$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/qBXS6jIfLZS9XVSuWv9vqp6oD2k.roa File: qBXS6jIfLZS9XVSuWv9vqp6oD2k.roa (raw, json) Hash identifier: 3NWmXJK30KAUOfJEnwjSqvNBYCvrVhyzAPsbCLZ5dY0= Subject key identifier: A8:15:D2:EA:32:1F:2D:94:BD:5D:54:AE:5A:FF:6F:AA:9E:A8:0F:69 Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Certificate serial: E0 Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/qBXS6jIfLZS9XVSuWv9vqp6oD2k.roa Signing time: Wed 14 Oct 2026 00:10:33 +0000 ROA not before: Wed 14 Oct 2026 00:10:33 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 9622 IP address blocks: 211.125.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 13:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23 Validity Not Before: Oct 14 00:10:33 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=A815D2EA321F2D94BD5D54AE5AFF6FAA9EA80F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:db:d8:52:a2:33:a9:c9:eb:0e:e6:af:11: f5:6c:75:28:9a:83:67:de:fc:8f:d9:39:bd:3b:c4: 63:10:83:77:5a:3a:8a:fd:18:ee:31:d1:c8:23:6f: c4:4d:b4:59:c7:61:2a:c7:bf:90:f8:45:e4:e3:b5: f0:2c:6b:df:cb:0a:9e:e3:b8:e5:6f:68:1e:58:f1: 7d:3d:ca:f8:4f:3d:d1:eb:1d:8c:a5:8b:2c:80:59: 49:b8:13:08:78:33:f5:66:c9:5a:dd:24:e0:4a:5b: f6:71:01:08:ab:c6:22:8c:6e:b6:fa:94:fb:25:cb: 89:2d:7a:e3:5f:27:2d:7e:33:02:87:79:51:97:ea: 19:6d:55:db:bc:32:b4:02:0f:75:f0:4f:16:c9:63: 6f:d2:99:ab:4e:39:51:f4:77:60:35:9b:fa:f4:96: 9f:a5:1c:9a:ce:b0:ee:18:65:74:ac:ef:b2:6d:c6: 0e:29:9a:fa:68:c9:6e:b1:e3:fa:48:83:69:c6:54: 82:f5:a6:dd:55:27:24:42:cc:3a:d7:67:06:bf:38: d5:00:2f:05:ee:5c:ff:01:18:5c:9c:5b:0b:ee:d8: ad:c3:e5:15:2f:a8:a3:b1:a0:99:ae:69:11:ec:27: 13:c7:74:85:12:fd:43:55:69:e0:da:41:80:0d:df: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:15:D2:EA:32:1F:2D:94:BD:5D:54:AE:5A:FF:6F:AA:9E:A8:0F:69 X509v3 Authority Key Identifier: keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/qBXS6jIfLZS9XVSuWv9vqp6oD2k.roa sbgp-ipAddrBlock: critical IPv4: 211.125.126.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:4d:01:e1:32:36:26:c9:26:a0:6c:ec:cc:65:54:80:db:ad: ee:76:10:e5:29:00:16:d1:90:29:fb:4c:4e:99:25:51:19:e5: 37:7f:9c:d0:77:a4:51:d3:89:cb:9c:88:f5:cf:5f:14:e5:9d: ae:5e:96:7f:8b:8c:35:4a:69:67:0e:ac:60:6e:83:a8:e7:b7: f0:57:e9:46:08:b6:84:2c:fb:fd:35:9f:c0:c5:52:b1:7b:e1: d9:6d:e7:6f:9a:ce:29:04:eb:b9:a9:ac:05:84:69:9c:a5:2c: 05:f3:35:37:98:12:93:0c:f4:0c:db:65:e4:97:2d:43:2d:95: d7:e1:c3:fe:df:d3:67:5a:da:ff:f0:00:c2:28:e2:10:f2:70: ec:05:20:fd:7b:96:b8:a2:dc:00:84:6e:76:a1:06:ae:2b:72: 00:46:ec:7d:e7:5e:38:58:08:9d:9c:a4:6a:6c:59:4d:8c:84: 01:6a:3e:24:3e:eb:af:7b:25:29:69:b2:77:69:56:b3:05:11: e4:d5:e4:38:1b:f8:b2:80:39:02:d0:ba:1b:7a:27:30:f2:77: da:79:b2:e2:2e:54:3d:d4:8b:b2:0e:37:09:71:89:be:08:92: 73:9a:a8:e8:36:10:8d:22:a7:c2:77:e9:1e:43:85:00:82:47: 36:4a:9c:1b -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw MDEwMzNaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE4MTVEMkVBMzIxRjJE OTRCRDVENTRBRTVBRkY2RkFBOUVBODBGNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKmNvYUqIzqcnrDuavEfVsdSiag2fe/I/ZOb07xGMQg3daOor9 GO4x0cgjb8RNtFnHYSrHv5D4ReTjtfAsa9/LCp7juOVvaB5Y8X09yvhPPdHrHYyl iyyAWUm4Ewh4M/VmyVrdJOBKW/ZxAQirxiKMbrb6lPsly4kteuNfJy1+MwKHeVGX 6hltVdu8MrQCD3XwTxbJY2/SmatOOVH0d2A1m/r0lp+lHJrOsO4YZXSs77Jtxg4p mvpoyW6x4/pIg2nGVIL1pt1VJyRCzDrXZwa/ONUALwXuXP8BGFycWwvu2K3D5RUv qKOxoJmuaRHsJxPHdIUS/UNVaeDaQYAN3wAzAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUqBXS6jIfLZS9XVSuWv9vqp6oD2kwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzkzL3FCWFM2aklmTFpTOVhWU3VXdjl2cXA2b0Qyay5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfX4wDQYJKoZIhvcNAQELBQADggEB AF1NAeEyNibJJqBs7MxlVIDbre52EOUpABbRkCn7TE6ZJVEZ5Td/nNB3pFHTicuc iPXPXxTlna5eln+LjDVKaWcOrGBug6jnt/BX6UYItoQs+/01n8DFUrF74dlt52+a zikE67mprAWEaZylLAXzNTeYEpMM9AzbZeSXLUMtldfhw/7f02da2v/wAMIo4hDy cOwFIP17lrii3ACEbnahBq4rcgBG7H3nXjhYCJ2cpGpsWU2MhAFqPiQ+6697JSlp sndpVrMFEeTV5Dgb+LKAOQLQuht6JzDyd9p5suIuVD3Ui7IONwlxib4IknOaqOg2 EI0ip8J36R5DhQCCRzZKnBs= -----END CERTIFICATE-----Generated at Tue Oct 27 15:11:50 2026 by rpki-client