$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20103/hmx7WST4COlRmr9Ta_nJAqVkw7o.roa File: hmx7WST4COlRmr9Ta_nJAqVkw7o.roa (raw, json) Hash identifier: 1EFrdj5F/w7sSlBJ9DP9s23VpYntSj5dz9q6lVvyAEU= Subject key identifier: 86:6C:7B:59:24:F8:08:E9:51:9A:BF:53:6B:F9:C9:02:A5:64:C3:BA Certificate issuer: /CN=F3539D093BB490922E37595417A7C5B0E3FB0D84 Certificate serial: 03 Authority key identifier: F3:53:9D:09:3B:B4:90:92:2E:37:59:54:17:A7:C5:B0:E3:FB:0D:84 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/81OdCTu0kJIuN1lUF6fFsOP7DYQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20103/hmx7WST4COlRmr9Ta_nJAqVkw7o.roa Signing time: Wed 05 Aug 2026 04:33:12 +0000 ROA not before: Wed 05 Aug 2026 04:33:12 +0000 ROA not after: Thu 05 Aug 2027 01:19:45 +0000 asID: 131957 IP address blocks: 202.233.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20103/81OdCTu0kJIuN1lUF6fFsOP7DYQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20103/81OdCTu0kJIuN1lUF6fFsOP7DYQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/81OdCTu0kJIuN1lUF6fFsOP7DYQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3539D093BB490922E37595417A7C5B0E3FB0D84 Validity Not Before: Aug 5 04:33:12 2026 GMT Not After : Aug 5 01:19:45 2027 GMT Subject: CN=866C7B5924F808E9519ABF536BF9C902A564C3BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:98:da:38:be:ad:24:90:ca:44:a2:5e:3f: 88:46:f1:db:fd:55:89:78:5a:88:90:b9:f9:a8:44: b5:80:c6:61:04:97:a3:e7:c6:8f:f1:a6:a1:48:e0: f3:ef:a9:7e:e2:8f:45:42:ea:52:b7:db:35:91:c9: dc:50:c5:15:22:e9:eb:49:c8:6f:b5:f8:f1:94:75: 3b:91:83:93:b3:44:1f:99:ad:4b:4a:02:39:4b:a4: 6b:cd:7a:7f:08:c8:05:44:e7:41:c0:d6:74:03:4b: a3:ca:31:a4:57:c1:3b:10:a4:2a:9d:3b:ac:c4:b5: 23:e9:59:84:50:28:08:5a:2c:1f:44:f7:c2:32:cf: b7:14:66:cf:a3:13:77:31:93:0f:ed:fb:42:38:cd: cd:0f:85:04:f5:7b:c0:64:08:77:69:97:66:68:2f: ae:46:2f:d5:43:a5:17:4c:d3:9b:1d:c0:a9:f1:88: f7:1b:ea:74:a7:5a:26:25:15:0b:16:58:92:ed:d3: 90:83:fd:8b:2f:37:c7:12:ce:bb:02:88:13:31:ee: 26:94:db:f7:b1:32:71:b3:5f:12:96:a0:f7:ca:e8: 04:1f:5c:80:b9:e0:24:ab:04:ec:73:aa:3f:ca:34: c1:28:62:d0:34:9e:61:28:bd:4a:1d:0a:d3:35:e4: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6C:7B:59:24:F8:08:E9:51:9A:BF:53:6B:F9:C9:02:A5:64:C3:BA X509v3 Authority Key Identifier: keyid:F3:53:9D:09:3B:B4:90:92:2E:37:59:54:17:A7:C5:B0:E3:FB:0D:84 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20103/81OdCTu0kJIuN1lUF6fFsOP7DYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/81OdCTu0kJIuN1lUF6fFsOP7DYQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20103/hmx7WST4COlRmr9Ta_nJAqVkw7o.roa