$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/8sAB6JfdnUC8jrRkyvX0uxoxcXs.roa File: 8sAB6JfdnUC8jrRkyvX0uxoxcXs.roa (raw, json) Hash identifier: WEZk2333Zzc4k1kzXTsk/7zKr+hTy5qmER5t+X6oEt4= Subject key identifier: F2:C0:01:E8:97:DD:9D:40:BC:8E:B4:64:CA:F5:F4:BB:1A:31:71:7B Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Certificate serial: DF Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/8sAB6JfdnUC8jrRkyvX0uxoxcXs.roa Signing time: Wed 14 Oct 2026 00:10:32 +0000 ROA not before: Wed 14 Oct 2026 00:10:32 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 9622 IP address blocks: 211.125.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 19:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Validity Not Before: Oct 14 00:10:32 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=F2C001E897DD9D40BC8EB464CAF5F4BB1A31717B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:75:42:d7:e7:5e:9e:d2:35:2c:2b:59:88: e5:f9:5a:31:98:8d:d5:0e:04:64:b5:87:5f:f2:2c: 02:05:59:13:7f:63:7f:f5:1d:f0:23:e3:d3:e5:64: f9:77:00:c5:2f:a6:37:34:6f:78:42:7f:92:f5:aa: 3b:ad:cf:19:c5:e7:d1:92:a8:6d:3f:8a:8f:a6:d3: 6f:30:75:b6:68:68:93:f5:96:e9:b4:c1:93:c3:29: c1:3f:f5:8e:f2:21:4c:64:6b:7c:03:17:90:26:d2: 37:05:ba:2e:5d:21:5e:fe:01:6f:17:64:dc:b1:90: 4b:04:85:de:1d:67:86:a4:f5:7b:fd:02:ca:73:dd: 6d:e5:07:28:22:a8:b5:f3:b1:d6:cd:a1:ad:17:e3: 5e:02:38:1d:6e:a4:bb:ac:ee:84:ba:67:6d:62:70: 4a:9b:e1:3b:a2:12:e9:33:29:7b:95:e4:4b:0d:d7: a1:7d:77:b7:cd:47:e9:50:30:59:31:0b:15:42:b5: 68:95:23:73:c7:54:72:6f:57:44:db:36:fa:2f:41: 26:4c:62:7f:2e:81:9f:ed:6c:cb:45:79:6f:99:3a: 81:ec:73:ce:b1:85:40:5a:7b:6b:80:28:83:27:ca: f9:d1:8d:36:c1:8a:71:a8:88:01:df:0f:30:19:5e: 39:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C0:01:E8:97:DD:9D:40:BC:8E:B4:64:CA:F5:F4:BB:1A:31:71:7B X509v3 Authority Key Identifier: keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/8sAB6JfdnUC8jrRkyvX0uxoxcXs.roa sbgp-ipAddrBlock: critical IPv4: 211.125.125.0/24 Signature Algorithm: sha256WithRSAEncryption 76:76:f2:54:61:ea:bc:ca:c2:fc:76:4c:cb:1e:47:8e:b7:88: 9f:31:3b:32:19:7f:88:bd:c3:60:66:65:e7:c0:30:18:ce:bb: 1c:64:2c:64:8f:f5:6c:d2:f3:cf:11:d7:51:1a:31:b1:3a:e3: 8c:d8:c9:fa:5e:11:71:59:8e:2d:52:34:dc:47:e1:e7:9e:5c: 93:26:f9:fa:87:89:e7:c8:4d:45:9e:58:35:11:6e:95:f9:c4: 4c:39:7f:52:85:cc:7c:7c:94:c3:dd:f2:af:7d:38:43:f3:64: d2:d6:62:e9:01:18:4e:7f:13:36:f9:61:aa:8f:24:7a:18:cc: fe:88:04:94:cc:20:27:c9:60:d8:b4:d2:51:bd:e2:c8:a8:f5: 51:35:18:8e:95:f1:d2:b9:e4:5a:5b:36:b6:26:8a:c3:86:14: 34:9b:af:46:6b:20:d8:28:b5:8e:66:5c:6f:f1:37:46:dd:09: 24:60:bb:d7:a9:34:54:58:9f:4c:6a:7d:80:6e:20:b2:ce:85: 72:98:56:41:4e:07:05:42:56:b3:41:6a:b0:49:31:49:7e:f1: 63:3a:0b:8a:8d:bc:92:fc:b7:af:e1:8f:c8:2d:e7:94:ef:93: 6e:e7:13:af:6e:53:a8:68:4c:99:77:e4:ce:63:09:8d:9d:07: 60:8e:a7:bc -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw MDEwMzJaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyQzAwMUU4OTdERDlE NDBCQzhFQjQ2NENBRjVGNEJCMUEzMTcxN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu/3VC1+dentI1LCtZiOX5WjGYjdUOBGS1h1/yLAIFWRN/Y3/1 HfAj49PlZPl3AMUvpjc0b3hCf5L1qjutzxnF59GSqG0/io+m028wdbZoaJP1lum0 wZPDKcE/9Y7yIUxka3wDF5Am0jcFui5dIV7+AW8XZNyxkEsEhd4dZ4ak9Xv9Aspz 3W3lBygiqLXzsdbNoa0X414COB1upLus7oS6Z21icEqb4TuiEukzKXuV5EsN16F9 d7fNR+lQMFkxCxVCtWiVI3PHVHJvV0TbNvovQSZMYn8ugZ/tbMtFeW+ZOoHsc86x hUBae2uAKIMnyvnRjTbBinGoiAHfDzAZXjkrAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU8sAB6JfdnUC8jrRkyvX0uxoxcXswHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzkzLzhzQUI2SmZkblVDOGpyUmt5dlgwdXhveGNYcy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfX0wDQYJKoZIhvcNAQELBQADggEB AHZ28lRh6rzKwvx2TMseR463iJ8xOzIZf4i9w2BmZefAMBjOuxxkLGSP9WzS888R 11EaMbE644zYyfpeEXFZji1SNNxH4eeeXJMm+fqHiefITUWeWDURbpX5xEw5f1KF zHx8lMPd8q99OEPzZNLWYukBGE5/Ezb5YaqPJHoYzP6IBJTMICfJYNi00lG94sio 9VE1GI6V8dK55FpbNrYmisOGFDSbr0ZrINgotY5mXG/xN0bdCSRgu9epNFRYn0xq fYBuILLOhXKYVkFOBwVCVrNBarBJMUl+8WM6C4qNvJL8t6/hj8gt55Tvk27nE69u U6hoTJl35M5jCY2dB2COp7w= -----END CERTIFICATE-----Generated at Wed Oct 28 20:52:44 2026 by rpki-client