$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/ZsQM5y7DvRpc_R_Ek7k3XZJmhl8.roa File: ZsQM5y7DvRpc_R_Ek7k3XZJmhl8.roa (raw, json) Hash identifier: ei2yp6oSiUwkT7YM82vtU355+2MoOv37fIxDX6vtrFw= Subject key identifier: 66:C4:0C:E7:2E:C3:BD:1A:5C:FD:1F:C4:93:B9:37:5D:92:66:86:5F Certificate issuer: /CN=338887920EE75487E3B0B986FA6113FD8D5BE5D3 Certificate serial: 02 Authority key identifier: 33:88:87:92:0E:E7:54:87:E3:B0:B9:86:FA:61:13:FD:8D:5B:E5:D3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M4iHkg7nVIfjsLmG-mET_Y1b5dM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/ZsQM5y7DvRpc_R_Ek7k3XZJmhl8.roa Signing time: Mon 03 Aug 2026 06:34:40 +0000 ROA not before: Mon 03 Aug 2026 06:34:40 +0000 ROA not after: Tue 03 Aug 2027 00:26:42 +0000 asID: 131965 IP address blocks: 157.112.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/M4iHkg7nVIfjsLmG-mET_Y1b5dM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/M4iHkg7nVIfjsLmG-mET_Y1b5dM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M4iHkg7nVIfjsLmG-mET_Y1b5dM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338887920EE75487E3B0B986FA6113FD8D5BE5D3 Validity Not Before: Aug 3 06:34:40 2026 GMT Not After : Aug 3 00:26:42 2027 GMT Subject: CN=66C40CE72EC3BD1A5CFD1FC493B9375D9266865F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:75:1e:d3:d5:08:75:fe:63:17:96:2f:ef: 71:35:7b:83:de:ea:7e:6c:19:ff:48:02:10:69:5c: cb:c9:18:a4:e3:23:29:e9:94:d7:77:06:ab:f0:72: 36:02:08:fd:03:67:d8:de:5a:11:34:34:0e:55:c3: ea:6d:fa:d9:6e:a5:eb:ba:cc:22:d2:31:d3:1e:c3: 20:f3:ef:0c:6a:e3:cb:87:82:36:8c:6c:fc:40:4e: d0:bb:04:b4:24:e3:5e:03:60:64:a4:42:ff:c9:d0: c0:55:24:03:12:c5:0a:e7:38:cc:ac:61:cb:b5:51: 58:a9:0b:ec:c8:d2:f7:a7:ae:47:a8:bb:ae:a9:4e: c9:c5:e7:c9:5e:06:bb:30:db:fd:ee:10:99:8b:50: 97:14:01:a9:98:cd:a2:28:50:57:58:d8:fe:b9:40: ae:a1:cd:71:ee:ce:7c:1c:97:02:5e:ea:aa:43:fd: 39:9b:99:f9:30:19:a7:ec:8b:b7:6c:53:be:21:6c: d4:9a:7b:b7:d5:b6:fa:75:48:67:05:08:1c:d9:4a: df:76:dd:72:18:12:cf:9b:7a:52:44:cb:e7:5c:08: 52:59:5f:08:1c:df:0b:45:33:e1:3f:71:2c:59:1e: 67:a8:b7:41:38:68:cb:52:ee:11:29:13:86:7e:2c: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C4:0C:E7:2E:C3:BD:1A:5C:FD:1F:C4:93:B9:37:5D:92:66:86:5F X509v3 Authority Key Identifier: keyid:33:88:87:92:0E:E7:54:87:E3:B0:B9:86:FA:61:13:FD:8D:5B:E5:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/M4iHkg7nVIfjsLmG-mET_Y1b5dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M4iHkg7nVIfjsLmG-mET_Y1b5dM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/ZsQM5y7DvRpc_R_Ek7k3XZJmhl8.roa