDE.roa (raw, json) Hash identifier: KMAz9cUf5YClcbFj3Vpr6gIrYE4vpD/X1HxdU1jX4kI= Subject key identifier: 58:38:8D:BF:D7:DA:9F:EE:E2:8F:A6:51:35:28:78:A9:CF:8C:40:31 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 07A9 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WDiNv9fan-7ij6ZRNSh4qc-MQDE.roa Signing time: Tue 31 Mar 2026 07:41:50 +0000 ROA not before: Tue 31 Mar 2026 07:41:50 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 61.120.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:41:50 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=58388DBFD7DA9FEEE28FA651352878A9CF8C4031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:b1:ec:4c:23:d9:39:6f:b5:c1:81:4d:fb: 7b:30:33:d5:f7:5e:c0:50:fc:31:b5:ff:4c:7d:b0: 52:9e:7d:86:df:fd:41:3b:f8:1d:d8:69:de:73:4d: f7:c8:96:48:14:c5:ae:c1:42:c9:80:d9:c9:51:60: 6e:91:11:70:18:a6:ed:2b:c0:66:ea:f3:af:c3:4a: ef:76:5b:ba:04:ba:76:10:d2:d4:e0:8b:18:78:d3: ed:94:7f:c4:cb:70:1e:e6:24:8b:73:a5:e3:b4:14: 00:cd:a2:bd:ec:16:39:fc:03:e4:df:2f:7d:96:a6: a5:75:59:ae:03:b5:31:c0:9c:cf:36:21:ec:91:24: 8a:31:60:c5:3f:ff:87:b5:4d:5e:13:ad:b4:7c:30: 56:c2:64:55:86:94:51:eb:12:c0:f7:0e:1b:ca:2f: 27:2a:9f:8d:0f:44:9f:e4:51:eb:f9:9b:95:a8:e7: 5a:c5:ba:c0:f3:20:0c:7a:84:71:65:63:96:b8:2f: 2f:75:eb:35:81:78:ce:2d:5a:4c:69:47:93:fd:00: c1:11:15:a2:00:ff:e2:52:51:49:0a:bf:af:61:ac: 0c:b2:fc:99:04:31:f8:d3:20:ea:ed:b0:d1:7d:56: 4c:f6:38:5b:5e:77:fe:8e:f3:55:df:7b:76:de:6a: ed:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:38:8D:BF:D7:DA:9F:EE:E2:8F:A6:51:35:28:78:A9:CF:8C:40:31 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WDiNv9fan-7ij6ZRNSh4qc-MQDE.roa sbgp-ipAddrBlock: critical IPv4: 61.120.0.0/17 Signature Algorithm: sha256WithRSAEncryption b3:e1:75:48:e8:58:ad:5b:68:bb:a1:f0:4f:c1:c2:ea:dc:d9: 71:77:d1:d5:79:1c:ff:a5:14:92:9e:32:a4:95:c6:99:0d:31: 68:7a:69:b3:8e:30:9a:f3:6d:d1:e2:50:4f:78:64:a1:e4:30: 29:cd:43:12:00:5b:e6:1e:56:7a:78:9c:9c:27:62:ad:fd:33: ec:e6:8f:04:96:1f:ef:d8:56:ec:2b:7c:de:68:7e:42:56:ff: e9:98:c2:2c:dc:89:d0:cb:45:8a:17:4f:a1:49:a5:9d:17:c0: 16:6d:e3:85:c2:25:ad:c5:6b:46:12:c5:1e:8f:91:48:67:66: e9:79:75:35:8c:f7:77:8c:99:89:ab:2c:24:e4:32:cf:73:ee: 91:25:32:1a:92:b1:95:a4:fe:ac:d6:b0:7d:da:f4:d7:2d:6c: f1:58:ef:25:e0:83:b1:dc:d0:4b:35:35:60:cc:38:34:89:bf: 65:1a:33:c6:d2:92:b4:23:aa:43:7e:f8:ac:27:f4:04:e8:12: 50:e7:92:e4:3d:98:c9:ee:ca:63:55:85:c9:96:00:bf:f4:b9: f6:bc:df:0b:4b:43:04:3a:d5:4c:b9:de:e9:b3:50:59:9e:65: 15:1d:43:57:c1:6c:1f:34:2f:50:91:88:aa:c0:0f:04:19:ed: 4f:0f:a8:09 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQxNTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU4Mzg4REJGRDdEQTlG RUVFMjhGQTY1MTM1Mjg3OEE5Q0Y4QzQwMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9mbHsTCPZOW+1wYFN+3swM9X3XsBQ/DG1/0x9sFKefYbf/UE7 +B3Yad5zTffIlkgUxa7BQsmA2clRYG6REXAYpu0rwGbq86/DSu92W7oEunYQ0tTg ixh40+2Uf8TLcB7mJItzpeO0FADNor3sFjn8A+TfL32WpqV1Wa4DtTHAnM82IeyR JIoxYMU//4e1TV4TrbR8MFbCZFWGlFHrEsD3DhvKLycqn40PRJ/kUev5m5Wo51rF usDzIAx6hHFlY5a4Ly916zWBeM4tWkxpR5P9AMERFaIA/+JSUUkKv69hrAyy/JkE MfjTIOrtsNF9Vkz2OFted/6O81Xfe3beau3dAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUWDiNv9fan+7ij6ZRNSh4qc+MQDEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL1dEaU52OWZhbi03aWo2WlJOU2g0cWMtTVFERS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc9eAAwDQYJKoZIhvcNAQELBQADggEB ALPhdUjoWK1baLuh8E/Bwurc2XF30dV5HP+lFJKeMqSVxpkNMWh6abOOMJrzbdHi UE94ZKHkMCnNQxIAW+YeVnp4nJwnYq39M+zmjwSWH+/YVuwrfN5ofkJW/+mYwizc idDLRYoXT6FJpZ0XwBZt44XCJa3Fa0YSxR6PkUhnZul5dTWM93eMmYmrLCTkMs9z 7pElMhqSsZWk/qzWsH3a9NctbPFY7yXgg7Hc0Es1NWDMODSJv2UaM8bSkrQjqkN+ +Kwn9AToElDnkuQ9mMnuymNVhcmWAL/0ufa83wtLQwQ61Uy53umzUFmeZRUdQ1fB bB80L1CRiKrADwQZ7U8PqAk= -----END CERTIFICATE-----Generated at Sun Apr 19 08:56:49 2026 by rpki-client