$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/900/KSW4Lxth-PyjCzv_fhshe4IJJi0.roa File: KSW4Lxth-PyjCzv_fhshe4IJJi0.roa (raw, json) Hash identifier: qxH+TnfEzyKNP1j+yaHsOV3XHCo89EvNTZVF+gS3GeM= Subject key identifier: 29:25:B8:2F:1B:61:F8:FC:A3:0B:3B:FF:7E:1B:21:7B:82:09:26:2D Certificate issuer: /CN=5A79FC72D56CF387050F65AC6FF315EA92D5D651 Certificate serial: 31 Authority key identifier: 5A:79:FC:72:D5:6C:F3:87:05:0F:65:AC:6F:F3:15:EA:92:D5:D6:51 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/KSW4Lxth-PyjCzv_fhshe4IJJi0.roa Signing time: Wed 23 Sep 2026 07:29:19 +0000 ROA not before: Wed 23 Sep 2026 07:29:19 +0000 ROA not after: Wed 15 Sep 2027 01:30:02 +0000 asID: 24249 IP address blocks: 125.214.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 10:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A79FC72D56CF387050F65AC6FF315EA92D5D651 Validity Not Before: Sep 23 07:29:19 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=2925B82F1B61F8FCA30B3BFF7E1B217B8209262D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:6d:17:6b:50:06:4e:86:4b:c4:59:cc:39: a4:54:94:fe:bf:52:24:76:ba:40:ae:0e:9b:8c:13: 45:ac:0b:fa:97:c8:4b:3d:5c:f2:8b:b8:94:1b:51: 86:77:0b:a7:cb:7d:3d:b3:16:e5:e2:fe:bf:93:fe: ac:c5:88:22:92:6e:b0:65:c3:d7:2a:53:01:a6:70: 2b:4e:35:af:13:a6:2a:e6:3c:a2:1a:bf:b5:ee:ae: ba:42:79:c4:0f:5a:3b:bb:24:d8:3b:e4:50:ae:61: 14:2e:66:28:b8:aa:58:82:51:23:6d:18:89:75:0e: a8:6c:88:31:82:9b:dd:30:9c:64:e2:7b:d5:2a:ff: 15:79:64:18:a7:39:70:70:6a:23:b0:cc:4d:8e:4b: 80:46:b2:13:86:05:e8:f3:5e:5d:31:f5:0c:19:5c: b0:04:88:8c:51:42:b0:ca:ba:b2:4f:eb:0c:fd:78: eb:6e:c3:3b:3d:af:9e:dd:8a:0a:94:96:11:9a:01: 9a:f0:9f:0e:4f:98:69:a1:17:5f:a7:02:0a:22:c6: d8:8f:84:dc:dd:93:d6:ff:ad:f2:6d:f8:2d:ba:f1: b7:55:b7:5b:4f:ce:61:92:e7:01:ed:46:8d:97:d4: 34:02:58:ff:88:28:3b:82:d8:bb:18:83:98:05:5d: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:25:B8:2F:1B:61:F8:FC:A3:0B:3B:FF:7E:1B:21:7B:82:09:26:2D X509v3 Authority Key Identifier: keyid:5A:79:FC:72:D5:6C:F3:87:05:0F:65:AC:6F:F3:15:EA:92:D5:D6:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/KSW4Lxth-PyjCzv_fhshe4IJJi0.roa sbgp-ipAddrBlock: critical IPv4: 125.214.128.0/19 Signature Algorithm: sha256WithRSAEncryption 19:c0:32:9a:a0:aa:4c:cb:c3:0c:ce:55:70:91:37:d6:3b:1c: 