$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/2FQipGpwKkcPWh8xltRTD9bo5ck.roa File: 2FQipGpwKkcPWh8xltRTD9bo5ck.roa (raw, json) Hash identifier: sV4saiV8fn2VALHe94awPYIfJMQjAFaDE7m3Cfcm9O8= Subject key identifier: D8:54:22:A4:6A:70:2A:47:0F:5A:1F:31:96:D4:53:0F:D6:E8:E5:C9 Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Certificate serial: DD Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/2FQipGpwKkcPWh8xltRTD9bo5ck.roa Signing time: Wed 14 Oct 2026 00:10:32 +0000 ROA not before: Wed 14 Oct 2026 00:10:32 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 9622 IP address blocks: 211.125.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 13:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Validity Not Before: Oct 14 00:10:32 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=D85422A46A702A470F5A1F3196D4530FD6E8E5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:88:0e:b0:18:82:69:55:8f:b3:ae:f5:5e: ad:c0:67:4a:1a:38:bb:20:f4:e3:be:47:88:fe:8f: f9:ef:3d:a8:69:8a:7a:40:30:26:b3:28:11:1a:73: d1:ad:72:2d:2e:cb:30:4a:62:00:5e:f1:a4:dc:6e: 4f:80:ce:4a:a6:d3:3b:fe:ad:fa:a4:00:72:4b:16: 46:f7:88:40:e4:50:2f:4a:9d:ba:c0:06:99:49:9b: 39:7e:84:05:f3:1b:92:29:a5:b8:48:29:13:b6:0d: 5b:05:89:89:d1:8b:bd:a1:b3:ee:42:29:18:ee:2d: bd:90:7f:14:c8:f0:a1:76:16:fa:20:20:aa:0b:21: 18:c9:e8:fb:7d:1f:b1:63:a2:24:d5:dd:ca:2f:25: 7d:fd:44:8c:a8:72:5c:1c:fe:36:3f:8c:54:f3:c2: ef:69:f0:6f:5a:74:88:79:4c:33:6b:4b:00:2f:40: 2f:b5:bd:12:48:3e:3a:2a:4f:94:c5:19:cc:f5:f5: 8a:14:65:cc:b8:68:ad:fe:f0:cd:75:bd:50:79:ff: 39:fa:c3:7b:b7:78:45:eb:02:40:4d:7a:36:07:32: ed:d8:23:ce:90:09:c4:7d:a0:b0:28:a5:e7:77:a6: 17:4e:a1:c2:a5:d6:72:cb:14:eb:61:45:8f:ad:3b: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:54:22:A4:6A:70:2A:47:0F:5A:1F:31:96:D4:53:0F:D6:E8:E5:C9 X509v3 Authority Key Identifier: keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/2FQipGpwKkcPWh8xltRTD9bo5ck.roa sbgp-ipAddrBlock: critical IPv4: 211.125.123.0/24 Signature Algorithm: sha256WithRSAEncryption 06:e8:71:84:47:d1:24:be:90:b6:55:91:9c:5b:e7:0e:34:d0: 72:01:c8:d4:a7:57:60:fd:6b:0f:63:48:09:2f:a8:c6:87:07: b7:56:59:89:5a:69:b7:0f:97:ad:49:09:3b:e4:d6:08:ee:47: 28:61:d9:7e:f2:9d:2a:c7:22:8d:70:50:f5:e2:97:23:08:63: 33:d6:67:22:23:61:00:fe:f4:8d:3a:ee:c0:44:42:a0:b8:c4: ca:8e:6d:d9:72:cb:3a:e8:b0:89:b2:51:bb:0d:ef:6b:6f:b6: 13:6a:01:da:cc:68:ce:c2:b9:23:b0:54:bd:14:f9:81:0a:d0: 2c:6c:43:61:e7:e7:e8:f9:ea:cc:80:98:cb:21:f8:f9:aa:89: bb:53:7c:58:a3:74:69:78:f4:67:0c:9f:51:69:74:cf:be:91: 77:89:c7:74:32:3c:16:1d:74:51:80:74:7b:f8:ed:d8:2d:48: 9c:a4:83:35:66:7f:df:fb:13:16:92:06:3a:02:9d:a6:04:66: cd:03:0c:ea:ab:05:60:5e:f7:b2:4a:6a:e6:95:e9:33:b4:2c: 67:1f:b1:a9:87:b4:eb:7f:c9:af:20:5c:00:1f:ee:5c:c8:ba: c6:ef:f7:96:57:f0:3b:f5:da:48:93:43:2e:f2:c9:4d:5d:58: fe:5f:c6:90 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw MDEwMzJaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4NTQyMkE0NkE3MDJB NDcwRjVBMUYzMTk2RDQ1MzBGRDZFOEU1QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJPYgOsBiCaVWPs671Xq3AZ0oaOLsg9OO+R4j+j/nvPahpinpA MCazKBEac9Gtci0uyzBKYgBe8aTcbk+Azkqm0zv+rfqkAHJLFkb3iEDkUC9KnbrA BplJmzl+hAXzG5IppbhIKRO2DVsFiYnRi72hs+5CKRjuLb2QfxTI8KF2FvogIKoL IRjJ6Pt9H7FjoiTV3covJX39RIyoclwc/jY/jFTzwu9p8G9adIh5TDNrSwAvQC+1 vRJIPjoqT5TFGcz19YoUZcy4aK3+8M11vVB5/zn6w3u3eEXrAkBNejYHMu3YI86Q CcR9oLAoped3phdOocKl1nLLFOthRY+tO3XXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU2FQipGpwKkcPWh8xltRTD9bo5ckwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzkzLzJGUWlwR3B3S2tjUFdoOHhsdFJURDlibzVjay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfXswDQYJKoZIhvcNAQELBQADggEB AAbocYRH0SS+kLZVkZxb5w400HIByNSnV2D9aw9jSAkvqMaHB7dWWYlaabcPl61J CTvk1gjuRyhh2X7ynSrHIo1wUPXilyMIYzPWZyIjYQD+9I067sBEQqC4xMqObdly yzrosImyUbsN72tvthNqAdrMaM7CuSOwVL0U+YEK0CxsQ2Hn5+j56syAmMsh+Pmq ibtTfFijdGl49GcMn1FpdM++kXeJx3QyPBYddFGAdHv47dgtSJykgzVmf9/7ExaS BjoCnaYEZs0DDOqrBWBe97JKauaV6TO0LGcfsamHtOt/ya8gXAAf7lzIusbv95ZX 8Dv12kiTQy7yyU1dWP5fxpA= -----END CERTIFICATE-----Generated at Tue Oct 27 15:11:48 2026 by rpki-client