$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/OXkYiHT1sz1vC0nFqIu2ibVCvCw.roa File: OXkYiHT1sz1vC0nFqIu2ibVCvCw.roa (raw, json) Hash identifier: +c8Jdq2elNU6cvsySU60z/O4Vz/zpzQll2FyBjr6LZQ= Subject key identifier: 39:79:18:88:74:F5:B3:3D:6F:0B:49:C5:A8:8B:B6:89:B5:42:BC:2C Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: EC Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/OXkYiHT1sz1vC0nFqIu2ibVCvCw.roa Signing time: Wed 14 Oct 2026 09:16:52 +0000 ROA not before: Wed 14 Oct 2026 09:16:52 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 2497 IP address blocks: 133.157.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 14:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Oct 14 09:16:52 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=3979188874F5B33D6F0B49C5A88BB689B542BC2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:9d:5b:10:9f:dd:73:11:7e:7a:f0:3d:94: d2:90:62:4c:ff:c7:0a:5d:55:ab:3d:94:2f:7d:0d: 61:86:09:aa:f7:3f:42:15:35:3a:54:fe:5e:32:69: 1d:3a:81:e4:47:7e:41:f3:a4:f3:bd:a7:6d:61:10: 92:87:56:74:2b:05:0f:37:6d:06:7b:49:5f:8e:4d: 3e:1a:20:3e:6a:04:a1:8e:e5:0a:0e:55:e4:37:d8: c4:d8:fd:91:64:b8:6c:ec:55:2d:85:a5:7b:91:c0: 86:98:1e:28:ce:d6:49:0e:c4:c5:db:02:84:ba:b0: f7:b2:30:da:5c:90:58:92:63:a0:24:6e:35:47:85: f9:20:28:44:26:70:32:c5:65:98:47:bf:3b:22:c5: e2:1f:c5:4e:48:98:04:68:ca:a3:ec:64:7f:cc:a9: f0:41:4f:df:c3:f7:4b:a9:f4:68:78:f5:1e:ba:45: 5b:c8:66:bd:e6:55:e9:1e:18:6c:da:0b:c8:53:28: 17:19:f7:22:7e:42:e0:e5:a4:b1:7c:d9:fe:c3:b8: 20:e8:98:c1:aa:00:8d:31:1d:81:fa:0c:d3:17:29: 0b:49:6a:00:7c:9a:01:2c:65:8e:f2:25:5d:3a:74: 19:6f:ba:39:ae:5c:f7:be:7e:1c:ba:42:ff:e8:28: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:79:18:88:74:F5:B3:3D:6F:0B:49:C5:A8:8B:B6:89:B5:42:BC:2C X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/OXkYiHT1sz1vC0nFqIu2ibVCvCw.roa sbgp-ipAddrBlock: critical IPv4: 133.157.127.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:aa:5d:5b:c6:48:02:72:7a:8d:9c:b8:c4:53:98:83:64:c0: eb:93:99:87:ea:87:58:cb:ae:ee:28:ca:0f:15:f0:92:11:4a: 8f:08:b9:86:1b:02:22:ca:2f:1a:4d:11:cc:23:35:f2:0b:ef: 60:a8:0f:c0:e9:69:cb:f4:d3:8d:77:b6:88:9e:73:cd:51:f7: 86:f2:61:3e:f3:ee:fc:0a:47:ff:fa:b2:11:51:02:f6:98:0f: 5e:d7:0e:47:9d:db:2a:f7:fe:2d:f2:36:40:c4:7b:4a:77:b2: 3e:0b:4b:dd:d7:71:c4:f5:aa:0b:37:00:5d:ef:66:af:e5:59: b1:7b:ba:d2:73:fc:6b:2a:52:de:9f:79:fd:14:d1:5c:73:2d: 37:35:76:79:b9:95:63:1c:9a:03:ec:b5:89:5d:7e:78:39:4b: 73:0a:8f:c9:07:91:72:cd:2e:68:a2:f9:99:10:47:f2:38:ac: cc:45:52:eb:54:31:3a:39:43:88:2c:73:63:86:1e:e7:65:72: db:b4:45:de:32:2d:a4:c5:93:da:35:aa:60:f8:8c:b9:b6:78: aa:9f:90:c9:21:be:3a:9a:69:02:c7:48:ae:98:a8:64:d7:cc: 4c:28:42:c0:ba:73:9e:89:20:4d:95:01:9c:e7:da:71:30:8e: 45:b9:4c:0c -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjEwMTQw OTE2NTJaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5NzkxODg4NzRGNUIz M0Q2RjBCNDlDNUE4OEJCNjg5QjU0MkJDMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7ip1bEJ/dcxF+evA9lNKQYkz/xwpdVas9lC99DWGGCar3P0IV NTpU/l4yaR06geRHfkHzpPO9p21hEJKHVnQrBQ83bQZ7SV+OTT4aID5qBKGO5QoO VeQ32MTY/ZFkuGzsVS2FpXuRwIaYHijO1kkOxMXbAoS6sPeyMNpckFiSY6AkbjVH hfkgKEQmcDLFZZhHvzsixeIfxU5ImARoyqPsZH/MqfBBT9/D90up9Gh49R66RVvI Zr3mVekeGGzaC8hTKBcZ9yJ+QuDlpLF82f7DuCDomMGqAI0xHYH6DNMXKQtJagB8 mgEsZY7yJV06dBlvujmuXPe+fhy6Qv/oKHN9AgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUOXkYiHT1sz1vC0nFqIu2ibVCvCwwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL09Ya1lpSFQxc3oxdkMwbkZxSXUyaWJWQ3ZDdy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnX8wDQYJKoZIhvcNAQELBQADggEB AEqqXVvGSAJyeo2cuMRTmINkwOuTmYfqh1jLru4oyg8V8JIRSo8IuYYbAiLKLxpN EcwjNfIL72CoD8Dpacv00413toiec81R94byYT7z7vwKR//6shFRAvaYD17XDked 2yr3/i3yNkDEe0p3sj4LS93XccT1qgs3AF3vZq/lWbF7utJz/GsqUt6fef0U0Vxz LTc1dnm5lWMcmgPstYldfng5S3MKj8kHkXLNLmii+ZkQR/I4rMxFUutUMTo5Q4gs c2OGHudlctu0Rd4yLaTFk9o1qmD4jLm2eKqfkMkhvjqaaQLHSK6YqGTXzEwoQsC6 c56JIE2VAZzn2nEwjkW5TAw= -----END CERTIFICATE-----Generated at Thu Nov 5 17:24:45 2026 by rpki-client