$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/AGS3MXkzitA62osVkHTavScMYX0.roa File: AGS3MXkzitA62osVkHTavScMYX0.roa (raw, json) Hash identifier: /cOqZpwWo+c25unL6bEal7BOvGoeoCiwDhEZn3LyHwQ= Subject key identifier: 00:64:B7:31:79:33:8A:D0:3A:DA:8B:15:90:74:DA:BD:27:0C:61:7D Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D Certificate serial: C5 Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AGS3MXkzitA62osVkHTavScMYX0.roa Signing time: Thu 24 Sep 2026 00:41:56 +0000 ROA not before: Thu 24 Sep 2026 00:41:56 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 58325 IP address blocks: 133.157.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 10:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D Validity Not Before: Sep 24 00:41:56 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=0064B73179338AD03ADA8B159074DABD270C617D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:15:52:2c:d1:40:f7:06:13:72:ae:80:a1: d2:72:09:23:0f:1a:8c:b2:57:91:9f:2e:3a:b3:f1: ba:eb:d3:c4:d2:ef:76:21:8e:8d:c0:c1:74:23:0c: 8d:18:04:67:14:33:89:8a:09:d0:e5:d6:31:e2:98: 75:67:f6:c9:a9:97:f3:05:44:ae:ae:e3:b9:3c:29: 29:0a:ba:12:b5:8d:dc:a1:fe:c1:30:46:26:e4:63: 27:26:9c:a6:b6:90:61:1f:b3:f8:6f:57:99:ef:14: 17:15:1d:be:cc:67:ce:63:b1:c1:6b:69:d3:49:0d: c5:50:ff:9b:f1:11:77:81:53:d0:2e:e4:9e:48:15: ba:d6:58:5a:48:6f:54:5a:41:aa:76:24:e8:75:ef: ed:93:7e:b6:dd:81:20:b0:1f:28:33:6b:1e:9f:3f: af:b6:1c:37:9e:52:c7:f1:c0:cf:2a:c3:46:69:e8: 3f:ea:2f:99:53:a0:02:f9:df:c3:87:11:31:8a:65: aa:eb:37:9b:cb:58:b2:c6:65:56:c5:fa:14:5a:32: c9:2b:9e:e5:3b:e5:cb:f4:17:97:4c:f4:c7:e2:4c: 2b:9c:12:00:20:7d:6d:3f:6f:ab:93:93:c1:d2:15: aa:95:74:77:b4:aa:da:e8:2c:b1:ca:30:86:16:50: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:64:B7:31:79:33:8A:D0:3A:DA:8B:15:90:74:DA:BD:27:0C:61:7D X509v3 Authority Key Identifier: keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/AGS3MXkzitA62osVkHTavScMYX0.roa sbgp-ipAddrBlock: critical IPv4: 133.157.24.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:0d:5e:1d:5a:6f:e0:a6:46:96:60:41:e0:0e:e9:83:6d:91: f1:06:9f:01:6a:c2:3c:ad:3a:eb:de:0d:11:34:5b:f5:32:56: 25:99:b5:3f:dd:3d:f2:69:d7:c1:f2:7b:8a:69:d7:7b:f7:94: 1c:73:2f:d4:ad:f9:18:28:55:ec:34:cd:e5:a1:75:7e:83:ae: ed:79:60:3b:47:05:2d:c5:bf:84:83:cb:d0:e3:c4:36:75:0a: a2:52:f2:f8:8c:a5:9e:b7:5e:a4:c7:68:82:df:95:f1:86:64: ed:5b:cd:10:60:0e:ff:fa:a7:f5:91:71:de:f6:a1:b5:fe:97: d4:58:c3:80:9c:6f:c2:74:c8:fe:09:da:6c:ed:7e:33:2c:68: 25:e4:bc:3c:10:8e:dd:55:7d:88:5d:f1:6c:60:a3:34:63:b2: 31:5f:17:1c:50:8d:da:82:0c:55:b8:ff:d8:0b:38:5e:90:bd: d0:77:74:54:02:92:b9:4f:0b:20:70:f9:09:27:2d:a9:c1:71: c4:59:bd:86:12:f1:95:2b:92:f2:e2:5d:5d:13:26:d8:be:4f: f0:f7:a6:49:0f:24:b9:40:7f:46:b5:db:00:ac:79:b2:5c:7e: f1:58:2d:ca:74:b9:80:8e:66:a1:74:80:03:31:d3:1d:dc:2e: 9e:b5:a2:31 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Mx MTc5MjNBM0FFNkQxNDE2MEY1MDMxMTE1QUVENDRDQjREODI3RDAeFw0yNjA5MjQw MDQxNTZaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAwNjRCNzMxNzkzMzhB RDAzQURBOEIxNTkwNzREQUJEMjcwQzYxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC36RVSLNFA9wYTcq6AodJyCSMPGoyyV5GfLjqz8brr08TS73Yh jo3AwXQjDI0YBGcUM4mKCdDl1jHimHVn9smpl/MFRK6u47k8KSkKuhK1jdyh/sEw RibkYycmnKa2kGEfs/hvV5nvFBcVHb7MZ85jscFradNJDcVQ/5vxEXeBU9Au5J5I FbrWWFpIb1RaQap2JOh17+2TfrbdgSCwHygzax6fP6+2HDeeUsfxwM8qw0Zp6D/q L5lToAL538OHETGKZarrN5vLWLLGZVbF+hRaMskrnuU75cv0F5dM9MfiTCucEgAg fW0/b6uTk8HSFaqVdHe0qtroLLHKMIYWUExHAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUAGS3MXkzitA62osVkHTavScMYX0wHwYDVR0jBBgwFoAUfBF5I6OubRQWD1Ax EVrtRMtNgn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE5MS9mQkY1STZPdWJSUVdEMUF4RVZydFJNdE5nbjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQkY1STZPdWJSUVdEMUF4RVZydFJN dE5nbjAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTkxL0FHUzNNWGt6aXRBNjJvc1ZrSFRhdlNjTVlYMC5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKFnRgwDQYJKoZIhvcNAQELBQADggEB AHwNXh1ab+CmRpZgQeAO6YNtkfEGnwFqwjytOuveDRE0W/UyViWZtT/dPfJp18Hy e4pp13v3lBxzL9St+RgoVew0zeWhdX6Dru15YDtHBS3Fv4SDy9DjxDZ1CqJS8viM pZ63XqTHaILflfGGZO1bzRBgDv/6p/WRcd72obX+l9RYw4Ccb8J0yP4J2mztfjMs aCXkvDwQjt1VfYhd8WxgozRjsjFfFxxQjdqCDFW4/9gLOF6QvdB3dFQCkrlPCyBw +QknLanBccRZvYYS8ZUrkvLiXV0TJti+T/D3pkkPJLlAf0a12wCsebJcfvFYLcp0 uYCOZqF0gAMx0x3cLp61ojE= -----END CERTIFICATE-----Generated at Fri Sep 25 12:58:22 2026 by rpki-client