$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZTyPM8oHSqHgdHzmLKhVtoYEYOs.roa File: ZTyPM8oHSqHgdHzmLKhVtoYEYOs.roa (raw, json) Hash identifier: VCrqOP/Ry7clAZ9fwooIjtLFgDPTxsX7XvyKJJnVtKg= Subject key identifier: 65:3C:8F:33:CA:07:4A:A1:E0:74:7C:E6:2C:A8:55:B6:86:04:60:EB Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 086A Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZTyPM8oHSqHgdHzmLKhVtoYEYOs.roa Signing time: Tue 31 Mar 2026 07:43:30 +0000 ROA not before: Tue 31 Mar 2026 07:43:30 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 211.7.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2154 (0x86a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:43:30 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=653C8F33CA074AA1E0747CE62CA855B6860460EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:45:5f:65:da:28:1c:a3:a3:64:91:a2:81:e6: 6a:38:61:02:4d:7e:73:52:86:ec:9c:6f:46:8f:ab: ad:ac:fc:01:33:85:c9:54:de:ce:df:3d:1d:94:54: 6e:0b:9c:1c:a7:8b:14:d5:d1:54:e2:e5:2d:d1:89: 9f:2f:f7:9a:79:62:03:18:fb:6d:62:04:77:ac:62: c2:c0:03:ac:59:f8:df:f4:25:a0:f2:37:b1:55:ec: 80:1b:8c:48:78:3c:ff:b8:c1:b0:6f:05:9a:fb:1b: d6:f5:c3:7b:1a:d7:3d:11:63:22:49:11:7e:36:28: 1a:15:78:ae:72:4a:77:11:cb:07:24:bb:0c:e3:c8: 4b:e8:fe:f5:de:c4:ec:04:45:15:49:2e:76:71:7a: b5:17:61:be:2a:d7:e9:ce:b8:36:a0:0e:59:46:0c: 19:e4:5d:1d:aa:1b:61:81:dd:c4:e5:2f:4b:24:35: 40:16:22:1c:cb:04:c6:f5:88:2d:3f:19:a4:1f:bc: 1c:62:4f:1a:95:81:f7:72:7f:a1:2e:f2:58:70:ec: 58:68:f0:ef:21:fd:48:b9:af:85:64:74:ed:fb:dc: 1b:80:bb:2d:f7:46:59:7c:39:c5:e4:dc:be:d7:12: ae:14:1c:86:69:6b:e7:63:cc:b4:a7:26:1c:ca:19: c3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3C:8F:33:CA:07:4A:A1:E0:74:7C:E6:2C:A8:55:B6:86:04:60:EB X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZTyPM8oHSqHgdHzmLKhVtoYEYOs.roa sbgp-ipAddrBlock: critical IPv4: 211.7.152.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:99:e0:65:1e:08:1f:7b:14:8c:98:3c:1b:ce:5e:16:95:d6: a2:bf:90:39:ab:71:09:0a:87:f0:31:71:ba:20:c0:a6:dd:4f: 80:95:52:b3:be:e6:12:d7:5e:ec:d3:03:85:96:1d:78:53:05: 88:11:b8:9b:55:61:29:fa:2f:d4:8b:ca:74:31:3b:f3:36:46: 7b:b9:87:53:9a:30:4d:07:92:d0:37:04:2b:d2:0a:f0:1b:68: bf:3f:f7:ff:07:dc:20:b4:83:c9:fa:2e:e6:85:67:90:08:b5: 11:00:03:d0:d1:f0:4a:52:87:92:1c:35:68:7c:b8:a1:b4:c4: 09:fc:54:8a:a5:38:ee:33:6f:16:f2:85:09:e7:6c:c5:00:6b: 63:8e:1c:cf:54:d1:93:3c:db:cc:3c:fa:f4:60:4d:c9:c4:55: ee:5a:88:5d:2d:49:5a:5d:09:fd:3d:9b:32:db:2d:47:88:19: 63:ef:4d:e3:2c:82:6a:8c:05:5c:4d:d1:5f:6b:c1:11:5b:a9: d3:bf:ad:6a:21:97:2f:91:ec:ee:b8:80:d6:b9:18:ac:d6:db: 96:7f:4c:b1:d6:83:50:84:2a:5f:a9:70:49:32:c0:fb:66:36: 66:38:37:99:6d:5d:67:33:46:3b:88:56:22:db:c1:b8:c0:f4: 19:b0:df:cd -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICCGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQzMzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1M0M4RjMzQ0EwNzRB QTFFMDc0N0NFNjJDQTg1NUI2ODYwNDYwRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuRV9l2igco6NkkaKB5mo4YQJNfnNShuycb0aPq62s/AEzhclU 3s7fPR2UVG4LnBynixTV0VTi5S3RiZ8v95p5YgMY+21iBHesYsLAA6xZ+N/0JaDy N7FV7IAbjEh4PP+4wbBvBZr7G9b1w3sa1z0RYyJJEX42KBoVeK5ySncRywckuwzj yEvo/vXexOwERRVJLnZxerUXYb4q1+nOuDagDllGDBnkXR2qG2GB3cTlL0skNUAW IhzLBMb1iC0/GaQfvBxiTxqVgfdyf6Eu8lhw7Fho8O8h/Ui5r4VkdO373BuAuy33 Rll8OcXk3L7XEq4UHIZpa+djzLSnJhzKGcOTAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUZTyPM8oHSqHgdHzmLKhVtoYEYOswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL1pUeVBNOG9IU3FIZ2RIem1MS2hWdG9ZRVlPcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTB5gwDQYJKoZIhvcNAQELBQADggEB AB+Z4GUeCB97FIyYPBvOXhaV1qK/kDmrcQkKh/AxcbogwKbdT4CVUrO+5hLXXuzT A4WWHXhTBYgRuJtVYSn6L9SLynQxO/M2Rnu5h1OaME0HktA3BCvSCvAbaL8/9/8H 3CC0g8n6LuaFZ5AItREAA9DR8EpSh5IcNWh8uKG0xAn8VIqlOO4zbxbyhQnnbMUA a2OOHM9U0ZM828w8+vRgTcnEVe5aiF0tSVpdCf09mzLbLUeIGWPvTeMsgmqMBVxN 0V9rwRFbqdO/rWohly+R7O64gNa5GKzW25Z/TLHWg1CEKl+pcEkywPtmNmY4N5lt XWczRjuIViLbwbjA9Bmw380= -----END CERTIFICATE-----Generated at Sun Apr 19 11:31:29 2026 by rpki-client