$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/AvN4Q-ajsSV23eb-q1BNrGxDLxI.roa File: AvN4Q-ajsSV23eb-q1BNrGxDLxI.roa (raw, json) Hash identifier: xqMKvpPHXOXIvI6U2Ez65EN9+aAF/TX+4ktLz/QtQB8= Subject key identifier: 02:F3:78:43:E6:A3:B1:25:76:DD:E6:FE:AB:50:4D:AC:6C:43:2F:12 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: 88 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AvN4Q-ajsSV23eb-q1BNrGxDLxI.roa Signing time: Fri 14 Aug 2026 09:12:56 +0000 ROA not before: Fri 14 Aug 2026 09:12:56 +0000 ROA not after: Thu 15 Jul 2027 01:30:02 +0000 asID: 7529 IP address blocks: 133.157.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Aug 14 09:12:56 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=02F37843E6A3B12576DDE6FEAB504DAC6C432F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:09:f0:ec:cd:3f:c9:c4:2b:f7:85:30:05: 3d:6d:16:7a:1a:c4:71:3e:37:cb:08:0a:42:22:7b: bb:84:7a:d7:9f:b3:c7:17:c7:43:e2:c1:08:63:28: db:d5:31:6d:e6:ec:d4:95:af:d7:48:b8:b4:3c:e0: 1e:56:5c:b0:e3:6b:f9:fe:72:8f:5a:9c:ee:6b:01: 3b:45:eb:ad:bc:94:45:5e:19:68:17:d3:6a:c4:d7: b2:e7:93:b4:95:c4:c7:f0:a3:24:86:36:3a:03:e3: 59:85:30:65:d0:1d:61:c0:49:02:97:57:3b:16:b0: 33:ea:14:e9:7e:54:76:42:e5:f3:08:2d:77:92:28: d7:18:2b:2d:26:e3:f5:92:30:7e:60:a4:1d:88:4f: 26:33:27:19:b7:6a:0a:de:4b:85:c0:8e:40:86:2d: f6:f7:c4:78:a0:45:61:c6:66:b7:cf:15:32:e0:85: 26:64:d9:08:d3:a1:a0:54:6e:1d:a6:12:9b:d8:8e: 85:6c:0e:dd:6f:a2:69:8e:da:45:b7:f6:47:2b:ac: b7:f9:47:0e:e3:61:36:52:6a:2e:f3:e1:55:fc:ed: df:a5:e8:0b:d8:ca:07:18:1f:02:84:2a:75:32:8d: 39:27:09:3a:ea:08:80:10:b6:f4:3a:26:b2:d9:59: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F3:78:43:E6:A3:B1:25:76:DD:E6:FE:AB:50:4D:AC:6C:43:2F:12 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AvN4Q-ajsSV23eb-q1BNrGxDLxI.roa sbgp-ipAddrBlock: critical IPv4: 133.157.45.0/24 Signature Algorithm: sha256WithRSAEncryption 34:5e:d9:27:a1:02:fa:ae:43:db:e0:2b:57:8d:6b:26:ec:85: 96:d5:f3:f7:ad:6f:0a:1f:23:08:9a:4a:16:6b:26:0d:53:63: 54:e6:e5:21:8b:52:f1:2f:bd:38:b0:ae:e5:82:b8:e5:bf:3b: 27:d2:28:d2:50:5a:59:ce:2b:62:a0:da:75:55:29:16:67:26: b9:c2:ac:7f:d8:7e:eb:92:75:e2:a5:a1:65:57:c5:e7:0c:2e: ed:f4:7d:41:19:4c:85:1d:6a:3d:c7:4c:07:c9:d9:db:fe:17: a2:25:ce:86:0c:e4:eb:00:59:40:85:0a:95:bb:2e:67:4d:0b: 5c:04:08:5e:08:8e:d5:d2:c5:09:8d:01:81:c9:45:a7:32:a2: cf:6f:b5:04:24:81:9a:cf:5c:a0:3a:ef:bd:ec:4e:b5:63:6e: f0:8d:9b:6b:af:f8:bb:b1:3a:5d:ae:84:cf:96:03:dd:1f:d3: d4:44:34:7d:12:7a:0a:cb:9a:5a:a2:7d:ec:88:a9:74:52:06: fb:55:93:66:05:dd:f1:30:95:32:c2:06:68:66:3d:6c:90:2a: b5:f2:36:9c:d4:90:65:b1:9c:d0:18:a7:7d:f8:08:a8:c1:39: a9:13:0e:43:02:b8:b9:ec:de:8d:28:09:ca:09:04:c3:dc:6a: d3:9b:78:91 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MTQw OTEyNTZaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyRjM3ODQzRTZBM0Ix MjU3NkRERTZGRUFCNTA0REFDNkM0MzJGMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4Ognw7M0/ycQr94UwBT1tFnoaxHE+N8sICkIie7uEetefs8cX x0PiwQhjKNvVMW3m7NSVr9dIuLQ84B5WXLDja/n+co9anO5rATtF6628lEVeGWgX 02rE17Lnk7SVxMfwoySGNjoD41mFMGXQHWHASQKXVzsWsDPqFOl+VHZC5fMILXeS KNcYKy0m4/WSMH5gpB2ITyYzJxm3agreS4XAjkCGLfb3xHigRWHGZrfPFTLghSZk 2QjToaBUbh2mEpvYjoVsDt1vommO2kW39kcrrLf5Rw7jYTZSai7z4VX87d+l6AvY ygcYHwKEKnUyjTknCTrqCIAQtvQ6JrLZWVrrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUAvN4Q+ajsSV23eb+q1BNrGxDLxIwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL0F2TjRRLWFqc1NWMjNlYi1xMUJOckd4REx4SS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnS0wDQYJKoZIhvcNAQELBQADggEB ADRe2SehAvquQ9vgK1eNaybshZbV8/etbwofIwiaShZrJg1TY1Tm5SGLUvEvvTiw ruWCuOW/OyfSKNJQWlnOK2Kg2nVVKRZnJrnCrH/YfuuSdeKloWVXxecMLu30fUEZ TIUdaj3HTAfJ2dv+F6IlzoYM5OsAWUCFCpW7LmdNC1wECF4IjtXSxQmNAYHJRacy os9vtQQkgZrPXKA6773sTrVjbvCNm2uv+LuxOl2uhM+WA90f09RENH0SegrLmlqi feyIqXRSBvtVk2YF3fEwlTLCBmhmPWyQKrXyNpzUkGWxnNAYp334CKjBOakTDkMC uLns3o0oCcoJBMPcatObeJE= -----END CERTIFICATE-----Generated at Sat Aug 22 00:44:13 2026 by rpki-client