sbgp-ipAddrBlock: critical IPv4: 202.233.84.0/22 Signature Algorithm: sha256WithRSAEncryption 24:a9:ba:cc:83:f0:a5:94:96:85:4c:c1:7e:72:0f:52:2c:df: e2:a3:63:b5:41:57:e4:88:ae:e3:56:60:e1:c7:cc:73:ca:d9: 3b:a7:9a:66:0b:33:cc:b7:08:ee:fd:be:be:08:81:cb:ce:f2: 69:02:08:f9:44:62:50:f9:e3:d2:9b:23:00:ac:e5:76:a7:1a: c0:d8:84:3d:93:63:7d:e3:b2:db:4b:0a:22:07:59:7e:0c:bd: ea:b1:aa:b2:fc:2c:f1:70:29:6a:0b:08:be:4a:7b:ce:e3:26: 21:d0:3f:9c:3c:45:31:33:75:72:a6:c2:0a:7d:e5:6a:e0:c7: 5c:bd:d8:db:d4:5b:9c:dd:c0:82:45:a3:c6:bd:14:2b:a9:f5: 04:71:4d:6b:e5:fa:54:86:f2:26:40:e8:bd:92:9d:fc:20:f4: 07:d0:17:00:85:61:00:05:44:c2:c0:3d:c5:ed:aa:72:c3:1c: 9f:b4:fd:b8:5e:54:cf:de:cd:35:74:98:1e:72:01:f2:84:ce: 5a:c5:4d:87:6d:0b:2c:ff:d6:1f:8d:26:3c:a4:e0:bb:dd:77: 01:c5:9d:40:9c:69:5c:46:d1:06:5c:f5:78:e4:08:a6:11:17: f2:be:ba:03:4b:29:1b:8f:a4:b5:33:d6:b3:62:59:a1:56:45: fe:c5:89:4e -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMzUz OUQwOTNCQjQ5MDkyMkUzNzU5NTQxN0E3QzVCMEUzRkIwRDg0MB4XDTI2MDgwNTA0 MzMxMloXDTI3MDgwNTAxMTk0NVowMzExMC8GA1UEAxMoODY2QzdCNTkyNEY4MDhF OTUxOUFCRjUzNkJGOUM5MDJBNTY0QzNCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMNWmNo4vq0kkMpEol4/iEbx2/1ViXhaiJC5+ahEtYDGYQSXo+fG j/GmoUjg8++pfuKPRULqUrfbNZHJ3FDFFSLp60nIb7X48ZR1O5GDk7NEH5mtS0oC OUuka816fwjIBUTnQcDWdANLo8oxpFfBOxCkKp07rMS1I+lZhFAoCFosH0T3wjLP txRmz6MTdzGTD+37QjjNzQ+FBPV7wGQId2mXZmgvrkYv1UOlF0zTmx3AqfGI9xvq dKdaJiUVCxZYku3TkIP9iy83xxLOuwKIEzHuJpTb97EycbNfEpag98roBB9cgLng JKsE7HOqP8o0wShi0DSeYSi9Sh0K0zXkO60CAwEAAaOCAd0wggHZMB0GA1UdDgQW BBSGbHtZJPgI6VGav1Nr+ckCpWTDujAfBgNVHSMEGDAWgBTzU50JO7SQki43WVQX p8Ww4/sNhDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMDMvODFPZENUdTBrSkl1TjFsVUY2ZkZzT1A3RFlRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvODFPZENUdTBrSkl1TjFsVUY2ZkZz T1A3RFlRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMTAzL2hteDdXU1Q0Q09sUm1yOVRhX25KQXFWa3c3by5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALK6VQwDQYJKoZIhvcNAQELBQAD ggEBACSpusyD8KWUloVMwX5yD1Is3+KjY7VBV+SIruNWYOHHzHPK2TunmmYLM8y3 CO79vr4IgcvO8mkCCPlEYlD549KbIwCs5XanGsDYhD2TY33jsttLCiIHWX4Mveqx qrL8LPFwKWoLCL5Ke87jJiHQP5w8RTEzdXKmwgp95Wrgx1y92NvUW5zdwIJFo8a9 FCup9QRxTWvl+lSG8iZA6L2Snfwg9AfQFwCFYQAFRMLAPcXtqnLDHJ+0/bheVM/e zTV0mB5yAfKEzlrFTYdtCyz/1h+NJjyk4LvddwHFnUCcaVxG0QZc9XjkCKYRF/K+ ugNLKRuPpLUz1rNiWaFWRf7FiU4= -----END CERTIFICATE-----Generated at Sat Aug 22 02:11:41 2026 by rpki-client