6e:cd:bf:c5:0e:26:39:27:54:03:85:39:24:07:eb:06:64:e7: 1c:74:f0:aa:01:95:a2:a0:25:47:e3:01:11:32:c0:38:dc:ed: bc:e7:f2:05:02:79:e4:ad:e4:a2:a2:f2:4e:88:3b:05:aa:bb: 90:0d:1e:32:46:c4:34:c1:67:0c:56:b4:94:e2:6e:ba:9c:79: 8d:e8:8e:0d:b7:ba:c4:04:22:99:61:80:79:8f:c9:4a:8a:f4: 5a:5a:ab:2f:fe:33:b2:7c:46:f9:09:74:12:3f:42:ba:d2:aa: 61:df:78:85:db:53:48:5e:2a:e3:16:c4:83:23:91:00:86:79: 46:b1:25:a4:10:50:2e:1f:77:7f:f4:7e:6d:e7:f7:59:56:a6: c7:ad:11:bd:d6:47:17:ee:49:f1:2d:5c:28:74:20:c8:93:94: ab:8c:99:32:dc:31:46:70:00:ed:35:ba:67:db:a0:f4:04:0a: 39:e9:c0:ca:c7:f1:b4:8b:ba:ce:72:93:c2:9e:04:77:d6:0b: 36:c9:91:78:5f:d1:ce:77:1f:55:36:b7:23:71:78:c7:b8:db: dd:f0:d1:18:96:ea:f4:e5:18:ae:dc:f9:66:51:dc:79:9b:b7: 57:8b:7d:60 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTc5 RkM3MkQ1NkNGMzg3MDUwRjY1QUM2RkYzMTVFQTkyRDVENjUxMB4XDTI2MDkyMzA3 MjkxOVoXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMjkyNUI4MkYxQjYxRjhG Q0EzMEIzQkZGN0UxQjIxN0I4MjA5MjYyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL2CbRdrUAZOhkvEWcw5pFSU/r9SJHa6QK4Om4wTRawL+pfISz1c 8ou4lBtRhncLp8t9PbMW5eL+v5P+rMWIIpJusGXD1ypTAaZwK041rxOmKuY8ohq/ te6uukJ5xA9aO7sk2DvkUK5hFC5mKLiqWIJRI20YiXUOqGyIMYKb3TCcZOJ71Sr/ FXlkGKc5cHBqI7DMTY5LgEayE4YF6PNeXTH1DBlcsASIjFFCsMq6sk/rDP14627D Oz2vnt2KCpSWEZoBmvCfDk+YaaEXX6cCCiLG2I+E3N2T1v+t8m34Lbrxt1W3W0/O YZLnAe1GjZfUNAJY/4goO4LYuxiDmAVdzBECAwEAAaOCAdkwggHVMB0GA1UdDgQW BBQpJbgvG2H4/KMLO/9+GyF7ggkmLTAfBgNVHSMEGDAWgBRaefxy1WzzhwUPZaxv 8xXqktXWUTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTAwL1dubjhjdFZzODRjRkQyV3NiX01WNnBMVjFsRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dubjhjdFZzODRjRkQyV3NiX01WNnBM VjFsRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3 MzgxMDAwMC85MDAvS1NXNEx4dGgtUHlqQ3p2X2Zoc2hlNElKSmkwLnJvYTAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBX3WgDANBgkqhkiG9w0BAQsFAAOCAQEA GcAymqCqTMvDDM5VcJE31jscbs2/xQ4mOSdUA4U5JAfrBmTnHHTwqgGVoqAlR+MB ETLAONztvOfyBQJ55K3koqLyTog7Baq7kA0eMkbENMFnDFa0lOJuupx5jeiODbe6 xAQimWGAeY/JSor0WlqrL/4zsnxG+Ql0Ej9CutKqYd94hdtTSF4q4xbEgyORAIZ5 RrElpBBQLh93f/R+bef3WVamx60RvdZHF+5J8S1cKHQgyJOUq4yZMtwxRnAA7TW6 Z9ug9AQKOenAysfxtIu6znKTwp4Ed9YLNsmReF/RzncfVTa3I3F4x7jb3fDRGJbq 9OUYrtz5ZlHceZu3V4t9YA== -----END CERTIFICATE-----Generated at Thu Sep 24 12:39:40 2026 by rpki-client