$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/bmlvNYZ-6le0zqRxxn6c4KVvxcA.roa File: bmlvNYZ-6le0zqRxxn6c4KVvxcA.roa (raw, json) Hash identifier: zROVlTzYIV5/EhGrHWV74jzTaz1X6aH1nTdCp0EEwxA= Subject key identifier: 6E:69:6F:35:86:7E:EA:57:B4:CE:A4:71:C6:7E:9C:E0:A5:6F:C5:C0 Certificate issuer: /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B Certificate serial: 39 Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/bmlvNYZ-6le0zqRxxn6c4KVvxcA.roa Signing time: Wed 01 Oct 2025 01:31:58 +0000 ROA not before: Wed 01 Oct 2025 01:31:58 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 18278 IP address blocks: 202.231.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B Validity Not Before: Oct 1 01:31:58 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=6E696F35867EEA57B4CEA471C67E9CE0A56FC5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:b0:50:6f:96:82:8a:a1:f1:c5:cc:69:0f: f2:5b:bf:72:5b:fb:a3:ef:b2:a1:b6:03:a4:0e:15: b4:87:59:db:a4:fd:1c:b6:b8:24:c6:f8:72:44:a8: b4:37:01:e5:dd:52:1b:8c:48:4d:bb:6c:2b:95:9e: a5:7c:0f:b6:1b:97:13:cc:bc:fe:53:d9:00:43:e6: f8:38:1a:f6:c8:fc:54:47:0e:41:65:3e:07:c3:e7: a6:c8:a3:66:41:ea:05:c6:22:f4:ee:d1:c0:ab:95: 63:47:b7:6f:f4:73:d2:18:8d:03:78:4e:4d:70:fb: 0f:47:2b:17:7b:0f:8b:82:40:6d:85:da:28:03:7a: fa:e6:63:bf:0f:dd:f0:72:2f:a7:9a:98:d6:47:12: af:d3:c1:11:32:98:3c:dc:36:f6:00:e0:13:2e:b0: e5:62:cb:cb:d8:f0:b8:d7:f9:e5:8f:f6:05:86:58: a9:b2:9d:fb:33:bb:63:21:54:27:2f:fb:b4:f0:9b: 8f:4d:a2:27:86:d2:bd:66:1c:80:9a:27:6b:ed:31: c1:64:86:20:04:19:e5:69:fc:92:86:80:1f:37:ca: d9:89:6d:a0:5c:d2:e8:24:87:ac:25:00:72:c8:82: e5:21:71:7a:80:ee:6a:cc:06:5b:7d:22:6b:43:6e: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:69:6F:35:86:7E:EA:57:B4:CE:A4:71:C6:7E:9C:E0:A5:6F:C5:C0 X509v3 Authority Key Identifier: keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/bmlvNYZ-6le0zqRxxn6c4KVvxcA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.231.176.0/20 Signature Algorithm: sha256WithRSAEncryption 7e:36:43:34:bf:23:32:b4:a9:3c:4c:79:7a:62:07:1b:45:b2: cc:cc:b3:e5:da:65:64:c3:08:a5:d2:12:75:26:89:58:f1:b6: 9e:61:58:3a:bd:21:d3:9a:57:56:64:27:da:f2:21:3f:22:14: 18:80:76:a5:9b:83:e6:56:37:a1:6e:ce:0c:e5:91:4d:16:57: 8a:00:38:60:bd:66:ed:f9:a6:36:4e:88:43:2c:e9:96:26:cf: 72:f1:74:a1:dd:8f:f6:3c:a2:94:a0:46:7a:e5:08:06:e6:6f: 9c:db:fa:50:e4:2d:5d:23:8d:fd:0c:92:81:05:98:a3:55:63: 0f:e0:c6:a3:15:75:d7:44:13:22:84:19:8f:a1:bb:dc:c5:17: ef:3e:8a:f0:3f:35:1b:06:df:f0:5d:ce:80:94:3a:ee:60:76: bf:70:f1:c1:71:df:b7:83:e9:ee:82:a1:7e:35:b6:55:fa:99: 20:3b:1a:9c:a4:9f:cf:31:de:b2:91:55:95:42:db:23:66:72: 6a:7f:ea:bb:79:fb:01:0e:c8:a7:85:f2:8a:84:16:5b:5f:be: 8e:81:ec:d8:5c:0e:7c:e8:47:1f:a3:8d:39:f8:7a:99:07:1d: 98:b2:2f:db:39:87:60:6b:ca:d9:84:5c:77:3b:bb:c1:c6:13: 45:16:6c:87 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTI1MTAwMTAx MzE1OFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNkU2OTZGMzU4NjdFRUE1 N0I0Q0VBNDcxQzY3RTlDRTBBNTZGQzVDMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALl7sFBvloKKofHFzGkP8lu/clv7o++yobYDpA4VtIdZ26T9HLa4 JMb4ckSotDcB5d1SG4xITbtsK5WepXwPthuXE8y8/lPZAEPm+Dga9sj8VEcOQWU+ B8PnpsijZkHqBcYi9O7RwKuVY0e3b/Rz0hiNA3hOTXD7D0crF3sPi4JAbYXaKAN6 +uZjvw/d8HIvp5qY1kcSr9PBETKYPNw29gDgEy6w5WLLy9jwuNf55Y/2BYZYqbKd +zO7YyFUJy/7tPCbj02iJ4bSvWYcgJona+0xwWSGIAQZ5Wn8koaAHzfK2YltoFzS 6CSHrCUAcsiC5SFxeoDuaswGW30ia0Nu6ykCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRuaW81hn7qV7TOpHHGfpzgpW/FwDAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy 24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MDAvYm1sdk5ZWi02bGUwenFSeHhuNmM0S1Z2eGNBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMrnsDANBgkqhkiG9w0BAQsFAAOCAQEAfjZDNL8jMrSpPEx5emIHG0WyzMyz 5dplZMMIpdISdSaJWPG2nmFYOr0h05pXVmQn2vIhPyIUGIB2pZuD5lY3oW7ODOWR TRZXigA4YL1m7fmmNk6IQyzplibPcvF0od2P9jyilKBGeuUIBuZvnNv6UOQtXSON /QySgQWYo1VjD+DGoxV110QTIoQZj6G73MUX7z6K8D81Gwbf8F3OgJQ67mB2v3Dx wXHft4Pp7oKhfjW2VfqZIDsanKSfzzHespFVlULbI2Zyan/qu3n7AQ7Ip4XyioQW W1++joHs2FwOfOhHH6ONOfh6mQcdmLIv2zmHYGvK2YRcdzu7wcYTRRZshw== -----END CERTIFICATE-----Generated at Wed Nov 5 08:08:14 2025 by rpki-client