$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/BSSPHHthKRGR_4tCHhINsV9hvBQ.roa File: BSSPHHthKRGR_4tCHhINsV9hvBQ.roa (raw, json) Hash identifier: Tsqc6ghDyjIGy9VdKVm7TsjLOCWlcPYfTVl9/HxDrus= Subject key identifier: 05:24:8F:1C:7B:61:29:11:91:FF:8B:42:1E:12:0D:B1:5F:61:BC:14 Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Certificate serial: 71 Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/BSSPHHthKRGR_4tCHhINsV9hvBQ.roa Signing time: Wed 01 Oct 2025 01:29:40 +0000 ROA not before: Wed 01 Oct 2025 01:29:40 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 131925 IP address blocks: 150.91.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Validity Not Before: Oct 1 01:29:40 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=05248F1C7B61291191FF8B421E120DB15F61BC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:b9:a5:3b:83:07:67:a5:40:94:40:e0:df: 3a:df:bf:ff:6f:37:d1:cd:09:23:c2:ef:39:0b:98: 33:a6:eb:15:c6:e7:b3:c7:d9:59:aa:a0:7e:b2:9c: 25:30:8f:f6:1b:50:42:dd:56:dc:85:af:1e:62:13: dc:e8:17:5a:78:86:88:fa:4f:61:16:c5:71:cf:ed: 0b:6d:14:56:0e:4a:6c:70:c1:cc:11:8c:6c:f5:72: b7:ee:17:be:f5:9b:a7:42:51:63:51:24:b9:90:aa: 62:d7:50:bc:b9:fd:e8:3d:cf:4f:e9:77:8e:17:7b: 6d:58:40:4b:9a:10:1d:fb:8b:5c:e7:11:79:22:ee: 2a:6a:96:90:20:79:b8:02:70:ea:1b:b7:55:35:96: 80:cd:3d:c6:a5:b8:17:95:97:89:44:78:ff:b9:5a: b4:81:30:78:7f:66:e4:74:c6:76:2a:c9:6d:79:52: 34:89:83:c3:a5:4e:00:65:e6:f5:44:87:6c:c2:06: 33:80:c2:2f:59:0d:c7:5e:8c:73:fd:e6:06:4f:10: f0:63:0f:c3:ba:79:8b:a2:8a:67:71:cd:d5:b1:04: 28:b7:71:27:cd:d5:48:b5:c9:71:be:fa:a5:66:ee: 10:38:69:2b:b2:2f:4c:ff:99:58:05:29:66:dd:06: 61:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:24:8F:1C:7B:61:29:11:91:FF:8B:42:1E:12:0D:B1:5F:61:BC:14 X509v3 Authority Key Identifier: keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/BSSPHHthKRGR_4tCHhINsV9hvBQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.91.192.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:b8:83:a4:77:39:c7:df:16:62:43:df:a1:1f:8c:6a:2b:8f: 1c:08:dc:99:bc:5d:00:36:60:f5:43:fb:f4:8c:7c:f3:fe:93: 80:98:d7:ce:f8:b3:41:49:e4:d8:39:98:fa:d0:41:a5:b9:bd: 4e:2a:a7:bb:04:ae:c1:28:9c:d6:6f:26:6d:e6:59:b7:06:0b: 97:c3:b0:17:b8:ac:5d:fc:8d:34:9e:45:c6:ee:28:68:96:30: 15:4e:f5:4d:dc:b2:9f:4e:87:5f:c4:08:c3:c1:c0:39:4c:8b: d0:ed:ac:77:7a:30:ae:d1:43:55:b7:9d:0f:e8:66:90:0b:e4: ed:9b:1a:8b:98:fd:12:31:13:ec:d0:f0:7a:2f:20:dd:e3:db: c7:05:6b:c5:e1:f2:25:33:39:82:9a:cd:c9:89:57:3e:34:bf: a4:ad:1a:34:14:a2:9e:82:a0:f0:55:10:03:36:f9:a1:53:bc: 59:24:c8:22:e1:31:9c:63:a9:4b:10:19:eb:4c:96:36:06:87: a5:89:d1:7e:7f:4c:ca:39:a0:5b:70:7b:f0:87:6c:c2:b1:0d: 2f:2d:65:03:9e:10:4f:86:88:be:83:4f:17:88:8b:56:26:17: 29:c3:6b:0a:29:b1:14:ad:ce:2b:ef:3e:7b:d8:14:bf:d2:99: 4a:d2:93:c6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTI1MTAwMTAx Mjk0MFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMDUyNDhGMUM3QjYxMjkx MTkxRkY4QjQyMUUxMjBEQjE1RjYxQkMxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALUUuaU7gwdnpUCUQODfOt+//2830c0JI8LvOQuYM6brFcbns8fZ WaqgfrKcJTCP9htQQt1W3IWvHmIT3OgXWniGiPpPYRbFcc/tC20UVg5KbHDBzBGM bPVyt+4XvvWbp0JRY1EkuZCqYtdQvLn96D3PT+l3jhd7bVhAS5oQHfuLXOcReSLu KmqWkCB5uAJw6hu3VTWWgM09xqW4F5WXiUR4/7latIEweH9m5HTGdirJbXlSNImD w6VOAGXm9USHbMIGM4DCL1kNx16Mc/3mBk8Q8GMPw7p5i6KKZ3HN1bEEKLdxJ83V SLXJcb76pWbuEDhpK7IvTP+ZWAUpZt0GYVsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQFJI8ce2EpEZH/i0IeEg2xX2G8FDAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96 YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvQlNTUEhIdGhLUkdSXzR0Q0hoSU5zVjlodkJRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJZbwDANBgkqhkiG9w0BAQsFAAOCAQEAO7iDpHc5x98WYkPfoR+MaiuPHAjc mbxdADZg9UP79Ix88/6TgJjXzvizQUnk2DmY+tBBpbm9TiqnuwSuwSic1m8mbeZZ twYLl8OwF7isXfyNNJ5Fxu4oaJYwFU71Tdyyn06HX8QIw8HAOUyL0O2sd3owrtFD VbedD+hmkAvk7Zsai5j9EjET7NDwei8g3ePbxwVrxeHyJTM5gprNyYlXPjS/pK0a NBSinoKg8FUQAzb5oVO8WSTIIuExnGOpSxAZ60yWNgaHpYnRfn9MyjmgW3B78Ids wrENLy1lA54QT4aIvoNPF4iLViYXKcNrCimxFK3OK+8+e9gUv9KZStKTxg== -----END CERTIFICATE-----Generated at Tue Oct 21 03:42:29 2025 by rpki-client