$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YiVgDo6K6bqAv-RouBZ-HY3cmq0.roa File: YiVgDo6K6bqAv-RouBZ-HY3cmq0.roa (raw, json) Hash identifier: c0M3pyeLDAUQ6Ow5I0BC9YjBP6nrohxcBknVxSuLBQQ= Subject key identifier: 62:25:60:0E:8E:8A:E9:BA:80:BF:E4:68:B8:16:7E:1D:8D:DC:9A:AD Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0810 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YiVgDo6K6bqAv-RouBZ-HY3cmq0.roa Signing time: Tue 31 Mar 2026 07:42:42 +0000 ROA not before: Tue 31 Mar 2026 07:42:42 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 59.143.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:42:42 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=6225600E8E8AE9BA80BFE468B8167E1D8DDC9AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:52:ae:01:f7:8b:34:5b:74:8f:49:41:fd: 40:29:7a:05:48:42:4a:e0:a7:29:67:34:9c:33:e6: 17:a7:9d:c1:a6:30:b8:67:ea:0a:1d:5c:ab:3f:2d: 8e:0a:a1:cf:04:1e:5f:7b:73:c1:3e:55:92:5d:58: 7a:ed:a4:df:2c:22:2d:6e:e3:53:58:e3:97:e3:48: b6:c7:68:e8:a0:4f:3b:b3:5f:fc:69:32:f0:4e:ab: 48:35:51:51:82:71:a8:db:ae:0f:a4:29:a1:a1:b8: fb:4f:78:bf:2e:97:39:f4:cd:1b:69:f1:0b:ca:c1: dd:e2:9b:5d:ed:0e:df:27:cf:90:eb:c4:26:ef:5f: 67:f3:77:91:a7:16:be:56:3c:0c:4d:83:68:d9:a8: 82:a1:08:4a:ed:25:a7:1a:c8:f6:4b:3b:6c:c0:f6: db:6b:47:0b:98:fe:ea:84:42:46:7a:80:65:df:12: d4:ec:41:7b:bc:8f:5b:8a:c9:8b:b2:fa:8f:17:87: c9:24:cf:5f:95:ca:2c:0e:2a:30:b8:41:33:4d:96: 22:34:97:26:5a:7d:e3:5f:c9:0d:94:58:3f:93:2d: e7:6c:c0:0f:68:28:d9:34:75:5f:6a:28:56:bb:2e: f2:7d:7d:2f:53:93:cd:4e:dd:c2:c9:cc:1f:87:1c: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:25:60:0E:8E:8A:E9:BA:80:BF:E4:68:B8:16:7E:1D:8D:DC:9A:AD X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YiVgDo6K6bqAv-RouBZ-HY3cmq0.roa sbgp-ipAddrBlock: critical IPv4: 59.143.0.0/16 Signature Algorithm: sha256WithRSAEncryption ad:c8:fe:17:e5:fc:4e:29:25:15:1f:ed:12:c4:ca:e4:83:45: 65:09:29:aa:51:60:1d:b9:68:4b:f9:65:19:77:35:48:d2:ff: a4:5a:e5:71:d7:23:c9:2e:b3:83:3e:56:79:8d:52:9a:3a:93: 37:82:10:9f:d1:fd:ef:4d:32:06:20:c8:4f:7e:5e:7b:72:35: 63:da:0b:24:a2:2d:9d:75:ba:a7:95:79:4c:4e:b5:02:9c:3d: 0f:5a:85:10:48:a5:5d:ac:22:fc:00:d5:75:a1:a6:84:d8:dd: 8a:8e:65:30:74:93:1d:f0:a2:df:c4:63:7b:3f:8f:7e:79:b1: e3:74:12:62:06:b1:c1:78:7d:86:9a:56:3e:df:b8:d1:a5:c3: f3:ec:de:91:81:93:d8:ac:19:13:19:83:dd:1a:7e:b2:ec:cf: c2:fd:ce:7f:27:34:fd:95:fd:82:e8:22:73:7f:c2:18:6c:d7: 87:a7:aa:40:fe:c7:9c:d4:74:bf:09:74:1b:8a:06:e1:e7:a1: 83:80:7d:fa:41:88:99:e7:a4:fc:c7:a1:78:26:0d:5b:af:06: fb:76:8a:89:89:2e:c8:79:91:28:71:1c:a2:a7:c1:d5:1b:7e: 52:40:8c:7b:f1:82:19:6b:2a:2a:a1:68:1b:58:77:04:25:b7: e2:59:5a:b9 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQyNDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYyMjU2MDBFOEU4QUU5 QkE4MEJGRTQ2OEI4MTY3RTFEOEREQzlBQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDqVKuAfeLNFt0j0lB/UApegVIQkrgpylnNJwz5henncGmMLhn 6godXKs/LY4Koc8EHl97c8E+VZJdWHrtpN8sIi1u41NY45fjSLbHaOigTzuzX/xp MvBOq0g1UVGCcajbrg+kKaGhuPtPeL8ulzn0zRtp8QvKwd3im13tDt8nz5DrxCbv X2fzd5GnFr5WPAxNg2jZqIKhCErtJacayPZLO2zA9ttrRwuY/uqEQkZ6gGXfEtTs QXu8j1uKyYuy+o8Xh8kkz1+VyiwOKjC4QTNNliI0lyZafeNfyQ2UWD+TLedswA9o KNk0dV9qKFa7LvJ9fS9Tk81O3cLJzB+HHGMTAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUYiVgDo6K6bqAv+RouBZ+HY3cmq0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL1lpVmdEbzZLNmJxQXYtUm91QlotSFkzY21xMC5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwA7jzANBgkqhkiG9w0BAQsFAAOCAQEA rcj+F+X8TiklFR/tEsTK5INFZQkpqlFgHbloS/llGXc1SNL/pFrlcdcjyS6zgz5W eY1SmjqTN4IQn9H9700yBiDIT35ee3I1Y9oLJKItnXW6p5V5TE61Apw9D1qFEEil Xawi/ADVdaGmhNjdio5lMHSTHfCi38Rjez+Pfnmx43QSYgaxwXh9hppWPt+40aXD 8+zekYGT2KwZExmD3Rp+suzPwv3Ofyc0/ZX9gugic3/CGGzXh6eqQP7HnNR0vwl0 G4oG4eehg4B9+kGImeek/MeheCYNW68G+3aKiYkuyHmRKHEcoqfB1Rt+UkCMe/GC GWsqKqFoG1h3BCW34llauQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:36 2026 by rpki-client