$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BBrmGKhNZj2D_e5bGUq5UahN5Ec.roa File: BBrmGKhNZj2D_e5bGUq5UahN5Ec.roa (raw, json) Hash identifier: ih63dzOCGVo6NYk//CrrJnqt0k5ZbbWr7/XVF7dZptc= Subject key identifier: 04:1A:E6:18:A8:4D:66:3D:83:FD:EE:5B:19:4A:B9:51:A8:4D:E4:47 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C11 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BBrmGKhNZj2D_e5bGUq5UahN5Ec.roa Signing time: Tue 01 Apr 2025 01:51:36 +0000 ROA not before: Tue 01 Apr 2025 01:51:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3089 (0xc11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=041AE618A84D663D83FDEE5B194AB951A84DE447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:b1:20:fd:a9:64:f6:01:f1:b6:fe:38:e8: 3f:43:59:e0:de:a3:ec:12:cb:62:e4:4b:ba:ff:7f: 11:28:75:e7:48:d5:0d:a4:d9:71:63:c8:88:c9:a3: 78:68:1c:dd:b2:f3:4b:a1:fc:40:ad:af:61:5d:2c: d8:cc:e2:da:86:c2:f4:c2:7d:ee:9a:86:41:b4:02: b7:e6:de:d0:d4:0c:42:ba:1c:06:dd:b3:f1:aa:c0: 87:01:36:b4:f4:60:e9:17:e8:61:02:e6:f4:68:87: 23:ff:20:f4:3e:5f:b8:ca:e8:b0:d1:87:c9:b3:1b: 0e:42:41:c9:2b:f6:8f:90:8c:5f:65:39:a4:b0:49: b1:82:3a:20:76:a8:8a:53:a5:fd:47:09:eb:ff:67: 20:ae:07:4a:af:99:b6:27:77:53:12:0b:3e:da:3c: 5b:17:ef:3f:b5:36:7f:f0:e9:78:de:9d:a4:70:10: a6:0e:0a:30:cf:35:33:a8:13:ce:8e:a4:1e:cd:3f: a7:6f:86:82:c4:2c:90:78:24:a6:7e:25:19:4f:9c: b3:f7:94:4d:51:79:44:06:06:dd:51:1b:80:6e:89: 5e:b2:e4:ee:4c:52:9a:5b:6a:95:2a:98:2b:2b:1f: 4e:7d:d8:75:6c:df:2f:43:7b:5a:a5:08:fa:2b:82: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1A:E6:18:A8:4D:66:3D:83:FD:EE:5B:19:4A:B9:51:A8:4D:E4:47 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BBrmGKhNZj2D_e5bGUq5UahN5Ec.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.138.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:e8:32:55:ed:7b:29:5f:52:5c:97:30:36:07:0e:77:f4:52: ea:f1:d1:f4:54:18:60:dd:69:a5:03:1b:43:e1:19:6a:56:3e: 90:1a:c3:43:90:cf:eb:8a:7d:b5:ba:68:90:e0:cb:aa:ba:d6: 16:21:34:13:1b:06:56:7d:f5:e9:32:98:12:4f:ed:c8:38:22: 87:12:24:56:95:7e:e5:8b:9b:73:3c:c6:87:25:75:9e:29:90: a3:fd:e2:48:66:ab:ba:b5:be:bd:41:3a:55:12:64:62:b3:d7: 2b:26:bd:b2:50:3e:a6:9d:5c:17:c8:da:74:ef:47:ef:0c:10: 05:b0:45:69:40:8a:5e:96:b3:21:3d:7f:2b:49:b4:63:58:a7: e4:bd:fe:e3:7c:7f:95:7f:b9:ff:e2:b2:98:56:4f:a5:d8:39: 44:1c:c4:b8:49:63:37:79:8a:e2:08:11:5c:7b:3a:b8:01:f2: 8c:57:26:4c:57:31:57:57:e9:04:a0:0e:21:61:78:64:3e:0a: ce:ce:15:9f:93:85:49:1d:10:69:14:3f:94:cb:33:bb:9f:70: 19:a6:60:8b:ea:e7:4e:6d:57:76:96:a3:34:94:93:7a:60:47: aa:4c:4e:fc:46:a9:63:db:24:8a:1d:13:fd:39:fc:7d:0e:a9: 6b:88:8e:dd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA0MUFFNjE4QTg0RDY2 M0Q4M0ZERUU1QjE5NEFCOTUxQTg0REU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ObEg/alk9gHxtv446D9DWeDeo+wSy2LkS7r/fxEodedI1Q2k 2XFjyIjJo3hoHN2y80uh/ECtr2FdLNjM4tqGwvTCfe6ahkG0Arfm3tDUDEK6HAbd s/GqwIcBNrT0YOkX6GEC5vRohyP/IPQ+X7jK6LDRh8mzGw5CQckr9o+QjF9lOaSw SbGCOiB2qIpTpf1HCev/ZyCuB0qvmbYnd1MSCz7aPFsX7z+1Nn/w6XjenaRwEKYO CjDPNTOoE86OpB7NP6dvhoLELJB4JKZ+JRlPnLP3lE1ReUQGBt1RG4BuiV6y5O5M UppbapUqmCsrH0592HVs3y9De1qlCPorgki5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBBrmGKhNZj2D/e5bGUq5UahN5EcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JCcm1HS2hOWmoyRF9lNWJHVXE1VWFoTjVFYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYoowDQYJKoZIhvcNAQELBQADggEBAD3oMlXteylfUlyXMDYHDnf0Uurx 0fRUGGDdaaUDG0PhGWpWPpAaw0OQz+uKfbW6aJDgy6q61hYhNBMbBlZ99ekymBJP 7cg4IocSJFaVfuWLm3M8xocldZ4pkKP94khmq7q1vr1BOlUSZGKz1ysmvbJQPqad XBfI2nTvR+8MEAWwRWlAil6WsyE9fytJtGNYp+S9/uN8f5V/uf/isphWT6XYOUQc xLhJYzd5iuIIEVx7OrgB8oxXJkxXMVdX6QSgDiFheGQ+Cs7OFZ+ThUkdEGkUP5TL M7ufcBmmYIvq505tV3aWozSUk3pgR6pMTvxGqWPbJIodE/05/H0OqWuIjt0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:48 2025 by rpki-client