$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/OqWQSEorlQ6RkyPZe3gjZsb_H2k.roa File: OqWQSEorlQ6RkyPZe3gjZsb_H2k.roa (raw, json) Hash identifier: xpbIUPQjylFq6Cenu+pxwiO0EC4mx9NA+PwN4NNM/3g= Subject key identifier: 3A:A5:90:48:4A:2B:95:0E:91:93:23:D9:7B:78:23:66:C6:FF:1F:69 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: 92 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/OqWQSEorlQ6RkyPZe3gjZsb_H2k.roa Signing time: Fri 14 Aug 2026 09:25:15 +0000 ROA not before: Fri 14 Aug 2026 09:25:15 +0000 ROA not after: Thu 15 Jul 2027 01:30:02 +0000 asID: 7529 IP address blocks: 133.157.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Aug 14 09:25:15 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=3AA590484A2B950E919323D97B782366C6FF1F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:e5:17:50:8a:46:08:97:19:19:27:45:bf: a7:de:15:c4:0e:c7:e7:bb:bb:5c:41:7f:62:32:2d: f4:1b:4c:0b:35:92:9d:de:21:02:d1:75:c5:90:bf: 9e:25:52:6c:83:00:ec:09:2c:e2:f9:12:a2:d3:4d: 4c:d5:84:03:9c:7a:78:d5:2b:a9:f3:49:1c:85:23: b6:1e:64:4d:64:6a:72:1c:32:a7:18:08:44:ce:f4: d3:fd:64:06:53:55:cc:db:6d:9f:7b:16:32:34:75: a2:f9:9c:50:d4:ab:43:2f:bf:dc:07:9d:c4:76:b4: 02:57:12:14:e4:94:78:e2:4a:22:fd:3c:f7:52:e0: 35:d5:29:a9:66:a0:26:0a:c4:f8:cc:00:53:d7:e1: 29:6d:bd:40:77:32:e8:9a:e6:7d:ff:29:26:8f:71: 26:0c:c6:d9:67:66:4f:cc:a7:96:77:08:16:60:74: 03:11:56:8a:f5:b5:9c:aa:40:a5:72:23:08:80:e2: 87:ce:73:d4:9d:19:c2:d4:6b:57:b4:e4:3b:07:65: a7:ae:d3:cd:08:1a:5b:d9:e2:4d:22:45:c5:76:63: 73:9b:59:2d:d7:09:85:06:d7:e2:de:43:d7:7a:dc: c6:5e:c1:b9:8a:ab:fe:7b:86:32:80:e4:5c:09:74: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:90:48:4A:2B:95:0E:91:93:23:D9:7B:78:23:66:C6:FF:1F:69 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/OqWQSEorlQ6RkyPZe3gjZsb_H2k.roa sbgp-ipAddrBlock: critical IPv4: 133.157.50.0/24 Signature Algorithm: sha256WithRSAEncryption a2:f5:78:81:e4:43:40:a2:4d:06:ea:8e:c1:6f:e0:44:40:75: eb:d6:ae:64:fb:67:b0:d6:ff:c3:a9:28:e0:9f:1c:66:60:eb: 5b:57:88:30:d0:d3:6c:36:44:a8:c3:bb:77:78:1c:9a:03:07: 2c:3a:bd:f1:b3:6e:ce:c3:4c:8a:84:6e:b7:b7:00:c3:09:7e: 9c:4c:5b:3d:22:5b:2a:1b:20:37:87:89:cd:84:bb:3e:2c:a9: 35:d2:1a:14:4b:d5:8f:02:e6:37:61:49:ac:64:d1:54:9a:55: 9c:a2:c4:3b:98:6d:90:03:20:72:c3:52:c9:c1:08:47:57:2e: eb:7c:86:97:47:6a:78:c1:bc:8f:77:80:54:15:2e:2a:30:9d: 03:64:ab:c1:ee:94:19:7e:94:4a:1b:72:7e:dc:b6:fb:ad:f5: 85:e4:13:f4:49:e6:28:86:1a:fb:3c:ec:61:ca:fb:ee:8d:dc: 2b:84:22:97:e7:3d:1c:ec:00:46:86:10:2c:af:87:a3:62:23: 84:8b:1e:ae:4d:d9:68:41:80:65:bd:84:f2:f9:31:8b:b2:ad: 40:98:40:d4:09:0d:19:12:ec:9a:bf:a5:7f:06:be:92:51:e5: ad:2e:26:f4:11:78:54:1d:6b:f1:16:1f:31:6c:d0:03:1b:f1: 6a:c4:ac:9d -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MTQw OTI1MTVaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBQTU5MDQ4NEEyQjk1 MEU5MTkzMjNEOTdCNzgyMzY2QzZGRjFGNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMOOUXUIpGCJcZGSdFv6feFcQOx+e7u1xBf2IyLfQbTAs1kp3e IQLRdcWQv54lUmyDAOwJLOL5EqLTTUzVhAOcenjVK6nzSRyFI7YeZE1kanIcMqcY CETO9NP9ZAZTVczbbZ97FjI0daL5nFDUq0Mvv9wHncR2tAJXEhTklHjiSiL9PPdS 4DXVKalmoCYKxPjMAFPX4SltvUB3Muia5n3/KSaPcSYMxtlnZk/Mp5Z3CBZgdAMR Vor1tZyqQKVyIwiA4ofOc9SdGcLUa1e05DsHZaeu080IGlvZ4k0iRcV2Y3ObWS3X CYUG1+LeQ9d63MZewbmKq/57hjKA5FwJdPwtAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUOqWQSEorlQ6RkyPZe3gjZsb/H2kwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL09xV1FTRW9ybFE2Umt5UFplM2dqWnNiX0gyay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnTIwDQYJKoZIhvcNAQELBQADggEB AKL1eIHkQ0CiTQbqjsFv4ERAdevWrmT7Z7DW/8OpKOCfHGZg61tXiDDQ02w2RKjD u3d4HJoDByw6vfGzbs7DTIqEbre3AMMJfpxMWz0iWyobIDeHic2Euz4sqTXSGhRL 1Y8C5jdhSaxk0VSaVZyixDuYbZADIHLDUsnBCEdXLut8hpdHanjBvI93gFQVLiow nQNkq8HulBl+lEobcn7ctvut9YXkE/RJ5iiGGvs87GHK++6N3CuEIpfnPRzsAEaG ECyvh6NiI4SLHq5N2WhBgGW9hPL5MYuyrUCYQNQJDRkS7Jq/pX8GvpJR5a0uJvQR eFQda/EWHzFs0AMb8WrErJ0= -----END CERTIFICATE-----Generated at Sat Aug 22 00:44:22 2026 by rpki-client