$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/Bm-MH-uer-pFCgGfIpCX9-2zvGY.roa File: Bm-MH-uer-pFCgGfIpCX9-2zvGY.roa (raw, json) Hash identifier: cTCZZwV2AVpvzkKKoX+fIsSeXj6nlsFghzM3bMdAjGU= Subject key identifier: 06:6F:8C:1F:EB:9E:AF:EA:45:0A:01:9F:22:90:97:F7:ED:B3:BC:66 Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Certificate serial: 42 Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/Bm-MH-uer-pFCgGfIpCX9-2zvGY.roa Signing time: Fri 01 Aug 2025 01:30:34 +0000 ROA not before: Fri 01 Aug 2025 01:30:34 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 18274 IP address blocks: 116.118.208.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1 Validity Not Before: Aug 1 01:30:34 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=066F8C1FEB9EAFEA450A019F229097F7EDB3BC66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e3:5d:c2:3f:b3:6d:6f:45:3f:f9:b0:59:2b: 77:76:5d:d9:2b:76:1b:ac:95:30:21:79:9e:72:ba: b5:a9:5f:19:c7:db:f1:24:13:bb:69:cf:5a:9f:45: fe:4f:ce:20:3a:b8:2a:92:1d:fc:4f:47:0c:6f:e1: 36:59:36:f8:d3:ea:88:ac:bd:3e:17:2d:eb:4e:f7: 8a:6b:d9:84:db:23:c2:5a:eb:56:8e:3c:22:ce:04: 5d:be:f2:48:c9:52:e2:a7:ca:af:11:e6:47:9f:1a: cc:1b:28:42:71:6c:c5:b8:42:e0:48:6e:da:4a:e9: 67:64:13:7b:7a:87:aa:02:85:5f:b1:42:c9:15:12: 81:ff:52:0c:e2:f7:7d:9e:19:e0:0f:27:fb:ff:04: b5:c8:61:bd:dc:4e:19:84:80:f5:74:67:14:18:68: 89:9f:a0:48:03:91:90:dd:dc:7d:05:ee:89:df:32: 9a:35:8a:a8:5b:a2:c0:b0:cf:06:dd:37:9f:87:df: bd:c0:6f:e6:66:20:e3:86:c8:fd:2f:6a:c4:5d:22: a2:54:8a:62:6a:64:34:98:9c:70:b1:5d:d0:97:12: a2:c3:1e:3e:c4:f5:fe:33:81:03:ea:04:04:f5:1e: a2:af:48:46:4e:78:14:29:98:61:3d:f7:b4:23:be: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6F:8C:1F:EB:9E:AF:EA:45:0A:01:9F:22:90:97:F7:ED:B3:BC:66 X509v3 Authority Key Identifier: keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/Bm-MH-uer-pFCgGfIpCX9-2zvGY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.118.208.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:a7:4a:57:d7:5c:fc:9b:18:75:32:d9:27:40:b1:d8:a9:7e: 8d:43:23:66:76:e5:30:1a:a3:f9:4d:fa:59:f9:94:a3:cb:16: 6d:be:75:6c:30:92:39:18:e6:e2:c2:75:12:b7:91:90:e0:47: 7f:d1:bb:1d:96:12:02:dc:62:cb:65:47:64:bf:bb:c2:6a:0f: 1b:ce:1b:3c:2c:21:86:c4:02:22:17:16:0c:37:99:7e:9c:9e: 60:e5:de:df:e5:ff:b2:7a:29:76:ad:ab:4b:7e:df:5f:a1:34: 23:d2:bb:62:76:5d:0e:81:a9:85:47:fd:84:51:78:89:81:c8: 41:f2:94:04:b3:c4:8b:94:43:23:bd:24:05:da:3f:7c:4e:ea: ac:63:17:c5:a1:16:b6:3a:db:ed:24:6a:e7:dc:36:7b:b7:b2: 0c:31:61:1d:6c:1d:53:07:52:23:6f:54:73:77:a8:64:1e:42: c7:ef:1f:14:eb:45:00:1e:8d:b7:ac:6a:25:55:d7:96:72:ec: 30:70:8c:eb:af:ff:63:af:b3:af:93:d3:8c:69:e5:b3:4b:b7: 60:f5:1e:bb:4f:6c:1c:c1:26:a8:f2:60:56:07:c4:37:53:62: 9e:f6:48:df:a4:81:a6:e8:2f:56:69:a2:2e:27:ac:b8:ec:40: f5:ff:7e:e5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDhE MjY1ODgxNUNBM0M0RUU1QTUzRjkxQkE2MTI2OEUzRjRDMEUxMB4XDTI1MDgwMTAx MzAzNFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMDY2RjhDMUZFQjlFQUZF QTQ1MEEwMTlGMjI5MDk3RjdFREIzQkM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPDjXcI/s21vRT/5sFkrd3Zd2St2G6yVMCF5nnK6talfGcfb8SQT u2nPWp9F/k/OIDq4KpId/E9HDG/hNlk2+NPqiKy9Phct6073imvZhNsjwlrrVo48 Is4EXb7ySMlS4qfKrxHmR58azBsoQnFsxbhC4Ehu2krpZ2QTe3qHqgKFX7FCyRUS gf9SDOL3fZ4Z4A8n+/8EtchhvdxOGYSA9XRnFBhoiZ+gSAORkN3cfQXuid8ymjWK qFuiwLDPBt03n4ffvcBv5mYg44bI/S9qxF0iolSKYmpkNJiccLFd0JcSosMePsT1 /jOBA+oEBPUeoq9IRk54FCmYYT33tCO+WmsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQGb4wf656v6kUKAZ8ikJf37bO8ZjAfBgNVHSMEGDAWgBSNjSZYgVyjxO5aU/kb phJo4/TA4TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzkzL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9QMHdPRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pZMG1XSUZjbzhUdVdsUDVHNllTYU9Q MHdPRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83OTMvQm0tTUgtdWVyLXBGQ2dHZklwQ1g5LTJ6dkdZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHR20DANBgkqhkiG9w0BAQsFAAOCAQEADadKV9dc/JsYdTLZJ0Cx2Kl+jUMj ZnblMBqj+U36WfmUo8sWbb51bDCSORjm4sJ1EreRkOBHf9G7HZYSAtxiy2VHZL+7 wmoPG84bPCwhhsQCIhcWDDeZfpyeYOXe3+X/snopdq2rS37fX6E0I9K7YnZdDoGp hUf9hFF4iYHIQfKUBLPEi5RDI70kBdo/fE7qrGMXxaEWtjrb7SRq59w2e7eyDDFh HWwdUwdSI29Uc3eoZB5Cx+8fFOtFAB6Nt6xqJVXXlnLsMHCM66//Y6+zr5PTjGnl s0u3YPUeu09sHMEmqPJgVgfEN1NinvZI36SBpugvVmmiLiesuOxA9f9+5Q== -----END CERTIFICATE-----Generated at Thu Nov 6 01:16:32 2025 by rpki-client