$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/833/QLp6i5QpwlLnEl9IPxIXX-Vr5Ko.roa File: QLp6i5QpwlLnEl9IPxIXX-Vr5Ko.roa (raw, json) Hash identifier: tDr0FxVrpkeIQiRfmk6G+IZ39PZmcNqL1pp7Ex6a5BE= Subject key identifier: 40:BA:7A:8B:94:29:C2:52:E7:12:5F:48:3F:12:17:5F:E5:6B:E4:AA Certificate issuer: /CN=0D3BC2E4E3FE818E8EF64BF2F0414CF88AF82D82 Certificate serial: 2A Authority key identifier: 0D:3B:C2:E4:E3:FE:81:8E:8E:F6:4B:F2:F0:41:4C:F8:8A:F8:2D:82 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/QLp6i5QpwlLnEl9IPxIXX-Vr5Ko.roa Signing time: Tue 25 Aug 2026 01:19:40 +0000 ROA not before: Tue 25 Aug 2026 01:19:40 +0000 ROA not after: Sun 15 Aug 2027 01:30:02 +0000 asID: 23629 IP address blocks: 27.131.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 16:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3BC2E4E3FE818E8EF64BF2F0414CF88AF82D82 Validity Not Before: Aug 25 01:19:40 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=40BA7A8B9429C252E7125F483F12175FE56BE4AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:60:2b:dd:bc:3d:21:8b:8c:0d:3a:0b:ac: ee:ad:41:6d:67:07:95:72:a8:16:1b:92:13:9d:8c: 36:f6:37:10:b7:16:6d:ae:bb:f3:57:b9:19:1a:31: d0:e4:2c:62:60:b7:d2:dc:5a:c9:0c:b5:a8:0d:9c: 65:d6:75:fe:e8:ff:2a:f9:3a:29:6b:29:70:6c:02: 28:f1:8a:31:72:95:0e:33:df:15:13:7e:31:85:c5: 98:52:98:ba:7e:2e:b7:0d:42:e6:f4:b2:4f:9a:4c: e4:83:b9:b7:94:70:7c:86:24:4c:04:fa:f7:41:19: 69:21:dc:f5:bd:38:16:30:65:24:a1:09:d0:09:57: 14:f9:db:6a:d4:df:eb:cf:ee:fa:a9:1e:d2:ba:81: ca:07:1a:34:82:c2:c6:a7:f9:d7:95:bc:97:57:f4: 4a:39:ec:fd:75:70:cd:91:bf:55:31:22:cf:fd:e1: 78:a2:14:21:59:76:eb:5d:19:75:fa:d5:2b:3c:8f: 0e:7e:b8:06:d7:f7:53:65:af:53:8b:92:b3:62:24: 14:fd:11:e7:a8:93:90:06:74:65:92:ee:cf:14:84: f9:b4:04:f7:dc:4a:8f:35:1d:13:dc:11:fb:2a:59: 7a:90:3b:32:05:b8:88:b8:ce:25:e2:ab:2f:20:55: d6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BA:7A:8B:94:29:C2:52:E7:12:5F:48:3F:12:17:5F:E5:6B:E4:AA X509v3 Authority Key Identifier: keyid:0D:3B:C2:E4:E3:FE:81:8E:8E:F6:4B:F2:F0:41:4C:F8:8A:F8:2D:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/QLp6i5QpwlLnEl9IPxIXX-Vr5Ko.roa sbgp-ipAddrBlock: critical IPv4: 27.131.16.0/20 Signature Algorithm: sha256WithRSAEncryption 35:c1:5c:96:eb:f2:11:c2:a3:72:61:6c:6d:51:d6:f9:65:14: 