$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/kWTB_GZAf0_YsTxBxqy2n0N2b0Y.roa File: kWTB_GZAf0_YsTxBxqy2n0N2b0Y.roa (raw, json) Hash identifier: KhOJso259L8alhRslxI42ygkNqnvJDwCbeMvoJYY4pA= Subject key identifier: 91:64:C1:FC:66:40:7F:4F:D8:B1:3C:41:C6:AC:B6:9F:43:76:6F:46 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: D1 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/kWTB_GZAf0_YsTxBxqy2n0N2b0Y.roa Signing time: Fri 25 Sep 2026 07:24:25 +0000 ROA not before: Fri 25 Sep 2026 07:24:25 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 7529 IP address blocks: 133.157.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Sep 25 07:24:25 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=9164C1FC66407F4FD8B13C41C6ACB69F43766F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:0f:85:a7:34:79:18:7c:18:83:84:82:ad: 26:55:62:fa:13:77:ca:5f:f8:ef:2f:d4:8a:d8:be: 4f:26:74:96:95:e1:a5:11:dd:0d:e0:0c:fc:ff:b5: 3a:41:18:5d:1d:cf:c8:47:ba:4f:b8:47:f7:e0:0c: b6:be:c5:4f:a8:c8:66:b1:7f:d8:d3:d8:89:49:4e: 55:17:85:bc:c4:22:d2:02:7e:d1:bb:81:9d:4e:84: fa:8e:59:60:86:b7:3e:94:73:8f:58:e6:5d:68:cd: 1b:56:3f:73:f5:58:2a:0a:18:32:35:93:de:31:b0: ec:ef:cf:fd:40:b6:c4:39:fa:5b:d7:3b:36:ef:23: 03:3d:1c:ea:ae:eb:5b:6f:fb:3e:44:54:a6:b4:07: 4c:e9:9d:af:f9:43:11:72:f8:9a:55:c8:2b:67:d1: af:8f:cd:49:79:5b:ef:82:70:7a:6e:1d:3a:03:3f: 7e:bc:14:a4:01:53:ef:b2:a4:36:8c:a4:8a:be:40: b7:a3:d3:86:78:1e:ea:ce:61:2d:b0:7b:fc:cd:6d: a9:e0:18:62:84:bb:bf:6a:05:54:7b:84:35:2d:dc: 94:c2:ac:18:86:8b:41:f8:84:bb:06:16:30:5a:40: 5a:e3:22:07:4f:f9:58:9a:62:b3:aa:f8:9a:2c:75: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:64:C1:FC:66:40:7F:4F:D8:B1:3C:41:C6:AC:B6:9F:43:76:6F:46 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/kWTB_GZAf0_YsTxBxqy2n0N2b0Y.roa sbgp-ipAddrBlock: critical IPv4: 133.157.104.0/21 Signature Algorithm: sha256WithRSAEncryption a3:11:c4:fd:bf:0c:1c:9f:6b:13:2a:73:b4:78:ec:39:51:0c: 60:eb:58:04:62:f3:09:e3:e4:fe:c7:53:52:27:9e:ee:3f:f5: 8b:b6:1e:60:0d:ec:47:45:d7:46:4e:db:2e:61:0a:d7:ed:24: 5d:66:44:21:93:65:5a:c8:19:aa:d3:67:20:50:45:38:0c:0b: be:ab:ae:56:cb:8f:ae:ee:f0:51:cf:82:3a:cb:b5:0a:cf:61: 14:c6:ba:db:4f:53:13:3f:84:0f:ce:b8:a7:15:d5:46:85:4c: 24:d8:30:d4:84:fe:d8:84:a5:f1:c4:ca:c9:fa:53:c9:0c:cc: 01:b1:62:8c:d3:3c:e1:29:9a:f5:9c:65:f5:2a:94:18:69:30: ae:7c:77:1a:2a:94:df:3c:bc:06:9a:5a:3c:5a:09:14:4e:b6: cc:a7:55:cd:b5:1c:fa:b1:d8:4a:30:da:88:20:8e:83:3d:ea: 1d:5a:91:43:42:79:dc:cc:75:75:c9:0f:c4:57:8f:b5:88:65: f5:7a:99:84:84:15:9c:ff:a4:99:b9:41:29:16:ce:fd:29:ee: 05:5e:14:a1:25:41:6d:d7:c2:bc:61:b0:bc:38:72:53:82:6e: c5:9d:54:10:db:9d:f2:c3:98:3d:10:ff:c0:81:59:c5:07:3d: 37:1a:2b:9e -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA5MjUw NzI0MjVaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkxNjRDMUZDNjY0MDdG NEZEOEIxM0M0MUM2QUNCNjlGNDM3NjZGNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/FA+FpzR5GHwYg4SCrSZVYvoTd8pf+O8v1IrYvk8mdJaV4aUR 3Q3gDPz/tTpBGF0dz8hHuk+4R/fgDLa+xU+oyGaxf9jT2IlJTlUXhbzEItICftG7 gZ1OhPqOWWCGtz6Uc49Y5l1ozRtWP3P1WCoKGDI1k94xsOzvz/1AtsQ5+lvXOzbv IwM9HOqu61tv+z5EVKa0B0zpna/5QxFy+JpVyCtn0a+PzUl5W++CcHpuHToDP368 FKQBU++ypDaMpIq+QLej04Z4HurOYS2we/zNbangGGKEu79qBVR7hDUt3JTCrBiG i0H4hLsGFjBaQFrjIgdP+ViaYrOq+JosdSk1AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUkWTB/GZAf0/YsTxBxqy2n0N2b0YwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL2tXVEJfR1pBZjBfWXNUeEJ4cXkybjBOMmIwWS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOFnWgwDQYJKoZIhvcNAQELBQADggEB AKMRxP2/DByfaxMqc7R47DlRDGDrWARi8wnj5P7HU1Innu4/9Yu2HmAN7EdF10ZO 2y5hCtftJF1mRCGTZVrIGarTZyBQRTgMC76rrlbLj67u8FHPgjrLtQrPYRTGuttP UxM/hA/OuKcV1UaFTCTYMNSE/tiEpfHEysn6U8kMzAGxYozTPOEpmvWcZfUqlBhp MK58dxoqlN88vAaaWjxaCRROtsynVc21HPqx2Eow2oggjoM96h1akUNCedzMdXXJ D8RXj7WIZfV6mYSEFZz/pJm5QSkWzv0p7gVeFKElQW3XwrxhsLw4clOCbsWdVBDb nfLDmD0Q/8CBWcUHPTcaK54= -----END CERTIFICATE-----Generated at Wed Oct 7 07:50:11 2026 by rpki-client