$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/IP5a4-aBWI1EIXaQ95n4zWWLLK4.roa File: IP5a4-aBWI1EIXaQ95n4zWWLLK4.roa (raw, json) Hash identifier: nJH80vxDdKyJCO7N0LGUeMXRmxasW/nekLRXg4SK+ow= Subject key identifier: 20:FE:5A:E3:E6:81:58:8D:44:21:76:90:F7:99:F8:CD:65:8B:2C:AE Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: DF Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/IP5a4-aBWI1EIXaQ95n4zWWLLK4.roa Signing time: Wed 14 Oct 2026 09:11:21 +0000 ROA not before: Wed 14 Oct 2026 09:11:21 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 7529 IP address blocks: 133.157.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 15:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Oct 14 09:11:21 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=20FE5AE3E681588D44217690F799F8CD658B2CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:39:07:ba:ec:95:bc:6c:bb:ef:07:f9:00: 1f:fd:95:ee:54:02:56:67:bc:97:0f:cf:10:17:99: 50:f9:77:d7:92:11:d7:6b:9c:6b:06:13:7c:71:e3: 04:30:3f:6f:8d:b9:05:90:50:95:4a:26:cd:7f:32: 76:25:6c:5e:b6:df:f8:2b:4a:29:cd:0f:7e:d2:2f: c5:00:48:51:2e:6e:1f:5b:dc:97:0b:d3:30:08:57: 52:2e:8a:4d:13:28:45:89:71:4c:d7:31:4d:70:5e: 70:c6:74:cb:43:45:a0:8d:be:d2:22:48:3b:70:1e: b6:d7:73:dd:95:4a:70:fb:c2:43:14:8b:47:37:85: d4:2b:0a:64:59:ca:65:78:92:47:34:ac:d3:88:af: e2:33:22:42:e2:b2:95:50:a9:98:b6:85:60:2c:08: ec:54:d1:bf:e8:e8:d9:f9:d0:ff:83:33:54:51:bc: e6:fd:6f:d2:c9:dc:ab:b7:71:d6:47:b3:a1:27:67: fa:2a:50:65:5b:36:5c:43:a9:7e:89:77:53:c7:76: 29:18:01:47:59:1e:24:4d:de:5a:d3:de:c9:20:e0: e3:3d:4c:53:75:ee:5c:8c:cc:03:0c:f9:e5:58:a5: bd:a0:de:97:78:ca:c4:bd:2c:70:14:2d:9f:d8:4e: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FE:5A:E3:E6:81:58:8D:44:21:76:90:F7:99:F8:CD:65:8B:2C:AE X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/IP5a4-aBWI1EIXaQ95n4zWWLLK4.roa sbgp-ipAddrBlock: critical IPv4: 133.157.123.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:3e:6e:96:5d:83:25:2b:e1:bd:ab:33:e2:ee:1c:16:bd:f4: a9:89:e4:4a:3b:9d:d2:ea:83:27:02:73:81:67:6c:6e:f0:eb: b2:b2:96:3e:9e:ec:67:44:99:0e:68:9a:16:9d:a9:a5:14:71: aa:52:04:72:5e:69:60:ee:51:b5:54:d4:38:82:65:38:10:51: 2c:2c:36:2f:8b:d2:33:cd:1f:53:8a:0d:c6:d9:6a:15:e8:88: cf:9f:a1:29:9d:45:f7:79:57:03:6f:7d:85:10:8e:0f:46:04: 9b:30:59:50:49:03:01:58:0d:96:45:64:1d:64:7d:62:e1:7d: 3a:51:14:f0:aa:3c:90:f0:9c:06:42:c0:a8:81:50:7a:f4:a5: 15:52:ec:6f:31:b5:21:8f:25:43:ce:e9:21:8b:e6:31:26:19: 3a:93:ea:e5:5c:16:81:1b:fb:a6:6c:54:86:fb:dd:16:6e:8e: b2:ab:97:8c:8e:d5:e6:4a:3b:02:be:17:06:60:e3:d9:02:68: 3e:6a:c1:a9:03:3a:54:48:d7:ba:ef:a3:c7:b6:68:47:b3:ef: 06:e9:da:3b:36:be:c3:f2:ff:d1:62:a8:3d:90:8e:b6:b0:03: 3e:0a:1f:ad:61:fd:cb:6c:e2:cf:b9:38:75:b2:bd:d6:e3:5b: e8:68:33:b0 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjEwMTQw OTExMjFaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwRkU1QUUzRTY4MTU4 OEQ0NDIxNzY5MEY3OTlGOENENjU4QjJDQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX0TkHuuyVvGy77wf5AB/9le5UAlZnvJcPzxAXmVD5d9eSEddr nGsGE3xx4wQwP2+NuQWQUJVKJs1/MnYlbF623/grSinND37SL8UASFEubh9b3JcL 0zAIV1Iuik0TKEWJcUzXMU1wXnDGdMtDRaCNvtIiSDtwHrbXc92VSnD7wkMUi0c3 hdQrCmRZymV4kkc0rNOIr+IzIkLispVQqZi2hWAsCOxU0b/o6Nn50P+DM1RRvOb9 b9LJ3Ku3cdZHs6EnZ/oqUGVbNlxDqX6Jd1PHdikYAUdZHiRN3lrT3skg4OM9TFN1 7lyMzAMM+eVYpb2g3pd4ysS9LHAULZ/YTsdLAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIP5a4+aBWI1EIXaQ95n4zWWLLK4wHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL0lQNWE0LWFCV0kxRUlYYVE5NW40eldXTExLNC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnXswDQYJKoZIhvcNAQELBQADggEB AIo+bpZdgyUr4b2rM+LuHBa99KmJ5Eo7ndLqgycCc4FnbG7w67Kylj6e7GdEmQ5o mhadqaUUcapSBHJeaWDuUbVU1DiCZTgQUSwsNi+L0jPNH1OKDcbZahXoiM+foSmd Rfd5VwNvfYUQjg9GBJswWVBJAwFYDZZFZB1kfWLhfTpRFPCqPJDwnAZCwKiBUHr0 pRVS7G8xtSGPJUPO6SGL5jEmGTqT6uVcFoEb+6ZsVIb73RZujrKrl4yO1eZKOwK+ FwZg49kCaD5qwakDOlRI17rvo8e2aEez7wbp2js2vsPy/9FiqD2QjrawAz4KH61h /cts4s+5OHWyvdbjW+hoM7A= -----END CERTIFICATE-----Generated at Thu Nov 5 19:04:56 2026 by rpki-client