$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/OvBB2Tu-hRGSz3PXAi6lu4q6PYQ.roa File: OvBB2Tu-hRGSz3PXAi6lu4q6PYQ.roa (raw, json) Hash identifier: PD3PQ7yCbFhyzj6zY1E8jGE+vJWiTag2VzYb9EY7Hlg= Subject key identifier: 3A:F0:41:D9:3B:BE:85:11:92:CF:73:D7:02:2E:A5:BB:8A:BA:3D:84 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: 8B Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/OvBB2Tu-hRGSz3PXAi6lu4q6PYQ.roa Signing time: Fri 14 Aug 2026 09:17:01 +0000 ROA not before: Fri 14 Aug 2026 09:17:01 +0000 ROA not after: Thu 15 Jul 2027 01:30:02 +0000 asID: 2497 IP address blocks: 133.157.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Aug 14 09:17:01 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=3AF041D93BBE851192CF73D7022EA5BB8ABA3D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:b8:15:70:8a:36:66:d3:34:40:23:12:d7: f4:bc:83:60:0a:db:42:dd:5d:29:84:80:14:80:f3: 78:18:1c:97:6e:83:4e:c2:f9:b0:29:08:23:00:cf: 34:05:84:ac:9e:b9:08:15:a7:1e:35:e8:e4:96:6e: 65:78:fa:dc:b1:0f:05:9b:1b:d5:42:e2:d5:39:ac: ec:a8:8b:fd:54:a1:c8:87:70:42:2d:cc:d6:77:68: 74:0c:06:f4:7f:09:f1:49:e1:6e:a3:de:01:6d:95: e1:2e:59:35:e6:73:0f:fb:a1:90:a3:03:f6:c5:41: 30:6e:a2:58:4d:45:a1:05:d1:7f:48:9e:25:5d:61: 7b:3d:e3:7c:88:13:40:e8:8b:5a:51:a9:e2:a2:28: dc:ed:c9:1c:2c:fb:fa:73:a6:72:c2:09:42:81:d3: 21:f9:3b:a7:bf:33:da:eb:61:e1:dc:a9:5a:9d:27: 5b:f8:42:9a:61:7b:96:d2:15:ed:3d:8b:1e:d6:11: dd:90:f2:79:7b:3b:45:aa:cb:e9:a8:cf:cc:46:5b: 0a:14:10:11:f3:db:4d:ca:67:b9:1c:c3:57:ae:5b: 9f:87:91:02:19:b2:a9:e5:84:fe:43:ac:0f:ae:a6: df:70:8a:fc:8d:ec:c6:f1:8d:e0:f8:b1:0b:8a:fd: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F0:41:D9:3B:BE:85:11:92:CF:73:D7:02:2E:A5:BB:8A:BA:3D:84 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/OvBB2Tu-hRGSz3PXAi6lu4q6PYQ.roa sbgp-ipAddrBlock: critical IPv4: 133.157.46.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:4e:01:68:93:22:7b:b6:40:97:59:8e:bc:ba:15:3b:32:c1: 63:d6:d2:9a:c7:1c:f1:93:fa:0a:1f:ca:fb:1d:41:53:c6:66: db:ed:7c:ed:3d:84:f1:c1:79:8e:46:61:cf:34:b0:c9:32:04: 8e:e4:0b:09:15:87:b3:37:3e:a0:3c:91:fa:90:d9:3d:1e:cd: 62:c1:6f:1e:85:f4:c6:14:65:a3:a7:1f:cb:4f:87:10:d5:0d: 33:6c:d0:fb:dc:68:44:0d:7d:00:eb:36:08:4a:c6:6f:e6:46: 34:df:7f:1c:98:32:f6:c6:52:f5:fa:46:28:cc:b2:d3:4c:fc: ca:13:18:8e:44:48:d5:36:d7:9e:90:d0:6f:36:d9:43:60:db: c4:51:18:a6:5f:d3:4b:94:ee:b1:b3:cb:4b:81:35:54:1a:1d: 8c:91:61:b9:68:23:d2:54:3e:45:8f:91:5d:9b:c0:85:6a:43: e7:88:61:89:5f:79:34:1b:bb:19:82:56:85:40:8f:79:ab:bf: f8:d9:15:54:af:b5:fb:79:6a:b0:bb:78:1f:20:c1:4b:38:e3: fc:cd:22:ad:f2:01:2f:e7:34:73:64:52:3e:2d:5a:db:9f:c1: b5:60:9d:bf:06:36:38:7e:30:75:03:2a:6f:cc:a7:1e:ca:d9: d4:a3:79:ae -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MTQw OTE3MDFaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBRjA0MUQ5M0JCRTg1 MTE5MkNGNzNENzAyMkVBNUJCOEFCQTNEODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9krgVcIo2ZtM0QCMS1/S8g2AK20LdXSmEgBSA83gYHJdug07C +bApCCMAzzQFhKyeuQgVpx416OSWbmV4+tyxDwWbG9VC4tU5rOyoi/1UociHcEIt zNZ3aHQMBvR/CfFJ4W6j3gFtleEuWTXmcw/7oZCjA/bFQTBuolhNRaEF0X9IniVd YXs943yIE0Doi1pRqeKiKNztyRws+/pzpnLCCUKB0yH5O6e/M9rrYeHcqVqdJ1v4 Qpphe5bSFe09ix7WEd2Q8nl7O0Wqy+moz8xGWwoUEBHz203KZ7kcw1euW5+HkQIZ sqnlhP5DrA+upt9wivyN7MbxjeD4sQuK/YQRAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUOvBB2Tu+hRGSz3PXAi6lu4q6PYQwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL092QkIyVHUtaFJHU3ozUFhBaTZsdTRxNlBZUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnS4wDQYJKoZIhvcNAQELBQADggEB AA5OAWiTInu2QJdZjry6FTsywWPW0prHHPGT+gofyvsdQVPGZtvtfO09hPHBeY5G Yc80sMkyBI7kCwkVh7M3PqA8kfqQ2T0ezWLBbx6F9MYUZaOnH8tPhxDVDTNs0Pvc aEQNfQDrNghKxm/mRjTffxyYMvbGUvX6RijMstNM/MoTGI5ESNU2156Q0G822UNg 28RRGKZf00uU7rGzy0uBNVQaHYyRYbloI9JUPkWPkV2bwIVqQ+eIYYlfeTQbuxmC VoVAj3mrv/jZFVSvtft5arC7eB8gwUs44/zNIq3yAS/nNHNkUj4tWtufwbVgnb8G Njh+MHUDKm/Mpx7K2dSjea4= -----END CERTIFICATE-----Generated at Fri Aug 21 02:24:14 2026 by rpki-client