$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/QbG5pk7WGDgk0o9q2LGloVoDo9Y.roa File: QbG5pk7WGDgk0o9q2LGloVoDo9Y.roa (raw, json) Hash identifier: b3rhzpCfY0ry7+ETFl8twBCTE+QcvwnA2eLXqhIbH6c= Subject key identifier: 41:B1:B9:A6:4E:D6:18:38:24:D2:8F:6A:D8:B1:A5:A1:5A:03:A3:D6 Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Certificate serial: DC Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/QbG5pk7WGDgk0o9q2LGloVoDo9Y.roa Signing time: Wed 14 Oct 2026 00:10:31 +0000 ROA not before: Wed 14 Oct 2026 00:10:31 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 9622 IP address blocks: 211.125.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 13:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Validity Not Before: Oct 14 00:10:31 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=41B1B9A64ED6183824D28F6AD8B1A5A15A03A3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:e5:b9:1c:ba:1e:f9:e0:2f:27:71:4d:57: 3d:33:83:4e:90:32:bf:e8:33:40:32:96:0a:23:d1: 29:74:e6:9e:93:0e:75:df:80:6e:ec:d7:23:b3:33: 3e:6d:69:31:90:1a:2e:6f:67:7c:68:69:b2:ae:de: 15:8e:16:85:55:65:e5:3c:92:b6:b6:e0:33:7c:f8: ca:ca:a9:1a:84:14:01:b4:57:d7:5e:e5:28:75:98: cb:39:b0:2f:70:9d:d5:d5:e5:0d:64:02:1d:51:c1: b2:e7:59:02:13:3b:a3:ee:91:e0:36:80:e8:fa:6a: 91:a5:33:44:29:f4:8d:c6:f1:df:a6:a2:c4:3d:07: 68:9e:18:67:ef:30:3a:90:7e:43:10:9a:c4:ba:89: 54:37:f5:41:ba:34:90:e5:ad:17:64:35:e9:86:4f: 4d:e6:4c:13:ca:89:18:28:05:2c:91:01:15:b3:01: 1d:f8:a2:33:7a:34:03:3b:95:d8:30:8a:c2:03:45: 4c:9b:df:b3:64:39:b0:e5:64:41:45:8e:19:6f:94: 9e:6f:27:c8:4b:47:62:2d:bb:73:c7:53:68:9b:fd: 82:0f:2a:8d:a8:14:8d:35:1b:5f:c3:08:6b:22:c0: d5:68:d2:52:81:63:89:13:47:5a:72:fd:e3:8a:cc: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B1:B9:A6:4E:D6:18:38:24:D2:8F:6A:D8:B1:A5:A1:5A:03:A3:D6 X509v3 Authority Key Identifier: keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/QbG5pk7WGDgk0o9q2LGloVoDo9Y.roa sbgp-ipAddrBlock: critical IPv4: 211.125.122.0/24 Signature Algorithm: sha256WithRSAEncryption 01:ac:f0:42:71:f1:63:11:5b:be:81:31:8b:ec:19:9c:2a:3f: 0b:7c:78:13:d1:e3:e1:c6:c2:c3:f3:0d:35:76:eb:b8:30:80: b3:ac:1c:30:c6:e4:9a:16:b2:d8:f5:8f:41:ad:0e:9f:88:d2: f8:ad:b1:36:e7:ff:e4:a0:a7:d2:bc:ee:11:79:e9:d8:17:6a: fe:e0:83:bf:6f:c6:fd:f4:ae:86:83:eb:a5:61:56:e6:95:cf: 1b:9a:e6:98:7a:e6:e1:fe:c4:b0:d7:3c:f3:b1:e7:96:e1:8d: 25:22:55:28:67:46:d2:e9:3f:a9:a4:0e:9e:53:18:a3:0f:bd: 0c:78:7e:f6:de:e4:87:e6:21:d9:bb:02:90:d3:6c:75:97:3e: bf:3d:cd:de:21:21:e0:73:29:a8:f7:44:40:7e:cb:07:7e:f6: 74:25:9e:be:cb:6c:56:8b:cc:1f:d3:cb:52:be:a5:36:32:8f: 2f:6b:ee:45:38:f7:fa:ac:bb:70:0c:72:ba:55:1f:1b:bd:89: 49:6e:e4:ef:04:9d:1f:0d:ce:54:6d:0b:67:93:cb:50:f9:65: 39:38:2e:5b:7b:f7:d6:05:0b:c6:33:f9:b6:88:a0:92:52:4a: da:1f:a3:aa:fc:4f:48:19:ca:fd:fb:ad:de:ae:a1:87:21:1b: 60:5d:20:ac -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw MDEwMzFaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQxQjFCOUE2NEVENjE4 MzgyNEQyOEY2QUQ4QjFBNUExNUEwM0EzRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0BOW5HLoe+eAvJ3FNVz0zg06QMr/oM0Aylgoj0Sl05p6TDnXf gG7s1yOzMz5taTGQGi5vZ3xoabKu3hWOFoVVZeU8kra24DN8+MrKqRqEFAG0V9de 5Sh1mMs5sC9wndXV5Q1kAh1RwbLnWQITO6PukeA2gOj6apGlM0Qp9I3G8d+mosQ9 B2ieGGfvMDqQfkMQmsS6iVQ39UG6NJDlrRdkNemGT03mTBPKiRgoBSyRARWzAR34 ojN6NAM7ldgwisIDRUyb37NkObDlZEFFjhlvlJ5vJ8hLR2Itu3PHU2ib/YIPKo2o FI01G1/DCGsiwNVo0lKBY4kTR1py/eOKzPUNAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUQbG5pk7WGDgk0o9q2LGloVoDo9YwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzkzL1FiRzVwazdXR0RnazBvOXEyTEdsb1ZvRG85WS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfXowDQYJKoZIhvcNAQELBQADggEB AAGs8EJx8WMRW76BMYvsGZwqPwt8eBPR4+HGwsPzDTV267gwgLOsHDDG5JoWstj1 j0GtDp+I0vitsTbn/+Sgp9K87hF56dgXav7gg79vxv30roaD66VhVuaVzxua5ph6 5uH+xLDXPPOx55bhjSUiVShnRtLpP6mkDp5TGKMPvQx4fvbe5IfmIdm7ApDTbHWX Pr89zd4hIeBzKaj3REB+ywd+9nQlnr7LbFaLzB/Ty1K+pTYyjy9r7kU49/qsu3AM crpVHxu9iUlu5O8EnR8NzlRtC2eTy1D5ZTk4Llt799YFC8Yz+baIoJJSStofo6r8 T0gZyv37rd6uoYchG2BdIKw= -----END CERTIFICATE-----Generated at Tue Oct 27 15:11:49 2026 by rpki-client