$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/cBmORDnUXmHurx7c4ms-Wdbc32A.roa File: cBmORDnUXmHurx7c4ms-Wdbc32A.roa (raw, json) Hash identifier: e4nz4aZzmOsAxfqDR4tDktStSCzejYQVaGyWcqHn5XU= Subject key identifier: 70:19:8E:44:39:D4:5E:61:EE:AF:1E:DC:E2:6B:3E:59:D6:DC:DF:60 Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Certificate serial: E1 Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/cBmORDnUXmHurx7c4ms-Wdbc32A.roa Signing time: Wed 14 Oct 2026 00:10:33 +0000 ROA not before: Wed 14 Oct 2026 00:10:33 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 9622 IP address blocks: 211.125.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 13:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Validity Not Before: Oct 14 00:10:33 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=70198E4439D45E61EEAF1EDCE26B3E59D6DCDF60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:af:a9:ea:f5:44:62:ca:ab:3b:7b:26:94: b6:cc:e9:38:cd:43:a2:6d:4f:06:c4:a8:96:c2:90: 6d:37:da:8e:96:da:dc:7a:71:c6:93:a6:3a:98:19: d8:33:35:ef:d6:e6:4c:65:a2:df:ab:41:fb:7a:b7: dd:8d:27:fa:0e:f0:53:f2:dd:08:76:b8:c9:ac:83: 22:ca:c8:96:26:2a:53:9b:18:6f:6b:ae:11:4b:09: f0:39:fe:41:29:83:16:2b:73:27:83:21:5b:66:e6: ce:ae:09:34:a2:5d:b1:aa:5c:69:5b:1d:c2:ae:ff: ed:82:83:c1:10:a6:e1:93:c7:09:ed:1b:45:ee:f5: 47:02:4c:89:fd:18:d1:3c:65:ec:55:cb:84:6b:39: a4:29:20:e7:30:f2:b0:b7:dd:45:68:70:6e:13:dc: 8e:02:6f:ac:e1:35:0a:85:16:a5:8f:2e:4a:74:77: da:fa:05:66:f2:8a:63:eb:46:97:53:9b:e3:7f:51: cd:f8:90:7a:b6:6e:37:82:e5:63:5e:86:cc:4b:d6: 34:fe:01:3f:86:db:23:34:03:1f:90:b5:25:f7:39: 82:16:83:65:e8:a5:1b:40:29:7b:b5:66:fd:67:55: 65:97:76:9c:23:49:49:ad:b3:c2:d2:c1:89:dc:1b: ff:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:19:8E:44:39:D4:5E:61:EE:AF:1E:DC:E2:6B:3E:59:D6:DC:DF:60 X509v3 Authority Key Identifier: keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/cBmORDnUXmHurx7c4ms-Wdbc32A.roa sbgp-ipAddrBlock: critical IPv4: 211.125.127.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:11:e0:77:50:c7:5f:d3:5c:7d:85:b5:26:48:28:60:2a:9f: 34:9b:20:28:a9:19:36:dc:27:29:16:9e:04:87:32:87:6c:6d: 0d:51:33:14:cc:4c:46:a8:eb:80:06:64:3f:d1:28:ff:21:59: c0:1e:b7:29:8d:02:47:08:e7:d5:1c:e9:56:eb:22:69:3b:4f: 09:20:ae:3c:e6:62:e5:58:b7:6c:58:d7:ca:3d:f0:e7:28:c7: 76:a4:5f:62:c5:6c:3e:e1:ad:90:75:df:ef:6c:17:f6:fb:29: a9:7f:0b:e6:06:70:fd:b4:be:84:b9:3e:5f:7e:db:00:eb:2a: 27:6c:74:07:e1:6a:35:a7:3c:d9:ff:16:6f:b3:6d:f1:2a:d1: 33:4f:7c:77:15:71:a5:f7:e2:ab:01:79:9b:1c:3b:58:93:14: 6b:31:23:d0:9e:ff:dd:66:85:fb:1e:38:05:6e:08:64:6b:83: a7:3a:b4:0e:33:bf:1d:a1:8b:52:e4:67:7c:fe:93:21:8b:25: 6d:05:ac:86:9b:d3:2f:2f:9b:8d:33:d2:d5:78:81:82:78:9e: 03:4f:df:79:00:b0:b1:7a:d3:ff:f3:7b:96:0d:31:a0:cd:00: b8:ba:71:2f:b5:ce:e7:7e:67:db:cf:5e:4a:f6:6c:4a:cc:95: 08:bc:19:86 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw MDEwMzNaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwMTk4RTQ0MzlENDVF NjFFRUFGMUVEQ0UyNkIzRTU5RDZEQ0RGNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCroa+p6vVEYsqrO3smlLbM6TjNQ6JtTwbEqJbCkG032o6W2tx6 ccaTpjqYGdgzNe/W5kxlot+rQft6t92NJ/oO8FPy3Qh2uMmsgyLKyJYmKlObGG9r rhFLCfA5/kEpgxYrcyeDIVtm5s6uCTSiXbGqXGlbHcKu/+2Cg8EQpuGTxwntG0Xu 9UcCTIn9GNE8ZexVy4RrOaQpIOcw8rC33UVocG4T3I4Cb6zhNQqFFqWPLkp0d9r6 BWbyimPrRpdTm+N/Uc34kHq2bjeC5WNehsxL1jT+AT+G2yM0Ax+QtSX3OYIWg2Xo pRtAKXu1Zv1nVWWXdpwjSUmts8LSwYncG//3AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUcBmORDnUXmHurx7c4ms+Wdbc32AwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzkzL2NCbU9SRG5VWG1IdXJ4N2M0bXMtV2RiYzMyQS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfX8wDQYJKoZIhvcNAQELBQADggEB AH0R4HdQx1/TXH2FtSZIKGAqnzSbICipGTbcJykWngSHModsbQ1RMxTMTEao64AG ZD/RKP8hWcAetymNAkcI59Uc6VbrImk7TwkgrjzmYuVYt2xY18o98Ocox3akX2LF bD7hrZB13+9sF/b7Kal/C+YGcP20voS5Pl9+2wDrKidsdAfhajWnPNn/Fm+zbfEq 0TNPfHcVcaX34qsBeZscO1iTFGsxI9Ce/91mhfseOAVuCGRrg6c6tA4zvx2hi1Lk Z3z+kyGLJW0FrIab0y8vm40z0tV4gYJ4ngNP33kAsLF60//ze5YNMaDNALi6cS+1 zud+Z9vPXkr2bErMlQi8GYY= -----END CERTIFICATE-----Generated at Tue Oct 27 15:11:44 2026 by rpki-client