$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/jQr8tddPme5UZR4ccMGRopLr1fM.roa File: jQr8tddPme5UZR4ccMGRopLr1fM.roa (raw, json) Hash identifier: /tndXsBc52QyaVVvex+28IdZNR5K1rkVRrN4ty9YS34= Subject key identifier: 8D:0A:FC:B5:D7:4F:99:EE:54:65:1E:1C:70:C1:91:A2:92:EB:D5:F3 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: B5 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/jQr8tddPme5UZR4ccMGRopLr1fM.roa Signing time: Thu 20 Aug 2026 12:49:33 +0000 ROA not before: Thu 20 Aug 2026 12:49:33 +0000 ROA not after: Sun 15 Aug 2027 01:30:02 +0000 asID: 2497 IP address blocks: 133.157.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Aug 20 12:49:33 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=8D0AFCB5D74F99EE54651E1C70C191A292EBD5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:4d:bd:97:4c:8f:9a:2e:24:f3:fd:19:2c: f3:4f:b0:e2:b8:4b:80:21:f5:fe:d6:33:a1:3d:94: 8e:b7:5a:71:73:79:23:00:4e:aa:e2:cf:fb:6c:29: 98:ad:c2:f9:fb:87:49:3b:f6:37:2f:4c:15:2d:9f: 71:69:13:3e:59:2e:46:8e:b5:fa:c2:70:d0:a6:f1: 98:e7:ac:54:89:28:bd:c9:0d:8c:c1:06:94:10:4a: 16:4b:43:1f:c3:fa:52:bb:e9:2d:fa:12:61:c5:ed: 4c:d7:15:c4:64:d5:cf:85:f0:57:e4:40:3f:18:3d: 6f:0a:bd:8e:d6:40:6d:e6:a6:77:44:01:97:cc:4c: ae:0c:5e:bf:7a:a7:9d:43:66:ff:6d:60:bd:d7:42: 37:33:f3:6e:48:e4:f6:97:5b:69:25:4c:b4:73:40: a1:9c:2b:d0:56:0e:54:e8:19:e3:67:cd:c1:ce:b2: a4:44:59:bc:5a:85:e2:c8:06:c1:2f:64:8a:59:bf: 35:75:8d:22:98:51:b7:2e:ce:d9:42:80:f1:f7:3d: 9b:2d:4f:49:40:f4:df:62:55:fe:38:a1:2c:fd:f1: 9c:d1:d3:ae:f9:0d:4a:4b:54:91:e7:8e:cb:de:49: 8e:2b:51:51:f3:e4:2a:e9:d4:1c:fd:3a:0e:69:ab: 34:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0A:FC:B5:D7:4F:99:EE:54:65:1E:1C:70:C1:91:A2:92:EB:D5:F3 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/jQr8tddPme5UZR4ccMGRopLr1fM.roa sbgp-ipAddrBlock: critical IPv4: 133.157.72.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:8c:4e:e3:85:a7:3c:a7:ec:ae:6b:fb:6d:70:f4:ea:25:31: e7:ca:12:ed:c8:59:3f:2e:6d:73:5f:d9:bb:94:11:2b:9b:b9: 5e:69:0e:dd:2c:72:e8:5d:a1:db:38:86:3b:f6:38:84:5d:e6: 48:ad:ff:18:08:e1:bd:38:f5:d5:17:f0:db:19:67:3e:42:25: ca:94:e6:b0:57:73:71:53:f7:45:77:22:0f:99:d5:19:02:23: 5e:b4:3f:bc:d3:be:4b:17:e9:f5:98:f9:16:4d:d4:d9:57:bb: 93:34:f6:e0:7c:15:17:1e:c5:86:da:84:66:6b:7d:02:c5:6a: 4f:82:19:6c:34:d2:e6:a3:1b:a0:ae:ca:b2:a5:ae:d9:fb:81: 83:8b:6a:ae:6c:42:7a:37:30:72:0f:6d:71:f1:24:a3:56:57: 4e:f2:2d:40:33:a1:0c:c8:74:26:16:65:12:06:19:0c:a0:4e: d2:16:86:6c:45:ba:23:b7:d7:40:1d:58:94:8c:ca:43:53:2e: b5:87:2e:83:3a:0e:10:2b:7a:7b:0d:de:76:49:c9:b1:e3:92: d8:c6:9d:4d:9d:ca:f2:42:50:e5:e0:16:f3:6e:cb:95:c9:12: 7e:a6:b9:c5:69:59:2e:15:e8:f8:0e:7d:c8:21:94:94:11:82: fc:53:24:ff -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MjAx MjQ5MzNaFw0yNzA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhEMEFGQ0I1RDc0Rjk5 RUU1NDY1MUUxQzcwQzE5MUEyOTJFQkQ1RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgKU29l0yPmi4k8/0ZLPNPsOK4S4Ah9f7WM6E9lI63WnFzeSMA Tqriz/tsKZitwvn7h0k79jcvTBUtn3FpEz5ZLkaOtfrCcNCm8ZjnrFSJKL3JDYzB BpQQShZLQx/D+lK76S36EmHF7UzXFcRk1c+F8FfkQD8YPW8KvY7WQG3mpndEAZfM TK4MXr96p51DZv9tYL3XQjcz825I5PaXW2klTLRzQKGcK9BWDlToGeNnzcHOsqRE WbxaheLIBsEvZIpZvzV1jSKYUbcuztlCgPH3PZstT0lA9N9iVf44oSz98ZzR0675 DUpLVJHnjsveSY4rUVHz5Crp1Bz9Og5pqzS7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUjQr8tddPme5UZR4ccMGRopLr1fMwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL2pRcjh0ZGRQbWU1VVpSNGNjTUdSb3BMcjFmTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOFnUgwDQYJKoZIhvcNAQELBQADggEB ABuMTuOFpzyn7K5r+21w9OolMefKEu3IWT8ubXNf2buUESubuV5pDt0scuhdods4 hjv2OIRd5kit/xgI4b049dUX8NsZZz5CJcqU5rBXc3FT90V3Ig+Z1RkCI160P7zT vksX6fWY+RZN1NlXu5M09uB8FRcexYbahGZrfQLFak+CGWw00uajG6CuyrKlrtn7 gYOLaq5sQno3MHIPbXHxJKNWV07yLUAzoQzIdCYWZRIGGQygTtIWhmxFuiO310Ad WJSMykNTLrWHLoM6DhArensN3nZJybHjktjGnU2dyvJCUOXgFvNuy5XJEn6mucVp WS4V6PgOfcghlJQRgvxTJP8= -----END CERTIFICATE-----Generated at Fri Aug 21 03:05:56 2026 by rpki-client