$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/kiBlysm9qcx5gMvHpoUU_g_NbaI.roa File: kiBlysm9qcx5gMvHpoUU_g_NbaI.roa (raw, json) Hash identifier: 7T6gSaimEh0o0EGXN65p/4nQiCcvi06+YpoRkMVgcD4= Subject key identifier: 92:20:65:CA:C9:BD:A9:CC:79:80:CB:C7:A6:85:14:FE:0F:CD:6D:A2 Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 72 Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/kiBlysm9qcx5gMvHpoUU_g_NbaI.roa Signing time: Thu 05 Nov 2026 01:22:29 +0000 ROA not before: Thu 05 Nov 2026 01:22:29 +0000 ROA not after: Fri 15 Oct 2027 01:30:02 +0000 asID: 2514 IP address blocks: 218.228.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: Nov 5 01:22:29 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=922065CAC9BDA9CC7980CBC7A68514FE0FCD6DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9b:bb:42:9b:4b:38:6d:57:8a:ee:d3:98:fe: 42:52:a6:b6:42:b2:7a:88:9f:2d:93:66:78:54:9c: f3:e9:d7:12:e1:de:76:03:e2:29:6f:7d:03:28:fb: 61:2c:81:76:75:8f:6d:4d:fa:0a:bc:af:30:a1:f7: 78:bf:a8:6b:0d:ca:d7:dc:a9:ff:45:12:94:0c:d8: d9:39:c7:36:05:20:3e:ee:b9:8e:5f:4f:f8:a1:3c: 40:65:e6:29:07:79:b0:02:76:95:2f:73:c6:e5:6e: b4:80:75:6c:56:12:27:2c:af:c1:2f:78:f2:fd:6d: 8d:8b:da:36:61:8f:09:44:39:31:d7:d8:c1:2f:09: 42:54:a2:7a:e3:72:94:ed:55:93:68:a2:fe:f8:41: d4:5a:b6:96:6d:3d:8c:24:99:a8:63:f1:ee:a7:e9: 57:1d:c1:e1:b8:70:eb:c7:9d:59:34:5b:03:db:36: 4b:6f:53:c9:df:bc:8e:b3:80:a4:6a:00:31:13:91: c9:f8:86:d5:a9:9c:80:6b:d2:ed:27:f6:84:48:26: 50:8c:64:b3:57:fb:1e:d1:28:21:b6:7a:1d:90:d3: a5:69:70:a3:fe:c2:5f:0f:e5:8e:2c:33:63:39:08: 0b:3d:fd:2b:13:93:12:ec:b2:5d:f6:4f:fa:2f:76: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:20:65:CA:C9:BD:A9:CC:79:80:CB:C7:A6:85:14:FE:0F:CD:6D:A2 X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/kiBlysm9qcx5gMvHpoUU_g_NbaI.roa sbgp-ipAddrBlock: critical IPv4: 218.228.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:3e:8d:80:ff:f0:b4:63:5a:8c:96:2b:94:90:cb:31:14:8f: 88:69:17:85:af:d3:35:18:16:0b:43:ed:03:02:eb:1b:b1:8d: 45:72:6a:47:a0:6b:5c:ca:6f:bf:4b:3d:70:04:3e:28:0b:11: 8d:ed:03:33:82:3c:31:cc:b3:a9:24:50:22:64:55:6d:61:20: 0d:1f:7c:01:b6:08:24:b1:82:c8:04:53:eb:ab:88:f6:f7:11: 71:55:12:7c:ae:39:00:a1:17:27:ae:ca:ac:36:2d:74:a6:37: 3c:5c:78:13:47:4d:72:e7:fc:fd:cf:d8:b8:ad:a9:34:b2:c4: 75:4f:7e:66:7f:b9:7a:03:58:19:90:44:a2:d4:94:81:b5:e7: bd:c5:f9:f5:22:d4:48:ce:05:da:7a:fb:9f:37:ac:77:50:70: 21:f3:c5:ee:e1:84:c8:d8:76:55:50:c5:d5:48:cc:7e:67:ee: 7f:91:91:03:ff:47:1d:09:36:23:98:71:3a:60:4a:a5:0e:be: 1a:34:17:8c:b2:96:97:86:22:1e:a2:40:f6:00:8e:0e:61:b8: 4b:05:7c:03:60:57:ac:7c:5e:29:f9:aa:9a:13:8a:44:7b:96: be:33:10:1f:c3:3d:1d:c8:64:ee:d4:0d:a1:38:3d:64:a2:04: 7b:67:ec:c7 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI2MTEwNTAx MjIyOVoXDTI3MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoOTIyMDY1Q0FDOUJEQTlD Qzc5ODBDQkM3QTY4NTE0RkUwRkNENkRBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANebu0KbSzhtV4ru05j+QlKmtkKyeoifLZNmeFSc8+nXEuHedgPi KW99Ayj7YSyBdnWPbU36CryvMKH3eL+oaw3K19yp/0USlAzY2TnHNgUgPu65jl9P +KE8QGXmKQd5sAJ2lS9zxuVutIB1bFYSJyyvwS948v1tjYvaNmGPCUQ5MdfYwS8J QlSieuNylO1Vk2ii/vhB1Fq2lm09jCSZqGPx7qfpVx3B4bhw68edWTRbA9s2S29T yd+8jrOApGoAMRORyfiG1amcgGvS7Sf2hEgmUIxks1f7HtEoIbZ6HZDTpWlwo/7C Xw/ljiwzYzkICz39KxOTEuyyXfZP+i926ncCAwEAAaOCAdkwggHVMB0GA1UdDgQW BBSSIGXKyb2pzHmAy8emhRT+D81tojAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC8yMzIva2lCbHlzbTlxY3g1Z012SHBvVVVfZ19OYmFJLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANrkFDANBgkqhkiG9w0BAQsFAAOCAQEA az6NgP/wtGNajJYrlJDLMRSPiGkXha/TNRgWC0PtAwLrG7GNRXJqR6BrXMpvv0s9 cAQ+KAsRje0DM4I8McyzqSRQImRVbWEgDR98AbYIJLGCyART66uI9vcRcVUSfK45 AKEXJ67KrDYtdKY3PFx4E0dNcuf8/c/YuK2pNLLEdU9+Zn+5egNYGZBEotSUgbXn vcX59SLUSM4F2nr7nzesd1BwIfPF7uGEyNh2VVDF1UjMfmfuf5GRA/9HHQk2I5hx OmBKpQ6+GjQXjLKWl4YiHqJA9gCODmG4SwV8A2BXrHxeKfmqmhOKRHuWvjMQH8M9 Hchk7tQNoTg9ZKIEe2fsxw== -----END CERTIFICATE-----Generated at Sun Nov 15 11:35:07 2026 by rpki-client