$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/hepOJKcc00F51-nhWC801I7N1Og.roa File: hepOJKcc00F51-nhWC801I7N1Og.roa (raw, json) Hash identifier: Z/JnFd5JByaVUxTNbXf5OeYLktoBILYuOjf1yA0Vl5Y= Subject key identifier: 85:EA:4E:24:A7:1C:D3:41:79:D7:E9:E1:58:2F:34:D4:8E:CD:D4:E8 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: 74 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/hepOJKcc00F51-nhWC801I7N1Og.roa Signing time: Fri 14 Aug 2026 08:45:00 +0000 ROA not before: Fri 14 Aug 2026 08:45:00 +0000 ROA not after: Thu 15 Jul 2027 01:30:02 +0000 asID: 7529 IP address blocks: 133.157.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Aug 14 08:45:00 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=85EA4E24A71CD34179D7E9E1582F34D48ECDD4E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4f:01:1f:31:5d:c0:28:b8:c4:2f:eb:30:1a: f5:c5:36:0f:88:d7:db:35:14:db:2e:6b:00:da:be: 31:14:d7:98:a6:d1:18:d5:76:46:cb:98:f3:9e:ea: ec:bf:29:98:4a:eb:d5:9d:77:8e:de:d4:70:b6:46: 3d:27:94:22:21:aa:ec:ef:0f:a1:13:6b:e5:8a:a4: ec:f1:2d:c4:f5:93:17:33:45:19:2d:94:65:31:55: d2:7a:65:ae:e4:43:52:a6:51:38:a1:b0:bc:d2:28: 9f:be:f0:c9:53:37:e2:65:8f:50:31:4e:6b:b4:e1: 6a:79:13:f2:56:a2:1b:af:38:b3:ba:06:d2:a7:3f: e3:d4:e2:43:da:f3:7c:94:2f:ea:b8:f9:5f:bb:3b: 48:63:a8:c2:df:f2:28:aa:70:5a:95:e9:54:bf:df: 49:99:2e:f6:82:19:a2:5e:30:76:91:8b:04:9d:29: 04:b5:90:cd:4e:12:e7:ff:54:63:7b:37:30:65:38: aa:4f:4d:32:52:03:07:e9:9e:b5:09:2d:0d:2a:30: 64:b9:f6:99:98:56:a2:d5:e7:e8:a0:85:2d:54:e4: dc:b5:f8:3c:49:6b:4d:f3:6c:2b:08:59:6c:c9:01: c1:11:bf:81:1e:d3:c7:53:6f:63:d4:cc:b2:a9:4b: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EA:4E:24:A7:1C:D3:41:79:D7:E9:E1:58:2F:34:D4:8E:CD:D4:E8 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/hepOJKcc00F51-nhWC801I7N1Og.roa sbgp-ipAddrBlock: critical IPv4: 133.157.35.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:62:32:38:f8:4a:d8:86:2f:e6:2a:3f:6f:7b:0c:67:af:35: 9e:b9:f9:ee:8c:a5:b0:e3:01:d8:01:e4:aa:a1:ed:5a:e2:b8: 95:b3:b6:48:fb:a4:24:c0:dd:18:20:10:a6:0b:7a:a8:f9:7b: bd:e5:0b:ec:69:d7:83:30:1e:38:69:25:1d:74:5d:37:3a:14: b2:8b:06:c8:32:bd:77:c3:8d:e7:00:d5:23:f7:bb:b2:46:df: d0:0a:e9:4a:5d:5f:48:cb:37:2b:88:e6:63:ca:cf:4c:5e:46: b6:7e:17:ff:2e:5f:c4:a2:55:30:0b:1d:23:c3:98:d2:15:0c: b6:69:1f:97:bc:1d:1e:ac:25:36:21:56:33:e9:4e:53:6c:d0: 00:90:de:d4:75:85:2f:44:14:de:b0:41:c0:f5:b8:12:6e:b2: af:02:6b:3c:6e:1f:4a:72:53:a5:92:4a:a8:b0:9c:3a:71:68: 99:c3:d9:c5:0d:c4:53:0d:1a:b1:3a:39:90:7f:11:07:4c:26: 68:70:f5:25:2d:c4:79:24:f8:18:8f:05:b0:d8:7c:42:a1:29: f2:cc:a6:1f:86:ec:e4:09:6b:4f:0a:04:4c:8e:b0:23:b6:15: d3:d4:75:53:1b:7b:f9:fa:09:7a:9a:8d:4a:60:b7:2d:35:b5: 0a:75:1d:58 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDgxNDA4 NDUwMFoXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoODVFQTRFMjRBNzFDRDM0 MTc5RDdFOUUxNTgyRjM0RDQ4RUNERDRFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPNPAR8xXcAouMQv6zAa9cU2D4jX2zUU2y5rANq+MRTXmKbRGNV2 RsuY857q7L8pmErr1Z13jt7UcLZGPSeUIiGq7O8PoRNr5Yqk7PEtxPWTFzNFGS2U ZTFV0nplruRDUqZROKGwvNIon77wyVM34mWPUDFOa7ThankT8laiG684s7oG0qc/ 49TiQ9rzfJQv6rj5X7s7SGOowt/yKKpwWpXpVL/fSZku9oIZol4wdpGLBJ0pBLWQ zU4S5/9UY3s3MGU4qk9NMlIDB+metQktDSowZLn2mZhWotXn6KCFLVTk3LX4PElr TfNsKwhZbMkBwRG/gR7Tx1NvY9TMsqlLC8cCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSF6k4kpxzTQXnX6eFYLzTUjs3U6DAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10 TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8xOTEvaGVwT0pLY2MwMEY1MS1uaFdDODAxSTdOMU9nLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIWdIzANBgkqhkiG9w0BAQsFAAOCAQEA jWIyOPhK2IYv5io/b3sMZ681nrn57oylsOMB2AHkqqHtWuK4lbO2SPukJMDdGCAQ pgt6qPl7veUL7GnXgzAeOGklHXRdNzoUsosGyDK9d8ON5wDVI/e7skbf0ArpSl1f SMs3K4jmY8rPTF5Gtn4X/y5fxKJVMAsdI8OY0hUMtmkfl7wdHqwlNiFWM+lOU2zQ AJDe1HWFL0QU3rBBwPW4Em6yrwJrPG4fSnJTpZJKqLCcOnFomcPZxQ3EUw0asTo5 kH8RB0wmaHD1JS3EeST4GI8FsNh8QqEp8symH4bs5AlrTwoETI6wI7YV09R1Uxt7 +foJepqNSmC3LTW1CnUdWA== -----END CERTIFICATE-----Generated at Sat Aug 22 00:44:01 2026 by rpki-client