$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/lb0fHcLkat8Wi7QWtLnpM7tjJ0M.roa File: lb0fHcLkat8Wi7QWtLnpM7tjJ0M.roa (raw, json) Hash identifier: 6BYzCmMsQdfdpQ4vEercJM608+2KEMtYpqf9lor4zhc= Subject key identifier: 95:BD:1F:1D:C2:E4:6A:DF:16:8B:B4:16:B4:B9:E9:33:BB:63:27:43 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: A2 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/lb0fHcLkat8Wi7QWtLnpM7tjJ0M.roa Signing time: Fri 14 Aug 2026 09:31:03 +0000 ROA not before: Fri 14 Aug 2026 09:31:03 +0000 ROA not after: Thu 15 Jul 2027 01:30:02 +0000 asID: 7529 IP address blocks: 133.157.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Aug 14 09:31:03 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=95BD1F1DC2E46ADF168BB416B4B9E933BB632743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:81:4b:e9:12:3a:83:c4:e6:19:c6:6b:87:3f: 7a:cb:1f:fc:72:0a:4b:8e:7f:29:2c:5a:14:e8:a2: 3e:37:ad:41:55:e6:c6:47:00:73:ce:55:d1:56:02: 6d:69:98:a6:2b:d7:dc:da:59:3e:b3:42:c7:0c:71: d3:14:f0:76:02:9e:37:fe:56:32:ac:ad:cc:20:1e: 48:bb:3c:94:f4:07:86:65:c4:f9:aa:5a:51:64:f7: cb:f0:08:98:d3:24:fb:73:b3:d6:64:10:97:d5:a6: 30:e4:e1:b3:77:94:78:ea:73:77:21:dc:d5:4b:6d: 7f:b4:6e:75:30:fe:f5:7e:f1:bb:e0:ae:10:bb:8e: 20:20:ea:6b:90:82:91:9a:37:a5:be:c1:a0:93:98: 4b:95:0b:91:da:93:31:b6:38:6e:90:27:0b:e8:db: c4:7b:04:bf:80:c1:7a:91:b6:0d:1c:bf:1b:c6:f7: 15:13:5f:12:45:87:91:f3:ce:38:2b:05:f0:a4:ed: a3:a0:ad:6d:d1:57:d2:a7:a2:6e:d9:fa:72:76:e3: a9:53:b3:e8:e3:d0:7f:91:1a:b3:b9:38:59:ab:4d: fd:e7:7d:06:59:9e:c8:45:8b:35:b8:e6:e0:79:cd: d4:c3:12:ec:d5:f6:69:b0:b8:d7:88:1f:47:66:8a: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BD:1F:1D:C2:E4:6A:DF:16:8B:B4:16:B4:B9:E9:33:BB:63:27:43 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/lb0fHcLkat8Wi7QWtLnpM7tjJ0M.roa sbgp-ipAddrBlock: critical IPv4: 133.157.58.0/24 Signature Algorithm: sha256WithRSAEncryption 66:b8:80:25:d3:e9:99:d8:e2:e4:4e:41:ca:f2:b5:8d:cb:a2: a6:3a:4e:d4:6c:fa:f8:38:2e:42:74:0d:a7:4f:54:63:7f:e5: bc:f7:3b:d5:9a:1b:2b:b2:51:71:6b:71:54:98:bd:71:bb:5f: 5b:ae:42:7a:5e:50:7f:00:b7:22:62:12:0c:f3:2b:62:d2:80: fa:bf:96:0d:54:ff:14:54:ec:58:0a:d4:1f:8d:49:ef:43:9b: ea:ba:18:ae:6a:36:ee:0c:4d:45:56:d3:85:bb:c7:9e:96:9c: ca:16:07:71:dd:cd:24:b7:2b:e1:0c:a8:df:92:5c:39:90:eb: f6:c1:c1:ae:c4:8f:b6:52:62:32:54:ec:a7:8b:3f:17:f6:e8: 71:1e:8c:5b:b6:3a:a4:1d:28:0d:21:f6:5b:df:6b:12:6d:0b: d8:68:35:51:d9:b9:0e:52:31:d3:6c:53:01:bb:a9:f0:ae:07: e6:9d:f3:a6:ea:25:36:f0:e5:38:64:2a:d8:27:be:70:e8:92: 51:db:2c:a4:ac:ba:03:c2:ce:f8:62:c3:17:35:c2:59:5a:3d: e1:04:2d:77:f8:5a:59:27:3a:92:7d:36:41:9b:1a:35:18:09: a4:78:0f:22:a4:ab:02:9f:f4:88:70:e4:6b:2a:65:c9:17:d6: 88:b0:1a:7f -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA4MTQw OTMxMDNaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1QkQxRjFEQzJFNDZB REYxNjhCQjQxNkI0QjlFOTMzQkI2MzI3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIgUvpEjqDxOYZxmuHP3rLH/xyCkuOfyksWhTooj43rUFV5sZH AHPOVdFWAm1pmKYr19zaWT6zQscMcdMU8HYCnjf+VjKsrcwgHki7PJT0B4ZlxPmq WlFk98vwCJjTJPtzs9ZkEJfVpjDk4bN3lHjqc3ch3NVLbX+0bnUw/vV+8bvgrhC7 jiAg6muQgpGaN6W+waCTmEuVC5HakzG2OG6QJwvo28R7BL+AwXqRtg0cvxvG9xUT XxJFh5HzzjgrBfCk7aOgrW3RV9Knom7Z+nJ246lTs+jj0H+RGrO5OFmrTf3nfQZZ nshFizW45uB5zdTDEuzV9mmwuNeIH0dminu7AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUlb0fHcLkat8Wi7QWtLnpM7tjJ0MwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL2xiMGZIY0xrYXQ4V2k3UVd0TG5wTTd0akowTS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnTowDQYJKoZIhvcNAQELBQADggEB AGa4gCXT6ZnY4uROQcrytY3LoqY6TtRs+vg4LkJ0DadPVGN/5bz3O9WaGyuyUXFr cVSYvXG7X1uuQnpeUH8AtyJiEgzzK2LSgPq/lg1U/xRU7FgK1B+NSe9Dm+q6GK5q Nu4MTUVW04W7x56WnMoWB3HdzSS3K+EMqN+SXDmQ6/bBwa7Ej7ZSYjJU7KeLPxf2 6HEejFu2OqQdKA0h9lvfaxJtC9hoNVHZuQ5SMdNsUwG7qfCuB+ad86bqJTbw5Thk KtgnvnDoklHbLKSsugPCzvhiwxc1wllaPeEELXf4WlknOpJ9NkGbGjUYCaR4DyKk qwKf9Ihw5GsqZckX1oiwGn8= -----END CERTIFICATE-----Generated at Fri Aug 21 23:55:28 2026 by rpki-client