$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BMLMa5Wa7Fo_9VbKCWXyOKSOupU.roa File: BMLMa5Wa7Fo_9VbKCWXyOKSOupU.roa (raw, json) Hash identifier: g8wq89vIGnfrVoBKIqn5gOCyXpJMFV06/f/YKftutzY= Subject key identifier: 04:C2:CC:6B:95:9A:EC:5A:3F:F5:56:CA:09:65:F2:38:A4:8E:BA:95 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: B4 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BMLMa5Wa7Fo_9VbKCWXyOKSOupU.roa Signing time: Thu 24 Jul 2025 01:04:27 +0000 ROA not before: Thu 24 Jul 2025 01:04:27 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.140.34.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:04:27 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=04C2CC6B959AEC5A3FF556CA0965F238A48EBA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:40:47:8b:ab:78:fe:21:e3:a3:50:7c:5a:eb: be:81:f4:96:f7:99:37:73:e8:be:66:40:b5:08:b1: e2:fc:18:7e:99:76:43:1d:32:9d:82:80:01:ce:b9: 53:b5:36:f0:33:b4:0c:34:cb:4b:dd:e2:b9:03:8a: 3d:f1:cb:c3:05:dd:45:2d:41:ab:63:b8:7d:c8:80: 5b:a8:f0:ea:99:cc:93:d7:9b:84:7c:00:8f:e2:f0: 41:27:b6:86:e7:95:7b:b7:37:5f:08:9f:db:a9:68: 80:28:2b:86:f2:9e:42:37:96:ae:44:64:ee:48:93: c4:cc:29:80:27:4c:3e:52:c1:4b:fe:0e:e8:cd:b7: d1:d8:75:0c:d8:94:e7:2c:7b:6c:fd:42:46:df:b7: 0a:22:70:8e:74:5c:95:98:e0:92:a2:87:ce:11:29: b7:5d:08:c9:07:3f:0d:6c:c4:4b:24:a3:9c:86:04: 88:65:21:7d:c2:e4:02:fc:96:11:03:d0:01:f9:98: 6c:57:b0:1f:b9:13:70:6b:fe:1a:85:cf:04:be:06: 34:c6:8a:2d:18:d8:38:df:1d:b6:21:58:56:dd:25: 62:36:f2:6d:8d:57:0d:9a:dd:24:2b:3f:a1:34:9a: 1e:41:74:72:d7:cb:f4:41:32:2b:b9:0a:41:45:d5: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C2:CC:6B:95:9A:EC:5A:3F:F5:56:CA:09:65:F2:38:A4:8E:BA:95 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BMLMa5Wa7Fo_9VbKCWXyOKSOupU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.140.34.0/23 Signature Algorithm: sha256WithRSAEncryption 72:00:7e:b5:f8:92:4d:f6:7a:9c:30:47:9a:c8:c4:71:7c:ff: 3f:ba:5e:24:9e:f0:c0:ac:55:90:ce:d8:47:16:b2:81:55:0d: a1:80:82:a8:c0:73:e0:a3:e2:8f:5a:1f:eb:cc:cf:0e:c9:ae: d3:7d:c9:95:f6:fb:7c:06:49:fe:04:46:23:81:9d:6c:7e:b3: 2b:7c:5b:05:59:01:be:fc:7a:97:9c:a7:c3:48:3d:59:e8:41: f8:e8:c6:b0:16:d4:bc:7f:26:02:b3:6d:a2:7d:ef:ea:6b:25: c7:24:ca:38:99:55:2f:a9:7a:bb:0d:bb:8d:24:37:43:46:08: 7c:b8:3c:6a:ca:ee:70:59:a5:de:16:6e:62:8f:a5:ba:1c:28: f7:38:cc:24:ac:a2:34:7d:f1:78:9c:7d:af:6c:87:95:91:99: dc:a3:25:1b:60:0d:97:26:b4:c8:1e:1d:b2:c5:6e:8e:6a:ba: ce:59:2b:a3:41:61:92:dd:79:73:58:08:cf:87:f8:68:2c:3d: b3:c9:bf:57:6e:26:7a:f0:ee:a2:50:62:02:5a:44:36:77:28: a1:f3:bc:b7:40:b2:42:70:d1:28:cc:36:27:93:83:f9:79:36: 4c:c6:6c:0b:1c:e4:6f:b4:9a:c8:06:d6:8c:d4:6c:6a:d5:d4: 3a:eb:08:10 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICALQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTA0MjdaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDA0QzJDQzZCOTU5QUVD NUEzRkY1NTZDQTA5NjVGMjM4QTQ4RUJBOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnQEeLq3j+IeOjUHxa676B9Jb3mTdz6L5mQLUIseL8GH6ZdkMd Mp2CgAHOuVO1NvAztAw0y0vd4rkDij3xy8MF3UUtQatjuH3IgFuo8OqZzJPXm4R8 AI/i8EEntobnlXu3N18In9upaIAoK4bynkI3lq5EZO5Ik8TMKYAnTD5SwUv+DujN t9HYdQzYlOcse2z9QkbftwoicI50XJWY4JKih84RKbddCMkHPw1sxEsko5yGBIhl IX3C5AL8lhED0AH5mGxXsB+5E3Br/hqFzwS+BjTGii0Y2DjfHbYhWFbdJWI28m2N Vw2a3SQrP6E0mh5BdHLXy/RBMiu5CkFF1YDNAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUBMLMa5Wa7Fo/9VbKCWXyOKSOupUwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9CTUxNYTVXYTdGb185VmJLQ1dYeU9LU091cFUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB0owiMA0GCSqGSIb3DQEBCwUAA4IBAQByAH61+JJN9nqcMEeayMRx fP8/ul4knvDArFWQzthHFrKBVQ2hgIKowHPgo+KPWh/rzM8Oya7TfcmV9vt8Bkn+ BEYjgZ1sfrMrfFsFWQG+/HqXnKfDSD1Z6EH46MawFtS8fyYCs22ife/qayXHJMo4 mVUvqXq7DbuNJDdDRgh8uDxqyu5wWaXeFm5ij6W6HCj3OMwkrKI0ffF4nH2vbIeV kZncoyUbYA2XJrTIHh2yxW6OarrOWSujQWGS3XlzWAjPh/hoLD2zyb9XbiZ68O6i UGICWkQ2dyih87y3QLJCcNEozDYnk4P5eTZMxmwLHORvtJrIBtaM1Gxq1dQ66wgQ -----END CERTIFICATE-----Generated at Wed Jul 30 03:08:17 2025 by rpki-client