8a:91:cd:39:35:3b:31:15:e6:33:df:0a:f7:57:2d:58:58:c0: 79:cb:58:fe:2f:71:d6:45:db:6e:b6:ac:da:25:13:1d:08:9c: 03:a6:81:96:25:9c:2f:21:8d:ab:84:92:48:2e:cc:dd:f8:48: 3e:a2:6b:54:38:d6:1c:85:43:ae:40:f4:1a:23:aa:b0:81:09: d8:d6:a5:24:ad:9c:05:46:e0:be:55:56:27:35:22:82:43:d4: fb:d8:36:65:ff:ff:f2:ac:89:84:23:94:a0:9f:88:83:4c:d7: a0:16:12:84:7d:d6:6e:49:8c:7c:34:f1:bb:3a:dc:6d:3e:35: a3:3a:ef:1b:09:87:d5:e3:af:77:1b:a2:81:88:19:cf:92:2e: 57:c9:07:74:43:d9:11:11:fe:f2:97:c6:e2:9c:0c:d6:5b:09: c2:9d:62:e1:fa:09:6a:d4:7e:cf:d6:1e:3c:34:c4:2a:fc:49: 42:51:80:dd:b8:00:3c:c4:3a:55:41:7d:40:5c:e0:7b:b9:c1: b0:87:28:90:29:d1:6d:4a:06:cb:b3:3a:60:f9:7d:dc:b5:da: 7c:6e:6e:de:09:0f:d0:8e:65:34:8f:9a:c3:f7:4c:5d:a6:d1: 71:b5:99:96 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDNC QzJFNEUzRkU4MThFOEVGNjRCRjJGMDQxNENGODhBRjgyRDgyMB4XDTI2MDgyNTAx MTk0MFoXDTI3MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNDBCQTdBOEI5NDI5QzI1 MkU3MTI1RjQ4M0YxMjE3NUZFNTZCRTRBQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALbyYCvdvD0hi4wNOgus7q1BbWcHlXKoFhuSE52MNvY3ELcWba67 81e5GRox0OQsYmC30txayQy1qA2cZdZ1/uj/Kvk6KWspcGwCKPGKMXKVDjPfFRN+ MYXFmFKYun4utw1C5vSyT5pM5IO5t5RwfIYkTAT690EZaSHc9b04FjBlJKEJ0AlX FPnbatTf68/u+qke0rqBygcaNILCxqf515W8l1f0Sjns/XVwzZG/VTEiz/3heKIU IVl2610ZdfrVKzyPDn64Btf3U2WvU4uSs2IkFP0R56iTkAZ0ZZLuzxSE+bQE99xK jzUdE9wR+ypZepA7MgW4iLjOJeKrLyBV1lMCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBRAunqLlCnCUucSX0g/Ehdf5WvkqjAfBgNVHSMEGDAWgBQNO8Lk4/6Bjo72S/Lw QUz4ivgtgjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODMzL0RUdkM1T1AtZ1k2Tzlrdnk4RUZNLUlyNExZSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RUdkM1T1AtZ1k2Tzlrdnk4RUZNLUly NExZSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC84MzMvUUxwNmk1UXB3bExuRWw5SVB4SVhYLVZyNUtvLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBuDEDANBgkqhkiG9w0BAQsFAAOCAQEA NcFcluvyEcKjcmFsbVHW+WUUipHNOTU7MRXmM98K91ctWFjAectY/i9x1kXbbras 2iUTHQicA6aBliWcLyGNq4SSSC7M3fhIPqJrVDjWHIVDrkD0GiOqsIEJ2NalJK2c BUbgvlVWJzUigkPU+9g2Zf//8qyJhCOUoJ+Ig0zXoBYShH3WbkmMfDTxuzrcbT41 ozrvGwmH1eOvdxuigYgZz5IuV8kHdEPZERH+8pfG4pwM1lsJwp1i4foJatR+z9Ye PDTEKvxJQlGA3bgAPMQ6VUF9QFzge7nBsIcokCnRbUoGy7M6YPl93LXafG5u3gkP 0I5lNI+aw/dMXabRcbWZlg== -----END CERTIFICATE-----Generated at Mon Sep 21 20:50:04 2026 by rpki-client