$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/Rg6OS8SKhSKiuk-vpDKWVmvwNNU.roa File: Rg6OS8SKhSKiuk-vpDKWVmvwNNU.roa (raw, json) Hash identifier: 87Ynlt0HkU3fzjgTHiLcdk/PKUIwAUpVhmGbDolTwoQ= Subject key identifier: 46:0E:8E:4B:C4:8A:85:22:A2:BA:4F:AF:A4:32:96:56:6B:F0:34:D5 Certificate issuer: /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C Certificate serial: 16 Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/Rg6OS8SKhSKiuk-vpDKWVmvwNNU.roa Signing time: Mon 03 Aug 2026 06:34:47 +0000 ROA not before: Mon 03 Aug 2026 06:34:47 +0000 ROA not after: Tue 03 Aug 2027 00:26:42 +0000 asID: 131965 IP address blocks: 222.228.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C Validity Not Before: Aug 3 06:34:47 2026 GMT Not After : Aug 3 00:26:42 2027 GMT Subject: CN=460E8E4BC48A8522A2BA4FAFA43296566BF034D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:ef:af:45:12:e6:3b:dd:2f:79:c1:a8:87: 99:07:13:3c:d3:c6:7b:bf:d6:09:ad:80:40:3f:81: 2d:6d:11:36:4f:f5:8d:66:42:5c:86:d0:54:50:a8: 8e:a1:23:f1:4e:36:91:fd:1b:7d:51:90:18:3a:65: de:18:c4:34:3e:11:95:7c:86:d7:97:fb:cb:da:5e: cd:46:cf:34:91:5c:4e:2c:5b:b2:92:44:3c:86:3e: cb:90:2f:10:fa:dc:e6:af:86:a1:dc:da:1d:a6:ab: 98:b2:e4:f8:38:1d:49:fd:ce:b6:46:3c:b6:8c:f9: 0f:d0:ef:db:aa:0c:01:30:ac:1e:2f:20:8c:0f:e4: f1:aa:7d:7d:6c:93:1a:4d:c9:ca:43:f6:cc:2d:e7: c8:34:3a:9a:9f:cf:6f:8a:88:df:bb:90:82:f7:71: ff:83:92:ca:c0:d6:37:c7:83:d1:84:0b:25:4d:a6: ca:d4:d4:eb:19:35:5e:f7:51:41:87:84:1e:67:a8: 30:e3:47:4a:02:3d:c6:9e:fd:1a:49:3b:5e:23:99: 54:fb:a5:f9:6e:8d:1e:b0:f8:ed:06:0c:e7:a3:b7: 5a:75:4a:65:48:09:df:fd:ea:07:6d:f8:50:7d:03: 5b:0e:d4:46:55:77:a3:00:2d:94:f1:62:c5:5f:ba: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0E:8E:4B:C4:8A:85:22:A2:BA:4F:AF:A4:32:96:56:6B:F0:34:D5 X509v3 Authority Key Identifier: keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/Rg6OS8SKhSKiuk-vpDKWVmvwNNU.roa sbgp-ipAddrBlock: critical IPv4: 222.228.64.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:48:57:fc:8c:b5:06:a0:c9:f3:54:ce:7f:d1:08:a0:3b:4a: f5:d1:10:be:ee:58:e7:16:25:55:a2:58:c1:f6:e4:0e:b7:b7: 53:18:2d:4f:b5:3f:d4:ff:74:16:f9:95:f8:02:4b:cc:b9:c2: 74:fa:67:de:b8:df:e4:28:ee:a1:eb:59:a1:36:c6:5d:7b:a2: c0:c2:b5:42:52:88:54:4b:6d:8b:04:44:f6:6c:6d:f0:96:c2: c8:b9:82:f4:bc:d6:33:e1:51:65:17:df:bb:fc:0f:93:f2:15: 5b:4b:b4:6e:ef:b5:11:ad:8d:7d:48:f0:23:a7:4f:fd:07:35: 79:df:2e:8e:62:ca:eb:13:c5:16:6c:25:52:60:1a:e0:87:0f: 51:d9:61:6e:07:7f:8d:2b:43:af:ca:fb:ad:4f:41:81:b3:bf: b8:68:13:51:76:87:e3:bf:50:3f:4d:b2:75:a4:78:f4:34:ed: a3:43:0e:3c:83:a8:7f:38:98:59:2f:f4:4d:e5:73:09:f0:f3: 68:3d:4d:b6:5b:c6:bb:16:e2:b3:52:0f:1f:a3:16:a7:7a:b9: 5f:74:10:5a:87:f5:18:81:fc:ce:87:77:62:27:9f:f3:ac:e2: 04:f5:56:c2:77:e7:24:59:0b:04:41:f3:ef:ed:9f:8a:ee:2b: 1f:bd:77:85 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRkRB NDJCMzdEQzdFRDg0QUY3MzFBQjVFQUYwMzgyQTc5OUQ0OTdDMB4XDTI2MDgwMzA2 MzQ0N1oXDTI3MDgwMzAwMjY0MlowMzExMC8GA1UEAxMoNDYwRThFNEJDNDhBODUy MkEyQkE0RkFGQTQzMjk2NTY2QkYwMzRENTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALEO769FEuY73S95waiHmQcTPNPGe7/WCa2AQD+BLW0RNk/1jWZC XIbQVFCojqEj8U42kf0bfVGQGDpl3hjEND4RlXyG15f7y9pezUbPNJFcTixbspJE PIY+y5AvEPrc5q+GodzaHaarmLLk+DgdSf3OtkY8toz5D9Dv26oMATCsHi8gjA/k 8ap9fWyTGk3JykP2zC3nyDQ6mp/Pb4qI37uQgvdx/4OSysDWN8eD0YQLJU2mytTU 6xk1XvdRQYeEHmeoMONHSgI9xp79Gkk7XiOZVPul+W6NHrD47QYM56O3WnVKZUgJ 3/3qB234UH0DWw7URlV3owAtlPFixV+6+o8CAwEAAaOCAd0wggHZMB0GA1UdDgQW BBRGDo5LxIqFIqK6T6+kMpZWa/A01TAfBgNVHSMEGDAWgBSv2kKzfcfthK9zGrXq 8DgqeZ1JfDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAzMDMvcjlwQ3MzM0g3WVN2Y3hxMTZ2QTRLbm1kU1h3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcjlwQ3MzM0g3WVN2Y3hxMTZ2QTRL bm1kU1h3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMzAzL1JnNk9TOFNLaFNLaXVrLXZwREtXVm12d05OVS5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATe5EAwDQYJKoZIhvcNAQELBQAD ggEBAExIV/yMtQagyfNUzn/RCKA7SvXREL7uWOcWJVWiWMH25A63t1MYLU+1P9T/ dBb5lfgCS8y5wnT6Z9643+Qo7qHrWaE2xl17osDCtUJSiFRLbYsERPZsbfCWwsi5 gvS81jPhUWUX37v8D5PyFVtLtG7vtRGtjX1I8COnT/0HNXnfLo5iyusTxRZsJVJg GuCHD1HZYW4Hf40rQ6/K+61PQYGzv7hoE1F2h+O/UD9NsnWkePQ07aNDDjyDqH84 mFkv9E3lcwnw82g9TbZbxrsW4rNSDx+jFqd6uV90EFqH9RiB/M6Hd2Inn/Os4gT1 VsJ35yRZCwRB8+/tn4ruKx+9d4U= -----END CERTIFICATE-----Generated at Sat Aug 22 01:33:23 2026 by rpki-client