$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/LmhGAlWbL9kJzjZ1GNyC8FL0grY.roa File: LmhGAlWbL9kJzjZ1GNyC8FL0grY.roa (raw, json) Hash identifier: rurnrWL7Ug03FYyzgj0gL+5l+GzezTZLZWatzV6lOcw= Subject key identifier: 2E:68:46:02:55:9B:2F:D9:09:CE:36:75:18:DC:82:F0:52:F4:82:B6 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: C6 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/LmhGAlWbL9kJzjZ1GNyC8FL0grY.roa Signing time: Thu 24 Sep 2026 00:41:57 +0000 ROA not before: Thu 24 Sep 2026 00:41:57 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 7529 IP address blocks: 133.157.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 05:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Sep 24 00:41:57 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=2E684602559B2FD909CE367518DC82F052F482B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:9a:13:60:be:e3:58:63:5d:7e:68:5d:ee: f8:c7:03:18:15:3b:69:fc:cf:30:e5:b2:9e:40:25: 83:e1:bf:35:73:6d:b9:3e:39:7b:7b:09:9d:79:62: f1:bd:12:a5:f8:6f:9d:10:77:92:06:67:28:46:9a: 87:e4:88:8b:ff:7d:f1:c2:e8:74:cf:f9:bc:38:48: 88:b8:91:60:a1:d7:a2:72:84:7f:54:21:ad:8b:6c: ef:7b:ee:d9:50:06:f0:36:2f:05:e0:71:32:58:0f: 3e:5e:15:4e:c9:81:7d:77:f3:35:1d:40:07:de:46: d6:24:f0:10:53:60:5c:f0:67:99:69:6f:f7:db:0e: 5e:0b:ba:22:e2:e0:b2:3f:59:07:0f:09:8a:fa:0d: 12:56:3e:fd:97:b7:90:ce:e4:7f:a8:09:fa:f2:dc: ae:38:7a:ba:c4:49:58:4c:23:d7:fd:c9:08:f7:36: 8c:43:54:32:f5:5a:ac:77:5c:d9:7b:ec:a1:4d:fa: f8:25:fa:ea:b6:b3:e5:1c:b3:eb:80:c1:2c:59:45: ef:e7:61:f3:2a:29:d0:e7:92:0d:9d:6b:3e:38:26: e3:a5:1b:03:3a:c7:c0:af:a2:3a:e4:44:4d:32:6c: e4:d0:20:ef:b3:4c:92:af:fb:83:7f:a4:0e:41:9a: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:68:46:02:55:9B:2F:D9:09:CE:36:75:18:DC:82:F0:52:F4:82:B6 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/LmhGAlWbL9kJzjZ1GNyC8FL0grY.roa sbgp-ipAddrBlock: critical IPv4: 133.157.28.0/22 Signature Algorithm: sha256WithRSAEncryption 02:3b:05:8a:9e:85:de:19:3f:e3:ec:aa:ae:05:9a:3f:75:78: cb:69:e8:6c:77:92:c1:b4:69:f8:71:79:09:6c:2e:6f:80:9d: 97:82:be:1c:e0:c3:f3:12:25:58:95:3c:60:46:97:91:d0:60: 58:4d:bb:c2:9f:31:76:83:51:ab:25:52:5c:73:6b:c3:14:1e: f2:20:21:23:76:7b:3e:65:c4:a3:1b:e6:af:ee:17:c0:73:ff: ee:c3:21:f2:79:24:59:63:47:2d:19:32:47:96:36:8d:92:e0: 2b:cf:9e:90:98:5d:0c:ba:1f:89:a4:c1:8f:fb:57:b9:ba:6e: 97:3b:b9:b1:cb:c2:45:9d:38:1c:3f:75:63:d8:97:b8:a9:f5: 37:69:83:29:18:a5:3f:34:b8:dc:29:00:97:1c:f2:90:8c:11: 61:a8:b0:d1:4f:28:4a:f9:0b:9f:fd:8f:32:94:c7:c8:7c:fd: ad:00:31:56:cc:db:1a:f1:71:da:30:89:82:fb:c8:66:39:93: 20:ff:25:5b:db:b3:57:4e:65:00:67:1b:21:77:6d:a9:9d:15: 8c:fd:21:21:61:aa:79:3e:91:8f:94:3f:88:60:fe:8c:eb:be: a8:de:cc:e5:82:5a:b1:31:23:c4:31:c5:0a:07:d4:1e:bd:49: 82:47:c1:44 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA5MjQw MDQxNTdaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFNjg0NjAyNTU5QjJG RDkwOUNFMzY3NTE4REM4MkYwNTJGNDgyQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFV5oTYL7jWGNdfmhd7vjHAxgVO2n8zzDlsp5AJYPhvzVzbbk+ OXt7CZ15YvG9EqX4b50Qd5IGZyhGmofkiIv/ffHC6HTP+bw4SIi4kWCh16JyhH9U Ia2LbO977tlQBvA2LwXgcTJYDz5eFU7JgX138zUdQAfeRtYk8BBTYFzwZ5lpb/fb Dl4LuiLi4LI/WQcPCYr6DRJWPv2Xt5DO5H+oCfry3K44errESVhMI9f9yQj3NoxD VDL1Wqx3XNl77KFN+vgl+uq2s+Ucs+uAwSxZRe/nYfMqKdDnkg2daz44JuOlGwM6 x8CvojrkRE0ybOTQIO+zTJKv+4N/pA5BmngTAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQULmhGAlWbL9kJzjZ1GNyC8FL0grYwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL0xtaEdBbFdiTDlrSnpqWjFHTnlDOEZMMGdyWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFnRwwDQYJKoZIhvcNAQELBQADggEB AAI7BYqehd4ZP+Psqq4Fmj91eMtp6Gx3ksG0afhxeQlsLm+AnZeCvhzgw/MSJViV PGBGl5HQYFhNu8KfMXaDUaslUlxza8MUHvIgISN2ez5lxKMb5q/uF8Bz/+7DIfJ5 JFljRy0ZMkeWNo2S4CvPnpCYXQy6H4mkwY/7V7m6bpc7ubHLwkWdOBw/dWPYl7ip 9TdpgykYpT80uNwpAJcc8pCMEWGosNFPKEr5C5/9jzKUx8h8/a0AMVbM2xrxcdow iYL7yGY5kyD/JVvbs1dOZQBnGyF3bamdFYz9ISFhqnk+kY+UP4hg/ozrvqjezOWC WrExI8QxxQoH1B69SYJHwUQ= -----END CERTIFICATE-----Generated at Tue Oct 6 15:43:39 2026 by rpki-client