$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/ShkooGlDv3iX9fnlOmq090xnONU.roa File: ShkooGlDv3iX9fnlOmq090xnONU.roa (raw, json) Hash identifier: SimE6Gg0tby5znRMFjGF+iqs72wuiwGGdlXlSYVdsAQ= Subject key identifier: 4A:19:28:A0:69:43:BF:78:97:F5:F9:E5:3A:6A:B4:F7:4C:67:38:D5 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: 87 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/ShkooGlDv3iX9fnlOmq090xnONU.roa Signing time: Fri 14 Aug 2026 09:12:55 +0000 ROA not before: Fri 14 Aug 2026 09:12:55 +0000 ROA not after: Thu 15 Jul 2027 01:30:02 +0000 asID: 2497 IP address blocks: 133.157.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Aug 14 09:12:55 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=4A1928A06943BF7897F5F9E53A6AB4F74C6738D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:be:dc:57:8e:60:4f:b6:5d:ff:62:8d:fe: 24:35:95:6d:fe:ea:0a:e4:0b:97:2b:68:4d:d0:6a: a7:db:63:b8:cc:52:07:cd:60:fd:09:c0:84:c7:86: 0f:7b:8b:23:6b:e2:42:3c:90:9d:6b:9d:64:4f:78: 61:54:00:f5:80:66:5b:a3:35:28:0f:f7:c1:a6:34: f0:d0:81:90:29:45:38:c6:6b:75:48:f2:ce:73:7f: c2:77:b5:8c:e1:d1:39:aa:f3:98:9f:f7:ed:74:81: 10:15:81:40:b2:b0:a3:63:e6:73:e3:fd:c2:c4:61: 92:5e:0c:bd:9c:1c:fa:42:e2:1e:52:ed:d8:45:92: 70:a9:56:4c:70:df:39:63:59:e3:f3:9a:3c:9a:0e: 11:84:62:89:f8:06:94:0f:5c:d9:8b:9f:8e:94:33: 6b:5f:2b:ec:50:11:77:cb:e0:05:1c:99:39:a9:49: 9a:0c:f8:35:35:48:78:cb:b1:54:4b:88:d0:cc:0f: 8b:73:1d:b1:3e:5e:7f:d6:00:db:0c:db:2d:1f:eb: 29:a0:14:77:e8:c7:34:bb:63:91:b1:3d:05:62:bd: f7:0a:f7:4f:0e:b3:62:c3:52:3a:de:bd:63:10:ae: 3f:e4:c5:a4:98:9f:97:9d:20:ca:cc:91:89:90:f1: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:19:28:A0:69:43:BF:78:97:F5:F9:E5:3A:6A:B4:F7:4C:67:38:D5 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/ShkooGlDv3iX9fnlOmq090xnONU.roa sbgp-ipAddrBlock: critical IPv4: 133.157.44.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:09:b2:b3:c2:83:f1:c3:53:2f:0f:35:89:31:a2:2c:01:64: 8e:23:09:a5:77:2f:34:49:a7:3f:6b:96:e9:4a:b7:07:14:c5: 3a:dd:3a:df:3f:35:7d:43:89:18:eb:5c:6a:c5:43:d1:3a:1d: 68:c9:5c:ab:3c:1d:df:6c:48:ca:ad:5a:f4:42:d5:de:13:4f: 72:1d:1d:34:b1:60:1b:ce:ec:a4:55:4a:8f:cf:a8:08:fe:58: 7f:bc:c6:50:35:e0:7a:be:1f:a7:7d:49:9e:6b:f9:7a:91:9e: 6c:f8:44:5c:aa:de:e7:d3:34:90:70:80:be:8b:05:f4:ff:68: c3:a3:c1:de:09:03:f7:52:31:09:3c:79:30:da:df:a2:20:84: 81:63:f7:b1:e6:1f:3b:b3:8b:41:5c:42:61:33:f9:ea:2f:57: e1:17:9b:e4:80:89:d3:96:a7:d4:6e:7f:ea:15:a5:f0:69:6e: 01:5a:56:0c:32:88:f7:6c:3f:5c:bb:08:2b:f6:77:f7:c5:dd: 6a:6a:be:1e:8f:cb:90:ec:d1:ae:75:5e:0c:25:94:8c:b8:cc: f3:0b:1e:59:0a:7a:04:79:a7:2e:c2:9b:c0:65:31:24:23:b3: 7d:55:b2:7e:d4:b7:dc:45:31:83:c3:6a:81:e6:a0:67:55:79: 1d:48:1f:f4 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MTQw OTEyNTVaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRBMTkyOEEwNjk0M0JG Nzg5N0Y1RjlFNTNBNkFCNEY3NEM2NzM4RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgz77cV45gT7Zd/2KN/iQ1lW3+6grkC5craE3QaqfbY7jMUgfN YP0JwITHhg97iyNr4kI8kJ1rnWRPeGFUAPWAZlujNSgP98GmNPDQgZApRTjGa3VI 8s5zf8J3tYzh0Tmq85if9+10gRAVgUCysKNj5nPj/cLEYZJeDL2cHPpC4h5S7dhF knCpVkxw3zljWePzmjyaDhGEYon4BpQPXNmLn46UM2tfK+xQEXfL4AUcmTmpSZoM +DU1SHjLsVRLiNDMD4tzHbE+Xn/WANsM2y0f6ymgFHfoxzS7Y5GxPQVivfcK908O s2LDUjrevWMQrj/kxaSYn5edIMrMkYmQ8RwRAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUShkooGlDv3iX9fnlOmq090xnONUwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL1Noa29vR2xEdjNpWDlmbmxPbXEwOTB4bk9OVS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnSwwDQYJKoZIhvcNAQELBQADggEB AG0JsrPCg/HDUy8PNYkxoiwBZI4jCaV3LzRJpz9rlulKtwcUxTrdOt8/NX1DiRjr XGrFQ9E6HWjJXKs8Hd9sSMqtWvRC1d4TT3IdHTSxYBvO7KRVSo/PqAj+WH+8xlA1 4Hq+H6d9SZ5r+XqRnmz4RFyq3ufTNJBwgL6LBfT/aMOjwd4JA/dSMQk8eTDa36Ig hIFj97HmHzuzi0FcQmEz+eovV+EXm+SAidOWp9Ruf+oVpfBpbgFaVgwyiPdsP1y7 CCv2d/fF3Wpqvh6Py5Ds0a51XgwllIy4zPMLHlkKegR5py7Cm8BlMSQjs31Vsn7U t9xFMYPDaoHmoGdVeR1IH/Q= -----END CERTIFICATE-----Generated at Fri Aug 21 02:24:15 2026 by rpki-client