$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1250/BWaOMTFH21cJwb1K7Hiw1_1rt5c.roa File: BWaOMTFH21cJwb1K7Hiw1_1rt5c.roa (raw, json) Hash identifier: tKBtTqB4ji8ByUIfIOzlXQ1ASu+WxF4dO6NH30/p/bI= Subject key identifier: 05:66:8E:31:31:47:DB:57:09:C1:BD:4A:EC:78:B0:D7:FD:6B:B7:97 Certificate issuer: /CN=FEE7DD96E49322460E0A010EC8D983EDA2F254C5 Certificate serial: 2E Authority key identifier: FE:E7:DD:96:E4:93:22:46:0E:0A:01:0E:C8:D9:83:ED:A2:F2:54:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/BWaOMTFH21cJwb1K7Hiw1_1rt5c.roa Signing time: Fri 01 Aug 2025 01:31:27 +0000 ROA not before: Fri 01 Aug 2025 01:31:27 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 0 IP address blocks: 202.242.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE7DD96E49322460E0A010EC8D983EDA2F254C5 Validity Not Before: Aug 1 01:31:27 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=05668E313147DB5709C1BD4AEC78B0D7FD6BB797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:a7:2d:16:1f:c7:32:20:f5:f4:75:39:7a: af:f5:35:28:52:f4:58:ae:06:19:6e:59:cc:f4:53: 49:04:55:9a:40:ac:82:0e:af:1c:70:d8:73:68:df: 2a:d5:69:58:25:7b:6d:0e:e1:09:eb:f8:40:48:39: c3:5b:0b:2d:98:37:ef:39:47:e0:fb:b0:c9:05:41: 09:45:a1:cf:ec:0d:ee:1a:44:23:33:16:3a:86:fe: 4c:7a:bc:4c:2a:da:c8:34:1b:44:11:b8:64:90:3a: 92:57:f2:e5:01:6d:f8:15:26:e3:30:59:5b:f4:f7: 8d:e3:d4:34:d1:4c:26:2e:bb:cd:b0:6f:b5:ff:0d: 66:3a:de:63:27:55:cc:d2:1e:1f:8c:21:1d:f9:26: b8:e4:b3:a8:7f:04:42:ff:af:ba:8c:7e:92:91:db: c6:84:18:67:25:74:55:53:d8:c2:12:37:d9:3f:f8: 7d:9f:ba:17:08:90:22:b2:8a:7c:51:92:64:a3:c5: b3:f1:06:6c:32:cb:6b:cb:77:e6:30:5f:3a:44:a5: be:bb:79:05:fd:2e:32:32:9b:2b:a2:aa:7a:4c:6f: d8:15:4e:ff:2c:38:80:29:74:e3:a5:bd:08:35:21: 71:20:b2:c2:fb:98:8d:9c:03:fc:2d:3f:ee:8f:a8: 95:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:66:8E:31:31:47:DB:57:09:C1:BD:4A:EC:78:B0:D7:FD:6B:B7:97 X509v3 Authority Key Identifier: keyid:FE:E7:DD:96:E4:93:22:46:0E:0A:01:0E:C8:D9:83:ED:A2:F2:54:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/BWaOMTFH21cJwb1K7Hiw1_1rt5c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.242.132.0/22 Signature Algorithm: sha256WithRSAEncryption 64:3f:6a:78:94:68:4e:5d:dc:02:48:70:64:bd:49:ca:bd:6d: 25:28:16:fc:e3:54:36:d6:6f:3e:92:ae:f6:b1:4f:55:8a:1e: b6:1d:95:0b:ab:a0:e3:dd:0d:2f:a1:bd:9b:30:74:ed:e7:cf: 31:a6:cb:85:26:86:d7:14:de:99:81:ee:e5:97:df:25:83:1c: 35:68:4b:1e:c5:2a:26:c9:27:5e:47:49:f4:03:2f:4d:28:6e: 5c:dc:d0:e0:2c:1d:91:7c:5d:2c:32:8b:08:f5:46:3f:c4:bc: c9:2e:c1:04:9b:ce:9a:3f:ec:e8:70:97:18:38:6a:40:37:d9: ab:4d:2f:78:0a:3d:59:03:e5:fb:47:43:94:66:b3:52:c6:15: 0f:91:e3:64:bd:a1:36:42:f5:99:13:44:45:12:b2:21:d8:1a: 13:54:b7:59:cf:a6:00:d1:34:1f:4c:a5:2a:bb:49:28:11:bb: b8:40:5b:db:53:08:1e:68:60:f1:28:a6:c5:f4:6f:9b:26:ee: 2e:13:bc:8c:3f:26:c5:06:af:44:e1:f6:a1:23:a3:12:e6:1c: cf:61:40:62:22:7b:9f:8a:ac:f4:a0:2c:50:b4:de:14:3f:f1: de:1e:36:16:36:d6:75:66:a9:5a:16:15:55:1b:5f:6d:fe:55: 77:5b:f0:14 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRUU3 REQ5NkU0OTMyMjQ2MEUwQTAxMEVDOEQ5ODNFREEyRjI1NEM1MB4XDTI1MDgwMTAx MzEyN1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMDU2NjhFMzEzMTQ3REI1 NzA5QzFCRDRBRUM3OEIwRDdGRDZCQjc5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL7Npy0WH8cyIPX0dTl6r/U1KFL0WK4GGW5ZzPRTSQRVmkCsgg6v HHDYc2jfKtVpWCV7bQ7hCev4QEg5w1sLLZg37zlH4PuwyQVBCUWhz+wN7hpEIzMW Oob+THq8TCrayDQbRBG4ZJA6klfy5QFt+BUm4zBZW/T3jePUNNFMJi67zbBvtf8N ZjreYydVzNIeH4whHfkmuOSzqH8EQv+vuox+kpHbxoQYZyV0VVPYwhI32T/4fZ+6 FwiQIrKKfFGSZKPFs/EGbDLLa8t35jBfOkSlvrt5Bf0uMjKbK6Kqekxv2BVO/yw4 gCl046W9CDUhcSCywvuYjZwD/C0/7o+olfMCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQFZo4xMUfbVwnBvUrseLDX/Wu3lzAfBgNVHSMEGDAWgBT+592W5JMiRg4KAQ7I 2YPtovJUxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTI1MC9fdWZkbHVTVElrWU9DZ0VPeU5tRDdhTHlWTVUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9fdWZkbHVTVElrWU9DZ0VPeU5tRDdh THlWTVUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTI1MC9CV2FPTVRGSDIxY0p3YjFLN0hpdzFfMXJ0NWMucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCyvKEMA0GCSqGSIb3DQEBCwUAA4IBAQBkP2p4lGhOXdwCSHBkvUnKvW0l KBb841Q21m8+kq72sU9Vih62HZULq6Dj3Q0vob2bMHTt588xpsuFJobXFN6Zge7l l98lgxw1aEsexSomySdeR0n0Ay9NKG5c3NDgLB2RfF0sMosI9UY/xLzJLsEEm86a P+zocJcYOGpAN9mrTS94Cj1ZA+X7R0OUZrNSxhUPkeNkvaE2QvWZE0RFErIh2BoT VLdZz6YA0TQfTKUqu0koEbu4QFvbUwgeaGDxKKbF9G+bJu4uE7yMPybFBq9E4fah I6MS5hzPYUBiInufiqz0oCxQtN4UP/HeHjYWNtZ1ZqlaFhVVG19t/lV3W/AU -----END CERTIFICATE-----Generated at Mon Aug 11 04:23:28 2025 by rpki-client