$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/lMwmHsS4T59BlPPacH6GaaSeONQ.roa File: lMwmHsS4T59BlPPacH6GaaSeONQ.roa (raw, json) Hash identifier: g2jor3C5pEAMWvL7YlMcHvIKUadMfgzD+sB8f9EVUSY= Subject key identifier: 94:CC:26:1E:C4:B8:4F:9F:41:94:F3:DA:70:7E:86:69:A4:9E:38:D4 Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0 Certificate serial: 2D Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/lMwmHsS4T59BlPPacH6GaaSeONQ.roa Signing time: Sun 01 Feb 2026 01:35:42 +0000 ROA not before: Sun 01 Feb 2026 01:35:42 +0000 ROA not after: Fri 15 Jan 2027 01:30:02 +0000 asID: 59127 IP address blocks: 122.200.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Feb 2026 12:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0 Validity Not Before: Feb 1 01:35:42 2026 GMT Not After : Jan 15 01:30:02 2027 GMT Subject: CN=94CC261EC4B84F9F4194F3DA707E8669A49E38D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:70:0c:b3:4d:fb:76:41:ed:01:3c:2d:b2: 5c:21:c1:72:20:e4:47:60:e1:dc:45:1c:7a:a2:e0: 2e:c6:c7:15:8f:eb:a1:90:de:cc:2e:eb:21:a2:e3: c2:b0:e3:24:21:7d:21:e5:86:89:57:39:1b:75:e4: 81:03:14:d3:46:5a:f3:8c:d3:bc:39:9c:91:d8:34: 72:59:0e:89:c6:31:7b:a4:6b:74:33:42:ba:bb:dd: 54:ae:8a:aa:c5:48:e2:c4:42:dd:b3:d9:a6:6a:e7: ed:ec:fe:62:f8:59:f9:8b:b1:a9:42:31:94:9b:1b: 60:e3:e4:08:72:40:4a:dd:7e:74:1e:9e:98:b9:b7: e6:fe:25:dc:dc:c6:a8:a6:ea:6d:a3:96:71:07:a9: 69:f2:70:8e:cf:6e:d4:5b:17:8f:fa:6e:5c:d9:18: fd:dc:37:39:b1:6a:8b:48:0f:de:03:dd:4f:9c:db: c9:de:7b:c6:fa:02:d8:91:8f:33:3c:68:c4:7d:29: 9b:b9:4b:df:e4:9a:d2:e5:b2:9b:ef:31:25:4f:95: 10:7d:b7:6c:c7:3b:ea:c8:ba:4b:24:9b:93:e6:80: f4:2c:71:66:00:17:da:6b:27:25:37:6b:46:02:ef: aa:2e:7a:a6:ee:e5:c7:e5:29:90:1c:f1:6c:6a:76: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CC:26:1E:C4:B8:4F:9F:41:94:F3:DA:70:7E:86:69:A4:9E:38:D4 X509v3 Authority Key Identifier: keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/lMwmHsS4T59BlPPacH6GaaSeONQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.200.136.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:c2:e1:42:1b:a6:75:0b:65:d9:36:18:ae:9d:d9:df:77:58: 21:bf:1d:58:d5:3c:eb:32:c4:57:ed:b7:a8:8d:35:48:1c:17: cc:39:1f:56:2f:31:da:fa:3a:90:a8:a8:51:22:13:d7:e4:1d: db:6d:a8:d5:b4:3b:d5:dd:82:41:bd:bc:df:5a:41:63:ce:44: 3f:76:ea:66:19:21:6b:2e:00:8a:bc:5d:c6:36:1a:f5:2b:9e: 5f:5a:b2:f3:79:37:32:ee:4b:aa:c0:b3:70:8b:fb:33:88:3c: 10:d8:a4:14:77:33:99:03:ce:d7:39:de:25:9e:05:2c:f2:03: b4:c8:02:c8:5d:b9:ed:f3:35:14:29:79:92:ce:bb:f2:76:f5: 95:7f:59:14:96:14:dc:4d:2f:e6:44:b1:14:de:a3:62:0a:6c: 8e:da:bd:e0:6c:5f:ef:41:1e:4f:93:96:f1:3b:73:33:f8:80: 35:16:c3:1c:83:10:0e:ec:6a:ef:07:60:01:41:42:4c:e2:fa: 3b:6a:da:a8:f7:f8:fb:85:e3:25:2e:58:fb:a1:8f:ea:5d:ed: 36:79:18:f0:56:76:1b:ac:c8:8b:d2:1c:78:c2:a7:49:95:7d: b2:6c:7c:42:7c:f7:92:26:a6:a1:98:24:70:c9:6d:76:95:c8: 56:82:6c:d5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODlF ODI2NzJDOThBNjI3MTIwQUJBNzJERUJFQkUyMjAxNTg0OUEwMB4XDTI2MDIwMTAx MzU0MloXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoOTRDQzI2MUVDNEI4NEY5 RjQxOTRGM0RBNzA3RTg2NjlBNDlFMzhENDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALmYcAyzTft2Qe0BPC2yXCHBciDkR2Dh3EUceqLgLsbHFY/roZDe zC7rIaLjwrDjJCF9IeWGiVc5G3XkgQMU00Za84zTvDmckdg0clkOicYxe6RrdDNC urvdVK6KqsVI4sRC3bPZpmrn7ez+YvhZ+YuxqUIxlJsbYOPkCHJASt1+dB6emLm3 5v4l3NzGqKbqbaOWcQepafJwjs9u1FsXj/puXNkY/dw3ObFqi0gP3gPdT5zbyd57 xvoC2JGPMzxoxH0pm7lL3+Sa0uWym+8xJU+VEH23bMc76si6SySbk+aA9CxxZgAX 2msnJTdrRgLvqi56pu7lx+UpkBzxbGp28SkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSUzCYexLhPn0GU89pwfoZppJ441DAfBgNVHSMEGDAWgBSYnoJnLJimJxIKunLe vr4iAVhJoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY1L21KNkNaeXlZcGljU0NycHkzcjYtSWdGWVNhQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21KNkNaeXlZcGljU0NycHkzcjYtSWdG WVNhQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjUvbE13bUhzUzRUNTlCbFBQYWNINkdhYVNlT05RLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3rIiDANBgkqhkiG9w0BAQsFAAOCAQEAS8LhQhumdQtl2TYYrp3Z33dYIb8d WNU86zLEV+23qI01SBwXzDkfVi8x2vo6kKioUSIT1+Qd222o1bQ71d2CQb2831pB Y85EP3bqZhkhay4AirxdxjYa9SueX1qy83k3Mu5LqsCzcIv7M4g8ENikFHczmQPO 1zneJZ4FLPIDtMgCyF257fM1FCl5ks678nb1lX9ZFJYU3E0v5kSxFN6jYgpsjtq9 4Gxf70EeT5OW8TtzM/iANRbDHIMQDuxq7wdgAUFCTOL6O2raqPf4+4XjJS5Y+6GP 6l3tNnkY8FZ2G6zIi9IceMKnSZV9smx8Qnz3kiamoZgkcMltdpXIVoJs1Q== -----END CERTIFICATE-----Generated at Sat Feb 21 14:59:02 2026 by rpki-client