$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/aghv0gDPLD-MRq1WEsz1rYhvBow.roa File: aghv0gDPLD-MRq1WEsz1rYhvBow.roa (raw, json) Hash identifier: bQTpGMCHC+mHY/KT5G4KjYTMlMoyHMv+Rm8eWPhLBdk= Subject key identifier: 6A:08:6F:D2:00:CF:2C:3F:8C:46:AD:56:12:CC:F5:AD:88:6F:06:8C Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: D4 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/aghv0gDPLD-MRq1WEsz1rYhvBow.roa Signing time: Fri 25 Sep 2026 07:24:30 +0000 ROA not before: Fri 25 Sep 2026 07:24:30 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 2497 IP address blocks: 133.157.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 05:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Sep 25 07:24:30 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=6A086FD200CF2C3F8C46AD5612CCF5AD886F068C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b9:d5:55:e8:5a:c8:23:a7:ca:85:ca:35:15: 65:76:20:bb:72:33:8a:42:ae:ef:ef:64:4b:00:2d: 95:c1:b5:60:bb:48:a3:83:d9:7e:92:f9:20:37:c5: 49:21:73:5a:fc:77:d2:32:54:3d:2b:de:ca:75:ae: 1b:13:a3:8e:63:ca:6d:00:9d:65:a2:fc:42:9d:21: 53:59:18:75:2d:e0:e2:b3:34:cc:e7:83:d0:eb:b3: c2:15:93:03:90:b3:e5:fc:e6:3b:2d:71:05:5b:dc: 47:b2:da:72:07:2d:6c:6e:0e:69:61:4f:86:87:7e: 51:aa:2e:20:52:66:24:97:07:83:28:08:b7:a4:8c: 4e:60:f2:0c:27:ad:c0:ff:c9:82:f3:18:74:b3:75: 4e:4b:45:c3:89:e0:e2:f8:48:ce:12:3c:00:ec:0b: a2:b8:63:89:d1:05:5a:8b:f7:9d:8a:79:f9:06:46: ce:e9:90:98:e2:6c:f4:ed:06:45:dc:54:ac:54:3a: 8b:f3:15:70:2c:1c:73:2d:f4:bd:4a:da:95:d1:e8: 24:a7:52:22:b2:f6:d1:bc:77:e6:53:c1:77:63:e6: 4e:a3:9e:bb:05:3f:9b:fb:23:fa:86:51:d9:99:41: 59:96:62:16:d7:29:5c:07:31:9e:28:08:04:32:0e: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:08:6F:D2:00:CF:2C:3F:8C:46:AD:56:12:CC:F5:AD:88:6F:06:8C X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/aghv0gDPLD-MRq1WEsz1rYhvBow.roa sbgp-ipAddrBlock: critical IPv4: 133.157.112.0/21 Signature Algorithm: sha256WithRSAEncryption 7a:8a:0a:c2:32:0d:39:38:e3:cc:a8:53:56:24:ae:f4:21:b2: 25:f9:c4:35:53:65:0d:33:cd:ba:5e:35:fa:68:01:89:66:47: 08:0e:1c:bd:4a:5b:09:a8:44:13:5b:46:b9:1e:17:b0:ee:dc: b0:21:1e:35:a0:df:6b:7f:53:97:a5:9a:f9:c9:89:ca:5d:4c: ce:2e:c6:08:f4:59:7d:31:ef:71:ec:26:04:3e:5b:68:77:2f: 23:c1:36:35:89:d3:3d:da:a3:64:6a:63:01:bb:ef:a8:81:f2: d2:0c:b7:36:77:ef:76:9a:cf:83:f6:3c:3f:da:5f:65:20:55: ad:c9:39:4e:ea:eb:fd:89:85:2b:4c:1b:53:d4:8b:16:33:b1: 2e:eb:51:70:e4:b5:a4:87:e9:d9:de:5a:42:42:c0:d4:b3:dd: 81:0c:49:ad:c8:6d:f9:af:3a:89:fc:86:8a:c8:7c:2a:55:e0: a4:5d:79:6d:49:a6:de:0f:3d:50:79:1c:c0:c7:06:e3:f0:d9: 6a:d6:3c:98:c1:de:0c:6f:45:57:ab:7d:f8:03:79:f5:6d:74: a8:f4:b9:20:c9:ea:3d:34:75:d6:8b:29:dc:92:81:f9:eb:43: 20:0b:ef:1c:7f:9f:21:27:bf:01:65:df:f3:7c:00:4b:1a:57: 74:2a:4c:05 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA5MjUw NzI0MzBaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZBMDg2RkQyMDBDRjJD M0Y4QzQ2QUQ1NjEyQ0NGNUFEODg2RjA2OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4udVV6FrII6fKhco1FWV2ILtyM4pCru/vZEsALZXBtWC7SKOD 2X6S+SA3xUkhc1r8d9IyVD0r3sp1rhsTo45jym0AnWWi/EKdIVNZGHUt4OKzNMzn g9Drs8IVkwOQs+X85jstcQVb3Eey2nIHLWxuDmlhT4aHflGqLiBSZiSXB4MoCLek jE5g8gwnrcD/yYLzGHSzdU5LRcOJ4OL4SM4SPADsC6K4Y4nRBVqL952KefkGRs7p kJjibPTtBkXcVKxUOovzFXAsHHMt9L1K2pXR6CSnUiKy9tG8d+ZTwXdj5k6jnrsF P5v7I/qGUdmZQVmWYhbXKVwHMZ4oCAQyDupnAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUaghv0gDPLD+MRq1WEsz1rYhvBowwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL2FnaHYwZ0RQTEQtTVJxMVdFc3oxcllodkJvdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOFnXAwDQYJKoZIhvcNAQELBQADggEB AHqKCsIyDTk448yoU1YkrvQhsiX5xDVTZQ0zzbpeNfpoAYlmRwgOHL1KWwmoRBNb RrkeF7Du3LAhHjWg32t/U5elmvnJicpdTM4uxgj0WX0x73HsJgQ+W2h3LyPBNjWJ 0z3ao2RqYwG776iB8tIMtzZ373aaz4P2PD/aX2UgVa3JOU7q6/2JhStMG1PUixYz sS7rUXDktaSH6dneWkJCwNSz3YEMSa3IbfmvOon8horIfCpV4KRdeW1Jpt4PPVB5 HMDHBuPw2WrWPJjB3gxvRVerffgDefVtdKj0uSDJ6j00ddaLKdySgfnrQyAL7xx/ nyEnvwFl3/N8AEsaV3QqTAU= -----END CERTIFICATE-----Generated at Tue Oct 6 13:10:11 2026 by rpki-client