$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/aT3hfDb-rf2C7HdFkIXXoKFvzRo.roa File: aT3hfDb-rf2C7HdFkIXXoKFvzRo.roa (raw, json) Hash identifier: T1qZqIVb2tkYVbkSahZu4YSJ+uEU/FX+kUECAXeI2vM= Subject key identifier: 69:3D:E1:7C:36:FE:AD:FD:82:EC:77:45:90:85:D7:A0:A1:6F:CD:1A Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 08D2 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/aT3hfDb-rf2C7HdFkIXXoKFvzRo.roa Signing time: Tue 31 Mar 2026 07:44:19 +0000 ROA not before: Tue 31 Mar 2026 07:44:19 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 211.10.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:44:19 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=693DE17C36FEADFD82EC77459085D7A0A16FCD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:a2:92:83:d0:a4:b1:51:b6:16:91:7c:e9: 20:b3:51:40:86:80:b9:9e:df:27:06:3b:cc:fa:2b: 06:e9:f3:3f:ef:92:90:8c:37:c3:88:41:91:3d:ed: d8:25:e9:fe:4c:24:3a:64:bb:24:0b:7b:e8:4d:ee: c5:a8:aa:a2:f5:ff:02:c0:9a:b1:8c:72:c7:13:2b: 7d:62:2a:78:35:09:f1:0a:9b:d6:5a:81:55:ae:10: a6:76:20:94:03:82:2d:09:d3:34:f8:5f:25:7f:57: 92:3a:c7:df:dd:6e:cb:d7:a0:ef:14:a2:e5:32:67: 8f:96:64:36:26:86:b6:fc:c7:38:e5:25:8c:5f:5f: 6b:4d:fa:8f:74:7e:88:3c:0e:31:9e:b6:d8:ee:cc: 41:b5:0e:03:0f:7c:e6:8a:d5:7c:f7:8e:7a:e4:f2: 9c:0b:7e:42:60:81:8f:b3:c7:b2:02:2d:b1:a3:63: 8f:0b:43:ad:8e:fb:a3:51:ea:86:89:56:85:ec:f5: 96:a9:ff:64:93:f0:c9:d1:0d:8f:e9:c9:6a:cb:ff: 36:ed:5d:06:be:39:a4:80:ad:01:44:2c:52:9c:31: 2e:54:9d:11:86:5f:16:2f:a3:b2:60:6f:ca:be:97: 41:39:48:2a:a5:e3:d7:89:7e:a5:43:9a:e7:05:4a: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3D:E1:7C:36:FE:AD:FD:82:EC:77:45:90:85:D7:A0:A1:6F:CD:1A X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/aT3hfDb-rf2C7HdFkIXXoKFvzRo.roa sbgp-ipAddrBlock: critical IPv4: 211.10.204.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:74:58:9f:f5:bd:65:35:7d:72:f7:cc:df:33:78:6c:dd:ed: a3:e6:33:47:ee:93:fc:12:e1:c3:32:9c:1c:1c:61:74:b0:5b: b6:39:bc:2a:c8:41:f4:6e:ff:13:c8:0a:93:f6:69:ea:3a:e1: 8a:29:cd:ab:44:9d:fc:ad:f4:da:90:c3:81:94:6b:69:37:14: a7:bb:37:5f:13:a0:57:55:8f:1c:6a:ce:b6:34:1b:d8:5a:41: 3c:3b:42:af:e5:92:b3:18:e8:1c:26:09:77:88:0b:dd:42:d8: 28:df:52:73:5e:c4:70:1e:f8:d0:9e:96:dd:e0:34:2a:06:d9: d6:5d:f9:93:1d:ed:fe:36:84:15:28:02:8f:d3:0a:e9:c7:2a: 24:d4:80:79:8a:59:7b:ef:a1:93:8d:7f:21:a4:08:0d:0b:3d: bf:73:74:22:ef:2a:74:fa:72:6b:23:ef:56:44:3b:b5:19:4c: 87:2d:8e:82:aa:c8:0b:1f:88:7c:bc:af:9a:10:e2:84:62:21: 13:8f:55:be:12:d2:fc:c0:e3:9c:bc:0d:b2:3a:c4:f9:c5:1e: fd:de:df:79:a9:40:7b:04:3c:66:ef:c7:07:49:b3:ed:1d:e9: 95:94:de:cd:95:89:3f:42:63:8e:47:bb:33:4a:f4:e9:c9:c2: 5d:3d:b3:3f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQ0MTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY5M0RFMTdDMzZGRUFE RkQ4MkVDNzc0NTkwODVEN0EwQTE2RkNEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoxaKSg9CksVG2FpF86SCzUUCGgLme3ycGO8z6Kwbp8z/vkpCM N8OIQZE97dgl6f5MJDpkuyQLe+hN7sWoqqL1/wLAmrGMcscTK31iKng1CfEKm9Za gVWuEKZ2IJQDgi0J0zT4XyV/V5I6x9/dbsvXoO8UouUyZ4+WZDYmhrb8xzjlJYxf X2tN+o90fog8DjGettjuzEG1DgMPfOaK1Xz3jnrk8pwLfkJggY+zx7ICLbGjY48L Q62O+6NR6oaJVoXs9Zap/2ST8MnRDY/pyWrL/zbtXQa+OaSArQFELFKcMS5UnRGG XxYvo7Jgb8q+l0E5SCql49eJfqVDmucFShB3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUaT3hfDb+rf2C7HdFkIXXoKFvzRowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL2FUM2hmRGItcmYyQzdIZEZrSVhYb0tGdnpSby5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTCswwDQYJKoZIhvcNAQELBQADggEB AAx0WJ/1vWU1fXL3zN8zeGzd7aPmM0fuk/wS4cMynBwcYXSwW7Y5vCrIQfRu/xPI CpP2aeo64YopzatEnfyt9NqQw4GUa2k3FKe7N18ToFdVjxxqzrY0G9haQTw7Qq/l krMY6BwmCXeIC91C2CjfUnNexHAe+NCelt3gNCoG2dZd+ZMd7f42hBUoAo/TCunH KiTUgHmKWXvvoZONfyGkCA0LPb9zdCLvKnT6cmsj71ZEO7UZTIctjoKqyAsfiHy8 r5oQ4oRiIROPVb4S0vzA45y8DbI6xPnFHv3e33mpQHsEPGbvxwdJs+0d6ZWU3s2V iT9CY45HuzNK9OnJwl09sz8= -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:20 2026 by rpki-client