$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/lnIbWoUR_YD3S9iK2PSDpmMO2Fc.roa File: lnIbWoUR_YD3S9iK2PSDpmMO2Fc.roa (raw, json) Hash identifier: X8XCiGDIKjrITqC8hLr8vzti2V4uzSOGdBbD42lcsUE= Subject key identifier: 96:72:1B:5A:85:11:FD:80:F7:4B:D8:8A:D8:F4:83:A6:63:0E:D8:57 Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: D8 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/lnIbWoUR_YD3S9iK2PSDpmMO2Fc.roa Signing time: Wed 14 Oct 2026 09:06:57 +0000 ROA not before: Wed 14 Oct 2026 09:06:57 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 2914 IP address blocks: 133.157.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Nov 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Oct 14 09:06:57 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=96721B5A8511FD80F74BD88AD8F483A6630ED857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:dc:6b:97:2c:ae:49:49:77:45:78:73:88: 6a:8d:1c:e4:04:0b:9f:cf:e6:32:62:b4:c2:d5:0c: 20:0e:95:a0:82:f3:da:5b:4b:09:00:da:07:73:a5: a5:d3:77:8e:6f:6b:5c:b7:ea:b2:03:0e:03:22:77: 70:29:73:09:7d:67:70:ef:a4:25:a4:6b:ff:42:68: f5:0c:e1:59:a4:68:cc:10:96:b5:76:5d:48:d6:85: cd:65:c4:82:68:77:19:f4:f6:90:72:c2:03:fc:4e: 8d:ce:bd:96:15:05:22:d3:03:9c:87:53:f8:c5:e0: af:09:4f:e3:16:e2:94:72:3e:e8:78:27:9d:79:ab: bc:c2:41:09:11:b3:00:6d:7b:aa:84:65:7c:c6:06: 53:a5:95:b2:c7:c1:b2:37:61:82:f7:36:62:bc:55: 0d:8d:8e:e5:2b:9b:df:ba:ae:c5:ed:25:a3:cc:ef: 74:e0:32:92:c7:74:f4:65:2d:4e:e6:2b:c3:d6:8b: 8b:83:4a:34:10:c8:71:ca:ac:48:fa:10:0f:4d:99: 91:f0:6b:97:d8:1e:2f:2c:d5:38:2d:eb:df:65:4a: e4:bf:28:5b:e4:46:e9:47:62:af:e1:76:eb:47:b3: b3:a3:dd:08:3a:70:42:0a:96:9b:70:89:09:45:24: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:72:1B:5A:85:11:FD:80:F7:4B:D8:8A:D8:F4:83:A6:63:0E:D8:57 X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/lnIbWoUR_YD3S9iK2PSDpmMO2Fc.roa sbgp-ipAddrBlock: critical IPv4: 133.157.120.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:16:a4:94:a0:fd:8e:33:c9:3e:10:1a:09:13:0b:bd:a5:8d: 64:d8:f0:c9:3a:0f:71:c0:61:e3:36:71:3e:df:72:0c:1e:6c: 93:da:33:77:87:56:c0:8b:df:ce:d5:d2:f5:6d:fc:35:b6:36: 99:91:37:59:a8:a7:a8:b7:92:82:1d:d8:4d:d1:e1:dc:16:ef: 9b:21:3c:7e:20:8b:47:be:fa:b7:12:1a:e5:03:e4:13:66:8b: 1d:68:39:a6:a3:83:e9:ca:1a:c7:22:2d:eb:6b:da:9b:b1:5c: 17:78:a2:97:71:aa:72:04:1a:30:5f:d0:02:81:47:5e:5d:df: f4:a5:44:94:25:47:d8:e7:5e:d8:2c:97:06:a9:cb:ad:80:01: 16:1e:f8:63:ef:ad:fd:ae:d4:99:ac:77:47:ab:f6:9c:0f:59: 51:42:50:9e:d9:e0:cc:41:57:8b:15:28:ea:9c:99:48:43:87: ff:50:a1:6d:9c:1b:7b:94:19:68:61:24:5a:b8:86:b7:7d:42: 32:4a:7f:09:f3:e8:5d:69:c6:eb:32:77:7a:73:2a:71:c9:10: ad:86:5f:4a:54:21:0d:80:a6:5e:b4:08:32:af:b6:d5:fb:c5: 64:b2:ce:7e:2f:35:73:67:6c:6d:ab:d5:f7:c5:90:40:c7:fa: fb:8d:9a:c1 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjEwMTQw OTA2NTdaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk2NzIxQjVBODUxMUZE ODBGNzRCRDg4QUQ4RjQ4M0E2NjMwRUQ4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPTtxrlyyuSUl3RXhziGqNHOQEC5/P5jJitMLVDCAOlaCC89pb SwkA2gdzpaXTd45va1y36rIDDgMid3Apcwl9Z3DvpCWka/9CaPUM4VmkaMwQlrV2 XUjWhc1lxIJodxn09pBywgP8To3OvZYVBSLTA5yHU/jF4K8JT+MW4pRyPuh4J515 q7zCQQkRswBte6qEZXzGBlOllbLHwbI3YYL3NmK8VQ2NjuUrm9+6rsXtJaPM73Tg MpLHdPRlLU7mK8PWi4uDSjQQyHHKrEj6EA9NmZHwa5fYHi8s1Tgt699lSuS/KFvk RulHYq/hdutHs7Oj3Qg6cEIKlptwiQlFJEvPAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUlnIbWoUR/YD3S9iK2PSDpmMO2FcwHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL2xuSWJXb1VSX1lEM1M5aUsyUFNEcG1NTzJGYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACFnXgwDQYJKoZIhvcNAQELBQADggEB AC4WpJSg/Y4zyT4QGgkTC72ljWTY8Mk6D3HAYeM2cT7fcgwebJPaM3eHVsCL387V 0vVt/DW2NpmRN1mop6i3koId2E3R4dwW75shPH4gi0e++rcSGuUD5BNmix1oOaaj g+nKGsciLetr2puxXBd4opdxqnIEGjBf0AKBR15d3/SlRJQlR9jnXtgslwapy62A ARYe+GPvrf2u1Jmsd0er9pwPWVFCUJ7Z4MxBV4sVKOqcmUhDh/9QoW2cG3uUGWhh JFq4hrd9QjJKfwnz6F1pxusyd3pzKnHJEK2GX0pUIQ2Apl60CDKvttX7xWSyzn4v NXNnbG2r1ffFkEDH+vuNmsE= -----END CERTIFICATE-----Generated at Tue Nov 10 07:09:20 2026 by rpki-client