$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/icG2ynFFLvijE3p5qmIjvyqi6c8.roa File: icG2ynFFLvijE3p5qmIjvyqi6c8.roa (raw, json) Hash identifier: pE1Vav3YK1lOCnx22+NTtPAze7prhiWGtH6PSOjzUNo= Subject key identifier: 89:C1:B6:CA:71:45:2E:F8:A3:13:7A:79:AA:62:23:BF:2A:A2:E9:CF Certificate issuer: /CN=3767DE73DD8A0E2A3FC2420DBB4851AF24B7D9F4 Certificate serial: 14 Authority key identifier: 37:67:DE:73:DD:8A:0E:2A:3F:C2:42:0D:BB:48:51:AF:24:B7:D9:F4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N2fec92KDio_wkINu0hRryS32fQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/icG2ynFFLvijE3p5qmIjvyqi6c8.roa Signing time: Fri 13 Nov 2026 08:10:37 +0000 ROA not before: Fri 13 Nov 2026 08:10:37 +0000 ROA not after: Fri 15 Oct 2027 01:30:02 +0000 asID: 2914 IP address blocks: 192.76.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/N2fec92KDio_wkINu0hRryS32fQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/N2fec92KDio_wkINu0hRryS32fQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N2fec92KDio_wkINu0hRryS32fQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3767DE73DD8A0E2A3FC2420DBB4851AF24B7D9F4 Validity Not Before: Nov 13 08:10:37 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=89C1B6CA71452EF8A3137A79AA6223BF2AA2E9CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:9e:eb:bc:cf:a6:ac:29:5e:1d:86:44:ca: 15:de:db:6e:02:a3:47:35:50:c3:86:89:11:16:89: c7:c1:78:22:55:ec:6f:e7:19:3d:41:34:ae:df:ff: 4e:ee:44:4a:ab:40:38:40:96:dc:0a:62:3d:2e:ab: d7:28:2b:95:3d:fc:ac:57:f3:47:81:f3:61:a9:59: c7:a0:b5:65:48:5a:b5:3c:05:3d:86:57:03:a3:c0: 60:bf:cc:ba:29:a8:77:5c:28:83:f1:97:1e:3d:18: b5:f5:02:0a:8a:91:7d:57:3d:68:a2:12:9f:3f:54: 87:40:bb:61:90:93:56:e2:71:24:4d:fa:a1:03:47: 79:ab:0e:12:c6:95:f8:d7:a2:4a:9f:85:2d:75:55: 75:4b:78:6d:8a:df:24:d9:10:91:d3:4c:3a:56:70: 4d:0b:78:b9:24:e9:54:1c:c1:53:45:f4:ed:1e:f4: fe:4e:93:67:95:e5:62:49:80:13:5a:58:0b:30:e3: 03:7f:c4:44:d2:b6:57:19:76:ca:6a:df:14:e8:cf: a2:5d:8e:26:4b:11:45:df:aa:dd:6f:c0:a9:f3:5d: 9a:c7:a2:df:2b:c8:d0:fa:4d:b5:e8:ce:ec:a2:67: 52:50:44:d8:de:8f:e2:ea:a6:69:66:84:16:b1:63: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:B6:CA:71:45:2E:F8:A3:13:7A:79:AA:62:23:BF:2A:A2:E9:CF X509v3 Authority Key Identifier: keyid:37:67:DE:73:DD:8A:0E:2A:3F:C2:42:0D:BB:48:51:AF:24:B7:D9:F4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/N2fec92KDio_wkINu0hRryS32fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N2fec92KDio_wkINu0hRryS32fQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/icG2ynFFLvijE3p5qmIjvyqi6c8.roa