$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yGueHBsKxCfKnrmkArcCS-O2N3g.roa File: yGueHBsKxCfKnrmkArcCS-O2N3g.roa (raw, json) Hash identifier: qwKUuozyutFpJ1IYRm+6/KmVwr51lz6p8hQdMm/66jg= Subject key identifier: C8:6B:9E:1C:1B:0A:C4:27:CA:9E:B9:A4:02:B7:02:4B:E3:B6:37:78 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 084B Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yGueHBsKxCfKnrmkArcCS-O2N3g.roa Signing time: Tue 31 Mar 2026 07:43:14 +0000 ROA not before: Tue 31 Mar 2026 07:43:14 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 2516 IP address blocks: 106.173.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 07:43:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=C86B9E1C1B0AC427CA9EB9A402B7024BE3B63778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d5:c6:e0:43:10:8f:08:02:98:32:d1:bb:95: 0c:75:33:b8:3e:82:24:a2:5d:7e:28:9f:f7:95:ff: 64:e6:c2:6f:47:00:99:16:45:1a:37:63:d6:d5:54: 77:61:2e:2f:c4:a2:fb:c8:46:f2:15:ae:f7:dc:64: 98:8d:26:39:6c:68:da:43:af:7e:cb:91:43:08:9d: d5:52:55:f0:14:d2:1f:19:13:1b:1d:32:c8:d6:6f: c4:89:5d:63:b0:d4:29:e2:ed:51:ab:57:e1:48:ff: 10:23:db:6c:52:7c:86:8c:0b:d9:37:ec:c8:9e:5f: 85:0d:fb:8b:ea:d5:fc:2a:bc:e7:9d:73:73:f2:ef: be:ed:e0:ff:3a:80:f9:07:ca:1f:71:78:93:d9:ba: b7:36:75:03:01:f1:a3:06:3c:95:c4:f5:7d:b8:e4: f7:ac:b1:e9:6b:23:0f:59:f1:bf:e9:29:02:60:30: f6:50:fc:fe:26:75:e2:df:13:8e:bd:e6:70:ad:72: 5f:ab:5d:42:9b:7d:e6:6d:e4:4c:98:5b:a0:05:66: 41:7d:04:ef:d5:0a:dd:21:77:50:df:da:26:b1:7d: 29:da:c9:ca:78:34:22:7d:8f:af:f5:01:33:ba:73: d5:e1:73:0a:07:f6:7d:42:72:1c:ba:f5:6c:e8:b8: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6B:9E:1C:1B:0A:C4:27:CA:9E:B9:A4:02:B7:02:4B:E3:B6:37:78 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yGueHBsKxCfKnrmkArcCS-O2N3g.roa sbgp-ipAddrBlock: critical IPv4: 106.173.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:d7:1c:7e:4b:ee:92:dc:2f:f1:8f:a6:18:fd:e0:b7:63:b4: b2:1b:62:01:98:36:fe:63:8f:91:d4:df:31:07:10:1d:c0:bd: 50:00:56:e6:69:a4:b3:09:ff:0c:63:a2:f1:04:4a:38:90:6a: 3f:8b:7d:6f:79:cb:b0:eb:d1:0e:b4:13:9b:38:85:d8:03:0a: 9f:c1:8d:14:4e:10:20:dd:9d:8a:7b:75:b4:c1:7c:f7:6c:df: 80:41:a8:b3:51:06:06:38:37:bf:e4:91:ff:db:59:25:6d:f0: bb:c5:0e:50:80:dc:9d:8a:a5:f8:21:3f:90:e4:97:a9:91:4f: 92:dd:e6:22:5c:8f:d2:b2:12:56:1a:31:06:76:b4:a1:7c:df: 8f:24:3d:67:cc:16:24:ca:86:e3:3d:e2:e9:f2:19:56:59:17: df:b6:19:91:d6:d5:72:08:5b:97:1c:dc:5f:91:76:b5:24:35: cb:ce:38:e1:5d:2d:b2:c7:58:75:c2:0f:bb:b4:a4:fe:76:66: a9:47:37:d8:64:be:1f:26:f2:1e:40:fc:92:05:2b:0c:fd:af: 91:ef:90:a8:f3:64:38:67:20:01:4d:ca:79:6d:f7:75:c5:1f: 9b:14:91:23:dc:30:d9:7b:3c:0a:05:57:d8:92:53:e9:c2:a3: 45:0a:93:25 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICCEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw NzQzMTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4NkI5RTFDMUIwQUM0 MjdDQTlFQjlBNDAyQjcwMjRCRTNCNjM3NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn1cbgQxCPCAKYMtG7lQx1M7g+giSiXX4on/eV/2Tmwm9HAJkW RRo3Y9bVVHdhLi/EovvIRvIVrvfcZJiNJjlsaNpDr37LkUMIndVSVfAU0h8ZExsd MsjWb8SJXWOw1Cni7VGrV+FI/xAj22xSfIaMC9k37MieX4UN+4vq1fwqvOedc3Py 777t4P86gPkHyh9xeJPZurc2dQMB8aMGPJXE9X245PesselrIw9Z8b/pKQJgMPZQ /P4mdeLfE4695nCtcl+rXUKbfeZt5EyYW6AFZkF9BO/VCt0hd1Df2iaxfSnaycp4 NCJ9j6/1ATO6c9XhcwoH9n1Cchy69WzouFLnAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUyGueHBsKxCfKnrmkArcCS+O2N3gwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTYxL3lHdWVIQnNLeENmS25ybWtBcmNDUy1PMk4zZy5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBqrTANBgkqhkiG9w0BAQsFAAOCAQEA edccfkvuktwv8Y+mGP3gt2O0shtiAZg2/mOPkdTfMQcQHcC9UABW5mmkswn/DGOi 8QRKOJBqP4t9b3nLsOvRDrQTmziF2AMKn8GNFE4QIN2dint1tMF892zfgEGos1EG Bjg3v+SR/9tZJW3wu8UOUIDcnYql+CE/kOSXqZFPkt3mIlyP0rISVhoxBna0oXzf jyQ9Z8wWJMqG4z3i6fIZVlkX37YZkdbVcghblxzcX5F2tSQ1y8444V0tssdYdcIP u7Sk/nZmqUc32GS+HybyHkD8kgUrDP2vke+QqPNkOGcgAU3KeW33dcUfmxSRI9ww 2Xs8CgVX2JJT6cKjRQqTJQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:55 2026 by rpki-client