$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/m8AWliF95yt7ztvzJ3YwL8eWbdU.roa File: m8AWliF95yt7ztvzJ3YwL8eWbdU.roa (raw, json) Hash identifier: Gv7xKG1TKQUjIeuwLQe+kHQJthFR+0I2H7CrKneaeHg= Subject key identifier: 9B:C0:16:96:21:7D:E7:2B:7B:CE:DB:F3:27:76:30:2F:C7:96:6D:D5 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0845 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/m8AWliF95yt7ztvzJ3YwL8eWbdU.roa Signing time: Tue 31 Mar 2026 07:43:11 +0000 ROA not before: Tue 31 Mar 2026 07:43:11 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 27.85.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:43:11 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=9BC01696217DE72B7BCEDBF32776302FC7966DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:a4:1c:d9:14:cb:62:91:78:19:7c:90:86: 73:73:6f:9e:18:25:62:16:09:0c:c6:d1:cb:51:66: fe:2f:96:c8:c4:7c:5a:24:a9:8c:65:f2:de:18:81: ff:76:03:c5:e3:5c:11:90:93:2e:0a:0c:77:99:2b: 22:d2:3e:7b:ba:55:82:9b:27:7b:d3:30:ed:91:26: 80:05:2d:f9:01:9c:f1:73:fe:e7:a0:cb:74:81:95: a5:63:e0:a2:78:11:cc:7a:ae:5e:c8:24:59:3f:3c: 37:3d:f9:03:27:9b:8c:1f:c2:a5:72:44:e4:dd:88: b4:db:07:2e:58:21:92:4a:16:94:5d:f2:15:ec:9a: 05:94:08:93:55:f2:5c:5e:00:68:19:34:49:1d:93: 21:45:2d:b9:15:4b:4f:44:8f:68:bd:8f:0a:44:c8: bf:1d:87:d6:b7:70:b5:7e:48:30:60:5d:d0:a2:54: 0b:5d:82:cd:36:2c:c0:b5:1b:a5:aa:c8:b0:c1:bb: d8:c5:29:ca:a4:f6:ab:a0:d1:67:6c:e1:c9:6c:4c: 45:18:d0:1f:de:9b:72:0f:5d:39:ac:47:fa:bf:55: ca:9d:c0:7d:85:9f:90:3b:35:11:e1:aa:c1:3a:4d: 39:02:28:0c:ce:0e:d6:6d:e5:1d:39:a4:9c:88:03: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C0:16:96:21:7D:E7:2B:7B:CE:DB:F3:27:76:30:2F:C7:96:6D:D5 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/m8AWliF95yt7ztvzJ3YwL8eWbdU.roa sbgp-ipAddrBlock: critical IPv4: 27.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:f4:03:ce:48:af:bc:79:d3:63:46:6d:d3:30:04:ca:98:84: 73:3a:ca:0f:13:81:a3:49:2b:22:31:23:6d:58:34:78:2c:f0: 0b:b8:06:27:c9:cc:73:8c:98:98:c5:be:5d:53:ab:11:cb:11: b6:15:dc:ba:cf:cd:57:98:f3:5c:98:60:52:72:1a:5a:4c:a6: cf:20:a2:86:55:84:a2:0e:a6:3a:b9:4b:a7:8d:e7:05:c2:bf: 9d:49:d7:79:12:ed:a3:e1:53:16:1d:5e:22:68:b1:1d:29:c0: 5a:5f:82:e4:66:94:8b:89:df:bf:68:78:a7:83:0d:e8:be:05: 72:b9:7e:a8:79:90:6d:00:4d:be:17:2d:d0:7a:40:67:42:88: da:6e:65:8e:25:5f:9a:89:9a:e3:0d:c7:e3:dc:22:c1:e2:c3: 2d:e5:01:4e:65:6d:bd:be:21:7f:b7:0d:51:66:46:44:06:89: a1:81:78:6a:30:20:dc:e8:04:46:cd:81:51:4a:f9:c7:13:4b: 1a:1b:44:b5:72:16:91:61:bf:d5:74:0c:e5:80:03:95:47:3f: 01:2d:f8:cd:c1:e6:b9:2f:51:8c:88:fa:86:f2:05:07:b9:3b: 79:38:c5:3c:17:26:85:df:67:49:77:21:c7:e0:28:33:31:d9: 36:c7:2e:b6 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQzMTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlCQzAxNjk2MjE3REU3 MkI3QkNFREJGMzI3NzYzMDJGQzc5NjZERDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCpqQc2RTLYpF4GXyQhnNzb54YJWIWCQzG0ctRZv4vlsjEfFok qYxl8t4Ygf92A8XjXBGQky4KDHeZKyLSPnu6VYKbJ3vTMO2RJoAFLfkBnPFz/ueg y3SBlaVj4KJ4Ecx6rl7IJFk/PDc9+QMnm4wfwqVyROTdiLTbBy5YIZJKFpRd8hXs mgWUCJNV8lxeAGgZNEkdkyFFLbkVS09Ej2i9jwpEyL8dh9a3cLV+SDBgXdCiVAtd gs02LMC1G6WqyLDBu9jFKcqk9qug0Wds4clsTEUY0B/em3IPXTmsR/q/VcqdwH2F n5A7NRHhqsE6TTkCKAzODtZt5R05pJyIA3TjAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUm8AWliF95yt7ztvzJ3YwL8eWbdUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL204QVdsaUY5NXl0N3p0dnpKM1l3TDhlV2JkVS5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAbVTANBgkqhkiG9w0BAQsFAAOCAQEA ivQDzkivvHnTY0Zt0zAEypiEczrKDxOBo0krIjEjbVg0eCzwC7gGJ8nMc4yYmMW+ XVOrEcsRthXcus/NV5jzXJhgUnIaWkymzyCihlWEog6mOrlLp43nBcK/nUnXeRLt o+FTFh1eImixHSnAWl+C5GaUi4nfv2h4p4MN6L4Fcrl+qHmQbQBNvhct0HpAZ0KI 2m5ljiVfmoma4w3H49wiweLDLeUBTmVtvb4hf7cNUWZGRAaJoYF4ajAg3OgERs2B UUr5xxNLGhtEtXIWkWG/1XQM5YADlUc/AS34zcHmuS9RjIj6hvIFB7k7eTjFPBcm hd9nSXchx+AoMzHZNscutg== -----END CERTIFICATE-----Generated at Sun Apr 19 08:49:25 2026 by rpki-client