$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XA8KKSoLefyY6rix-LGpnGXYIWE.roa File: XA8KKSoLefyY6rix-LGpnGXYIWE.roa (raw, json) Hash identifier: lodSSXZcRuwsBbFe3Cv0wM7WycUuCCNzbiccvUH8of4= Subject key identifier: 5C:0F:0A:29:2A:0B:79:FC:98:EA:B8:B1:F8:B1:A9:9C:65:D8:21:61 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 08CE Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XA8KKSoLefyY6rix-LGpnGXYIWE.roa Signing time: Tue 31 Mar 2026 07:44:17 +0000 ROA not before: Tue 31 Mar 2026 07:44:17 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 202.161.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:44:17 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=5C0F0A292A0B79FC98EAB8B1F8B1A99C65D82161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:00:4e:85:7d:b5:0b:8b:1d:e5:1f:9f:b0:c1: 01:51:be:93:06:53:38:47:f3:6d:8e:63:1e:02:0f: ff:90:04:40:1d:3e:59:41:69:92:27:6d:64:9e:ad: a2:3f:2a:de:05:ac:58:68:e1:23:03:65:6d:85:09: f9:db:c5:2c:f4:2d:8f:31:91:8c:12:82:d0:75:21: 11:ef:fb:d9:11:6d:d0:3d:81:6e:8e:cb:c8:fa:c5: fe:c4:4e:df:11:83:ac:7b:ab:cf:69:4f:d3:94:12: c5:13:45:0e:1e:e6:7f:81:13:4c:4f:fd:db:7a:1c: 22:64:d5:57:f1:f5:63:78:52:4a:a1:69:7e:a4:83: 61:5d:28:55:78:a4:06:14:5a:a2:ed:bd:b0:fa:a9: 17:ab:0d:f9:80:31:24:50:92:4d:dc:ed:27:87:eb: 13:b6:92:19:c0:dc:9f:6a:a5:58:77:d0:c6:59:48: e6:63:9a:76:b8:16:2b:45:ea:c9:71:20:7f:8c:6d: 58:2d:47:00:ff:22:6f:75:f9:e0:e5:23:a9:c3:f8: ec:80:2a:51:af:a0:31:37:66:16:1a:35:30:e7:f9: 79:23:b1:c1:71:46:07:48:e1:57:66:71:33:c2:fe: 54:e2:42:4a:7a:20:5d:d9:98:6d:83:8c:8c:3f:f0: 07:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0F:0A:29:2A:0B:79:FC:98:EA:B8:B1:F8:B1:A9:9C:65:D8:21:61 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XA8KKSoLefyY6rix-LGpnGXYIWE.roa sbgp-ipAddrBlock: critical IPv4: 202.161.192.0/18 Signature Algorithm: sha256WithRSAEncryption 3e:76:56:05:6e:54:ac:22:da:b3:53:bc:bf:ef:3f:3c:f3:3f: a3:ba:5c:1e:14:74:cf:72:ef:02:b0:77:be:23:36:8b:59:d0: 25:8b:1d:43:77:b6:e3:44:c5:76:bc:01:9c:f5:8f:ae:e8:a3: 6a:be:80:79:ca:99:2f:fc:e7:60:37:3e:3c:bd:d8:c4:da:b4: fe:b7:c7:c6:5e:ca:f4:ed:b3:c1:dd:61:f8:51:39:94:01:6e: 7d:fa:d2:f1:25:f9:f2:09:83:48:77:63:f0:88:94:bf:f0:ab: bb:5a:d3:d5:de:bf:1d:58:8d:6f:f0:f9:44:f4:5d:52:96:6b: 6a:2d:97:e7:0a:82:c1:95:1e:e8:89:79:ef:12:08:a9:c8:cd: 7e:1f:b5:94:3a:c7:4b:3e:dd:be:ef:a0:5a:82:00:d3:fe:e9: 60:3a:14:ee:54:00:7f:09:01:ee:fb:ab:b3:e4:50:c4:e2:14: f6:6f:3d:2c:f2:11:2b:55:20:24:a1:cb:9b:c8:b3:a6:0d:3b: 25:e3:a1:cb:61:b5:5e:56:21:15:47:2f:53:e6:a4:8e:42:96: 41:29:33:61:f5:2c:72:7d:a0:69:9f:8e:85:76:20:45:6c:b0: b1:a1:42:44:aa:da:6c:14:fc:a5:3a:3d:60:9e:e4:d7:de:da: de:87:21:63 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQ0MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDMEYwQTI5MkEwQjc5 RkM5OEVBQjhCMUY4QjFBOTlDNjVEODIxNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmAE6FfbULix3lH5+wwQFRvpMGUzhH822OYx4CD/+QBEAdPllB aZInbWSeraI/Kt4FrFho4SMDZW2FCfnbxSz0LY8xkYwSgtB1IRHv+9kRbdA9gW6O y8j6xf7ETt8Rg6x7q89pT9OUEsUTRQ4e5n+BE0xP/dt6HCJk1Vfx9WN4UkqhaX6k g2FdKFV4pAYUWqLtvbD6qRerDfmAMSRQkk3c7SeH6xO2khnA3J9qpVh30MZZSOZj mna4FitF6slxIH+MbVgtRwD/Im91+eDlI6nD+OyAKlGvoDE3ZhYaNTDn+XkjscFx RgdI4VdmcTPC/lTiQkp6IF3ZmG2DjIw/8AfXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUXA8KKSoLefyY6rix+LGpnGXYIWEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL1hBOEtLU29MZWZ5WTZyaXgtTEdwbkdYWUlXRS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbKocAwDQYJKoZIhvcNAQELBQADggEB AD52VgVuVKwi2rNTvL/vPzzzP6O6XB4UdM9y7wKwd74jNotZ0CWLHUN3tuNExXa8 AZz1j67oo2q+gHnKmS/852A3Pjy92MTatP63x8ZeyvTts8HdYfhROZQBbn360vEl +fIJg0h3Y/CIlL/wq7ta09Xevx1YjW/w+UT0XVKWa2otl+cKgsGVHuiJee8SCKnI zX4ftZQ6x0s+3b7voFqCANP+6WA6FO5UAH8JAe77q7PkUMTiFPZvPSzyEStVICSh y5vIs6YNOyXjocthtV5WIRVHL1PmpI5ClkEpM2H1LHJ9oGmfjoV2IEVssLGhQkSq 2mwU/KU6PWCe5Nfe2t6HIWM= -----END CERTIFICATE-----Generated at Sun Apr 19 11:32:25 2026 by rpki-client