$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cw7kbKgzwrrlqnKqNgzgygejWlU.roa File: cw7kbKgzwrrlqnKqNgzgygejWlU.roa (raw, json) Hash identifier: NVykCCmVlp+I3PusKCbZJxdWhxEWcxlHjSRdd3EAv4g= Subject key identifier: 73:0E:E4:6C:A8:33:C2:BA:E5:AA:72:AA:36:0C:E0:CA:07:A3:5A:55 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 07F3 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cw7kbKgzwrrlqnKqNgzgygejWlU.roa Signing time: Tue 31 Mar 2026 07:42:28 +0000 ROA not before: Tue 31 Mar 2026 07:42:28 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 27.86.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:42:28 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=730EE46CA833C2BAE5AA72AA360CE0CA07A35A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a8:fd:2d:65:d6:ce:d9:40:3d:ea:14:22:bb: ad:b0:c1:57:3e:11:ba:02:01:24:57:a1:58:45:3a: e0:27:b1:d0:44:10:75:3f:1a:8f:dd:fd:9d:5a:d4: 68:41:df:83:08:9a:cc:a3:38:5d:30:0d:76:19:a4: 9f:41:0c:f0:df:97:88:48:bf:4f:e4:99:c2:1a:06: e7:f4:a8:6f:2d:d7:7f:37:cc:a4:0c:9c:2d:d3:17: c7:4e:98:3d:2e:83:c5:63:aa:f3:c1:ba:16:26:01: cc:22:7f:62:3f:8d:f8:e7:e9:5e:93:3e:bd:71:2e: 48:27:a5:95:71:84:d5:59:7b:f9:1c:d1:2e:1f:43: 36:37:18:d6:71:e7:9f:12:bd:b5:13:4b:80:e2:a0: ab:ac:af:05:c4:5a:fe:8d:c9:32:69:bc:bc:cb:a3: 74:25:47:a4:99:5e:96:33:ea:5f:ce:58:55:91:7a: 87:36:a9:9f:e2:e5:f0:7f:f9:8d:4d:f0:b4:05:7d: ea:9a:58:34:2c:f7:3e:1b:f6:17:ad:88:2e:a2:b1: 68:c8:f7:7e:1d:bb:69:9c:5b:7b:c4:ea:52:f5:70: de:f1:b0:17:da:09:b0:6a:3a:83:43:a8:72:77:a3: 45:b9:2f:f7:21:26:02:d6:7b:88:1a:b8:23:cf:d8: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0E:E4:6C:A8:33:C2:BA:E5:AA:72:AA:36:0C:E0:CA:07:A3:5A:55 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cw7kbKgzwrrlqnKqNgzgygejWlU.roa sbgp-ipAddrBlock: critical IPv4: 27.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 77:7e:ff:47:c3:c6:3a:02:c2:d9:7a:22:c7:f4:24:44:d3:0c: 36:f1:92:d6:99:0a:a3:3f:1a:ce:0c:22:89:1e:0b:5f:29:64: 81:18:14:f2:97:ee:f0:d8:b8:12:c7:6d:f6:ae:05:84:5b:7a: d4:19:55:9d:39:3e:f8:c0:b5:44:8f:30:be:ec:f4:3f:a9:71: 48:47:4e:7c:d0:fa:d2:13:23:af:ae:e8:dc:05:fe:91:15:7d: 09:cc:3b:2f:67:72:f4:72:dc:5d:3d:2e:01:78:57:0a:21:11: 25:29:ea:30:ba:10:e9:89:19:68:2f:44:96:6b:7d:03:d2:bc: 7e:74:2b:18:65:79:1e:bf:bb:1a:02:c8:74:e8:ed:10:8a:15: 7d:69:c9:ac:76:dc:34:e1:0e:41:5b:8f:d5:b6:5a:4b:5e:33: 71:60:9f:3d:27:e9:c9:a9:53:2a:c7:87:b8:a3:d1:ab:61:f6: 89:e4:ac:9d:94:3c:1e:17:10:3c:6a:5d:35:55:e9:cc:21:b0: 10:e1:d4:b1:0e:5a:e9:29:94:1f:72:78:7e:8b:24:60:d4:38: 06:4e:d6:ec:b8:fd:64:eb:a6:2c:c9:70:34:23:ce:df:40:4d: a6:a0:12:32:24:5f:95:d8:b3:3e:e4:79:f4:f9:f6:83:5b:9f: 60:f7:be:c4 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQyMjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczMEVFNDZDQTgzM0My QkFFNUFBNzJBQTM2MENFMENBMDdBMzVBNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkqP0tZdbO2UA96hQiu62wwVc+EboCASRXoVhFOuAnsdBEEHU/ Go/d/Z1a1GhB34MImsyjOF0wDXYZpJ9BDPDfl4hIv0/kmcIaBuf0qG8t1383zKQM nC3TF8dOmD0ug8VjqvPBuhYmAcwif2I/jfjn6V6TPr1xLkgnpZVxhNVZe/kc0S4f QzY3GNZx558SvbUTS4DioKusrwXEWv6NyTJpvLzLo3QlR6SZXpYz6l/OWFWReoc2 qZ/i5fB/+Y1N8LQFfeqaWDQs9z4b9hetiC6isWjI934du2mcW3vE6lL1cN7xsBfa CbBqOoNDqHJ3o0W5L/chJgLWe4gauCPP2Hv5AgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUcw7kbKgzwrrlqnKqNgzgygejWlUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL2N3N2tiS2d6d3JybHFuS3FOZ3pneWdlaldsVS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAbVjANBgkqhkiG9w0BAQsFAAOCAQEA d37/R8PGOgLC2Xoix/QkRNMMNvGS1pkKoz8azgwiiR4LXylkgRgU8pfu8Ni4Esdt 9q4FhFt61BlVnTk++MC1RI8wvuz0P6lxSEdOfND60hMjr67o3AX+kRV9Ccw7L2dy 9HLcXT0uAXhXCiERJSnqMLoQ6YkZaC9Elmt9A9K8fnQrGGV5Hr+7GgLIdOjtEIoV fWnJrHbcNOEOQVuP1bZaS14zcWCfPSfpyalTKseHuKPRq2H2ieSsnZQ8HhcQPGpd NVXpzCGwEOHUsQ5a6SmUH3J4foskYNQ4Bk7W7Lj9ZOumLMlwNCPO30BNpqASMiRf ldizPuR59Pn2g1ufYPe+xA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:02:06 2026 by rpki-client