sbgp-ipAddrBlock: critical IPv4: 157.112.176.0/20 Signature Algorithm: sha256WithRSAEncryption 29:bd:8d:37:4d:50:aa:88:eb:81:65:69:ee:77:43:c6:f8:e5: 04:9e:83:d2:c6:f4:17:8a:0e:f1:fe:04:ae:44:d4:c8:dd:19: fb:6a:57:86:e4:3b:79:dd:9c:f6:da:08:c6:96:8a:d6:80:60: e5:58:a3:ec:f9:ac:6e:e7:4b:de:7c:60:02:e1:22:86:4d:03: 86:52:0d:4d:b4:00:1e:7a:b0:10:64:4f:21:a2:25:a6:6d:91: 1a:04:1d:97:5c:85:fa:0d:4d:5a:91:a2:c8:93:d2:08:25:55: bb:80:00:67:39:f5:0d:6f:58:db:96:b3:1f:44:f4:1e:9f:9a: dd:d6:fd:29:85:1c:fd:c0:b3:35:80:4f:7a:26:16:fa:ea:a9: 10:3c:8c:5f:94:6e:0c:64:a5:50:c3:88:8c:c4:da:42:09:7a: ea:0d:5f:50:5a:7b:ea:c7:49:fa:01:d6:8e:1b:fb:47:4e:5f: 03:43:10:a7:4e:bb:3e:b4:ba:d1:90:f5:8c:4f:bf:3f:7d:5d: 5b:72:ab:56:da:a3:3b:41:d1:f2:f8:34:d3:bd:13:c4:43:ae: 49:4b:bc:d2:fe:00:b7:0e:e8:94:2b:d1:e2:a3:4f:9e:1a:18: a3:e2:f4:b0:08:2b:87:75:dc:44:fc:da:c0:c2:53:d1:cc:3d: 73:b6:3e:a4 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMzg4 ODc5MjBFRTc1NDg3RTNCMEI5ODZGQTYxMTNGRDhENUJFNUQzMB4XDTI2MDgwMzA2 MzQ0MFoXDTI3MDgwMzAwMjY0MlowMzExMC8GA1UEAxMoNjZDNDBDRTcyRUMzQkQx QTVDRkQxRkM0OTNCOTM3NUQ5MjY2ODY1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALb4dR7T1Qh1/mMXli/vcTV7g97qfmwZ/0gCEGlcy8kYpOMjKemU 13cGq/ByNgII/QNn2N5aETQ0DlXD6m362W6l67rMItIx0x7DIPPvDGrjy4eCNoxs /EBO0LsEtCTjXgNgZKRC/8nQwFUkAxLFCuc4zKxhy7VRWKkL7MjS96euR6i7rqlO ycXnyV4GuzDb/e4QmYtQlxQBqZjNoihQV1jY/rlArqHNce7OfByXAl7qqkP9OZuZ +TAZp+yLt2xTviFs1Jp7t9W2+nVIZwUIHNlK33bdchgSz5t6UkTL51wIUllfCBzf C0Uz4T9xLFkeZ6i3QThoy1LuESkThn4sAvUCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBRmxAznLsO9Glz9H8STuTddkmaGXzAfBgNVHSMEGDAWgBQziIeSDudUh+OwuYb6 YRP9jVvl0zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAzMDMvTTRpSGtnN25WSWZqc0xtRy1tRVRfWTFiNWRNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTRpSGtnN25WSWZqc0xtRy1tRVRf WTFiNWRNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzIwMzAzL1pzUU01eTdEdlJwY19SX0VrN2szWFpKbWhsOC5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASdcLAwDQYJKoZIhvcNAQELBQAD ggEBACm9jTdNUKqI64Flae53Q8b45QSeg9LG9BeKDvH+BK5E1MjdGftqV4bkO3nd nPbaCMaWitaAYOVYo+z5rG7nS958YALhIoZNA4ZSDU20AB56sBBkTyGiJaZtkRoE HZdchfoNTVqRosiT0gglVbuAAGc59Q1vWNuWsx9E9B6fmt3W/SmFHP3AszWAT3om FvrqqRA8jF+UbgxkpVDDiIzE2kIJeuoNX1Bae+rHSfoB1o4b+0dOXwNDEKdOuz60 utGQ9YxPvz99XVtyq1baoztB0fL4NNO9E8RDrklLvNL+ALcO6JQr0eKjT54aGKPi 9LAIK4d13ET82sDCU9HMPXO2PqQ= -----END CERTIFICATE-----Generated at Sat Aug 22 03:06:28 2026 by rpki-client