$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/s3eRPceKdI1IMlLZnkBgd_EXxp8.roa File: s3eRPceKdI1IMlLZnkBgd_EXxp8.roa (raw, json) Hash identifier: 0zQ1LgB1ZS3GmhLL0XCeQywBbXPRKfdIO7rZ78qAdRM= Subject key identifier: B3:77:91:3D:C7:8A:74:8D:48:32:52:D9:9E:40:60:77:F1:17:C6:9F Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 08B9 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s3eRPceKdI1IMlLZnkBgd_EXxp8.roa Signing time: Tue 31 Mar 2026 07:44:07 +0000 ROA not before: Tue 31 Mar 2026 07:44:07 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 210.229.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:44:07 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=B377913DC78A748D483252D99E406077F117C69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:5a:d7:6b:13:c5:38:36:5a:42:72:80:ec: 13:fd:ed:ac:d8:cb:ab:50:08:04:ff:35:60:65:80: 30:3d:e5:53:b7:ad:d2:95:3b:50:8a:6f:8e:39:9d: 7d:31:03:74:18:36:58:e7:13:c7:b8:a3:d2:bb:04: 66:cf:41:f1:8c:0b:b4:8a:6e:72:10:66:a8:87:ed: db:60:8c:ac:44:b4:2f:2d:0d:bd:28:82:02:dd:18: 6e:7c:74:a8:c7:8e:b2:53:b3:92:ad:d9:4c:23:32: e2:74:f5:bb:00:6d:24:2f:63:be:7a:3a:f7:ab:87: e5:67:2f:25:2f:cf:5d:da:07:da:a3:82:4c:66:0f: 8f:e5:44:74:48:f9:6c:3b:26:ec:4c:69:ae:69:c4: 3f:21:1c:42:bc:ae:7e:7e:8a:fc:52:9a:ef:09:06: a7:02:23:b7:45:c7:9a:58:74:c3:44:88:80:ed:27: 8f:f1:61:bb:30:df:f4:76:6b:48:5b:c3:40:ed:20: 99:77:70:3e:2f:0c:b7:2b:48:9f:e8:d2:08:4e:08: 33:a0:58:51:1e:e4:c2:78:9a:e3:8c:00:a2:81:e0: eb:0d:3f:c9:d9:82:68:00:97:94:97:93:de:0a:ea: 7b:f6:85:a6:da:25:fc:0c:e8:f8:58:87:e2:90:27: b0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:77:91:3D:C7:8A:74:8D:48:32:52:D9:9E:40:60:77:F1:17:C6:9F X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s3eRPceKdI1IMlLZnkBgd_EXxp8.roa sbgp-ipAddrBlock: critical IPv4: 210.229.144.0/24 Signature Algorithm: sha256WithRSAEncryption 26:85:e9:0a:9c:e8:a6:3b:3e:77:9d:c7:b7:d3:5c:c2:77:dc: 25:94:09:e9:ce:01:96:4e:f0:e2:d4:ad:d8:0b:96:eb:78:f8: 69:95:b7:68:37:03:7a:52:41:05:ce:c0:53:c0:ea:f8:67:95: ac:28:f2:d3:14:80:3f:08:d3:99:3e:25:5a:85:21:5f:c4:2a: 65:5f:df:69:06:c4:0f:b5:b8:69:e4:c4:45:4c:20:6b:41:d3: b5:96:72:dc:5c:b7:80:f4:0d:92:ab:9d:7c:35:84:cf:d2:b7: 71:d5:d0:ad:a6:b6:5b:1c:1b:fe:54:fc:c0:41:03:d0:c3:85: 16:19:f2:d4:89:56:31:b5:0f:fa:41:2e:e0:e2:4f:78:63:a5: 82:e5:cf:f5:fd:3e:1b:43:3f:10:2c:19:f6:7a:dc:5a:28:35: 00:92:0f:b0:40:f3:6e:c8:a7:3e:fd:2f:65:27:eb:e4:3c:5f: 8a:90:99:3f:a4:14:ab:7d:cc:b9:9a:71:7d:5d:70:c5:97:76: b4:c3:78:e6:1d:e1:b2:a9:75:36:23:74:1d:2c:8a:49:2e:a7: f1:60:a4:24:be:81:4a:ae:65:6b:66:5f:e0:8d:99:c8:e7:cf: 34:a9:35:29:d1:76:3a:f2:b4:b2:fb:c5:c7:65:f1:6c:64:93: d8:c8:bf:52 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQ0MDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIzNzc5MTNEQzc4QTc0 OEQ0ODMyNTJEOTlFNDA2MDc3RjExN0M2OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+2VrXaxPFODZaQnKA7BP97azYy6tQCAT/NWBlgDA95VO3rdKV O1CKb445nX0xA3QYNljnE8e4o9K7BGbPQfGMC7SKbnIQZqiH7dtgjKxEtC8tDb0o ggLdGG58dKjHjrJTs5Kt2UwjMuJ09bsAbSQvY756Overh+VnLyUvz13aB9qjgkxm D4/lRHRI+Ww7JuxMaa5pxD8hHEK8rn5+ivxSmu8JBqcCI7dFx5pYdMNEiIDtJ4/x Ybsw3/R2a0hbw0DtIJl3cD4vDLcrSJ/o0ghOCDOgWFEe5MJ4muOMAKKB4OsNP8nZ gmgAl5SXk94K6nv2habaJfwM6PhYh+KQJ7D1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUs3eRPceKdI1IMlLZnkBgd/EXxp8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL3MzZVJQY2VLZEkxSU1sTFpua0JnZF9FWHhwOC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS5ZAwDQYJKoZIhvcNAQELBQADggEB ACaF6Qqc6KY7Pnedx7fTXMJ33CWUCenOAZZO8OLUrdgLlut4+GmVt2g3A3pSQQXO wFPA6vhnlawo8tMUgD8I05k+JVqFIV/EKmVf32kGxA+1uGnkxEVMIGtB07WWctxc t4D0DZKrnXw1hM/St3HV0K2mtlscG/5U/MBBA9DDhRYZ8tSJVjG1D/pBLuDiT3hj pYLlz/X9PhtDPxAsGfZ63FooNQCSD7BA827Ipz79L2Un6+Q8X4qQmT+kFKt9zLma cX1dcMWXdrTDeOYd4bKpdTYjdB0sikkup/FgpCS+gUquZWtmX+CNmcjnzzSpNSnR djrytLL7xcdl8Wxkk9jIv1I= -----END CERTIFICATE-----Generated at Fri Apr 17 08:13:36 2026 by rpki-client