sbgp-ipAddrBlock: critical IPv4: 192.76.253.0/24 Signature Algorithm: sha256WithRSAEncryption 37:85:f1:5a:95:a5:46:d0:ac:36:10:0f:a5:08:a8:b2:5f:3d: 1f:f5:1f:f0:fd:21:46:ce:d7:97:fa:03:9c:fd:88:46:97:9e: a6:19:ad:9a:bf:3c:9e:ef:14:e0:f5:7b:43:b3:e2:f3:01:8d: 94:f1:02:71:b0:0c:24:71:f2:81:f8:2f:e5:ed:cf:b7:b7:50: 4a:4d:46:20:68:fc:b4:f6:d1:d3:72:35:96:8d:94:cd:04:7b: c8:6b:15:48:32:2d:15:8d:60:40:1e:b8:23:d3:70:57:3e:43: d7:5c:f7:29:c8:3f:8c:e1:5e:12:28:9c:ae:2c:2b:05:af:c6: 6c:52:d0:79:55:bf:0e:bd:fa:1a:b3:0c:c4:7b:3c:48:41:d0: 40:25:22:3d:9e:52:85:98:cf:af:af:67:75:52:89:ad:f0:b8: 1b:60:d7:bf:d8:4f:9a:44:04:4b:0e:71:b2:f8:3f:5d:2e:00: fe:7f:a1:ac:03:c8:c1:62:b7:69:f8:fc:07:fa:5a:d2:5f:16: 65:6c:32:f5:56:1d:67:d4:f3:40:20:41:9a:44:62:a6:63:ab: 9e:81:9a:3b:7b:1f:5c:13:85:02:be:90:90:e5:e1:58:6c:98: ae:fa:73:91:13:6e:6e:7e:5f:b1:99:96:03:1c:b1:c8:03:bb: 5d:55:23:3b -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNzY3 REU3M0REOEEwRTJBM0ZDMjQyMERCQjQ4NTFBRjI0QjdEOUY0MB4XDTI2MTExMzA4 MTAzN1oXDTI3MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoODlDMUI2Q0E3MTQ1MkVG OEEzMTM3QTc5QUE2MjIzQkYyQUEyRTlDRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANf1nuu8z6asKV4dhkTKFd7bbgKjRzVQw4aJERaJx8F4IlXsb+cZ PUE0rt//Tu5ESqtAOECW3ApiPS6r1ygrlT38rFfzR4HzYalZx6C1ZUhatTwFPYZX A6PAYL/Muimod1wog/GXHj0YtfUCCoqRfVc9aKISnz9Uh0C7YZCTVuJxJE36oQNH easOEsaV+NeiSp+FLXVVdUt4bYrfJNkQkdNMOlZwTQt4uSTpVBzBU0X07R70/k6T Z5XlYkmAE1pYCzDjA3/ERNK2Vxl2ymrfFOjPol2OJksRRd+q3W/AqfNdmsei3yvI 0PpNtejO7KJnUlBE2N6P4uqmaWaEFrFjrCUCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSJwbbKcUUu+KMTenmqYiO/KqLpzzAfBgNVHSMEGDAWgBQ3Z95z3YoOKj/CQg27 SFGvJLfZ9DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTkxL04yZmVjOTJLRGlvX3drSU51MGhScnlTMzJmUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL04yZmVjOTJLRGlvX3drSU51MGhScnlT MzJmUS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8xOTEvaWNHMnluRkZMdmlqRTNwNXFtSWp2eXFpNmM4LnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBM/TANBgkqhkiG9w0BAQsFAAOCAQEA N4XxWpWlRtCsNhAPpQiosl89H/Uf8P0hRs7Xl/oDnP2IRpeephmtmr88nu8U4PV7 Q7Pi8wGNlPECcbAMJHHygfgv5e3Pt7dQSk1GIGj8tPbR03I1lo2UzQR7yGsVSDIt FY1gQB64I9NwVz5D11z3Kcg/jOFeEiicriwrBa/GbFLQeVW/Dr36GrMMxHs8SEHQ QCUiPZ5ShZjPr69ndVKJrfC4G2DXv9hPmkQESw5xsvg/XS4A/n+hrAPIwWK3afj8 B/pa0l8WZWwy9VYdZ9TzQCBBmkRipmOrnoGaO3sfXBOFAr6QkOXhWGyYrvpzkRNu bn5fsZmWAxyxyAO7XVUjOw== -----END CERTIFICATE-----Generated at Sat Nov 14 22:23:52 2026 by rpki-client