$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/BcmFWH_4zpY2keSEtt__oDZTFHQ.roa File: BcmFWH_4zpY2keSEtt__oDZTFHQ.roa (raw, json) Hash identifier: t8MP4Dp8pesVWJAdbdInD7aOgKNP097047Nm62v6VSc= Subject key identifier: 05:C9:85:58:7F:F8:CE:96:36:91:E4:84:B6:DF:FF:A0:36:53:14:74 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 044E Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BcmFWH_4zpY2keSEtt__oDZTFHQ.roa Signing time: Mon 01 Sep 2025 01:33:58 +0000 ROA not before: Mon 01 Sep 2025 01:33:58 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 10013 IP address blocks: 14.128.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:33:58 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=05C985587FF8CE963691E484B6DFFFA036531474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:9e:2d:3c:82:da:3b:16:f8:db:be:db:4f: 2f:2f:fb:5d:ec:39:8d:60:25:6f:48:f4:d6:1c:80: bb:e1:e5:0b:9a:9e:41:98:18:4d:ac:10:c4:13:16: 16:2a:82:33:d9:e7:e3:ab:99:db:ec:47:8a:98:63: 7d:bd:89:8c:52:4d:21:c9:4a:1c:0b:69:98:d1:01: 76:0c:4e:74:cf:3f:8e:77:a9:5c:c2:42:af:81:58: e9:cc:ab:50:46:96:4d:8c:5b:ec:8e:85:20:0f:0f: f1:cd:57:13:2a:7a:62:5b:3e:bb:a9:e9:e2:1f:9c: 4b:ba:ea:7e:1a:21:62:e2:16:93:8b:a7:0e:89:fb: 99:4d:e5:27:95:24:0c:04:34:3e:5f:5f:3b:dd:62: 54:57:40:70:4e:40:e9:51:76:2f:f2:62:2e:49:54: c1:13:c2:f7:d6:f7:b9:e7:7f:2b:6c:d7:d3:f6:12: 34:1f:ce:76:8f:2e:f8:ae:0b:2c:d2:69:91:5d:11: 88:b7:fa:f6:09:e3:13:a8:2d:a1:04:62:9b:44:a9: 78:ee:f2:71:ab:94:66:31:b6:34:d2:0f:0d:e2:f1: 7b:ba:58:8b:7e:a8:74:57:7d:a7:d9:fe:66:07:2d: a2:05:16:b6:50:a1:64:b0:9f:22:a0:51:6c:b1:47: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C9:85:58:7F:F8:CE:96:36:91:E4:84:B6:DF:FF:A0:36:53:14:74 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BcmFWH_4zpY2keSEtt__oDZTFHQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.128.64.0/18 Signature Algorithm: sha256WithRSAEncryption 55:76:13:ba:8c:04:38:20:f3:a0:c6:71:e0:9f:51:58:80:87: 78:7a:cd:bd:89:a2:53:6e:c1:99:b8:56:d5:20:7f:c9:ca:55: bd:bf:fa:e7:eb:61:17:7b:fc:d1:4a:a1:d4:a8:29:11:e1:b1: 9c:ae:c4:76:08:2a:f0:ff:13:12:96:11:c8:00:22:93:95:ea: 6a:35:b0:ed:2d:25:4d:db:1d:c3:10:cb:96:8a:95:b4:b2:e2: e9:6a:2a:ee:df:72:98:40:1a:b3:1b:c4:dd:40:69:70:cd:1d: 35:ad:ca:cc:ea:1f:92:d6:30:57:e2:ec:21:5e:5b:8b:59:21: 5a:18:fe:50:33:dd:f3:d4:7e:f0:a5:78:23:38:fc:52:26:95: f3:3b:de:f3:8d:dd:85:b7:6c:0f:9f:1d:99:bf:5f:72:85:a5: 5e:fc:cb:0a:9e:6e:a9:05:ad:50:fb:f1:67:84:5f:1e:8a:63: ca:e6:a0:35:05:99:e8:21:d1:23:07:1d:02:2b:bf:44:5c:29: 99:9b:be:11:76:a1:7e:e7:f2:92:d0:56:2a:5d:96:49:6b:7e: 4c:89:c0:0a:e9:55:84:73:32:c8:51:31:6a:d6:03:cd:eb:3d: 43:14:de:b0:cf:d0:1c:ba:d4:0f:51:d5:99:f7:a1:1d:0a:88: 7c:c6:81:c5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTMzNThaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA1Qzk4NTU4N0ZGOENF OTYzNjkxRTQ4NEI2REZGRkEwMzY1MzE0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiS54tPILaOxb4277bTy8v+13sOY1gJW9I9NYcgLvh5QuankGY GE2sEMQTFhYqgjPZ5+OrmdvsR4qYY329iYxSTSHJShwLaZjRAXYMTnTPP453qVzC Qq+BWOnMq1BGlk2MW+yOhSAPD/HNVxMqemJbPrup6eIfnEu66n4aIWLiFpOLpw6J +5lN5SeVJAwEND5fXzvdYlRXQHBOQOlRdi/yYi5JVMETwvfW97nnfyts19P2EjQf znaPLviuCyzSaZFdEYi3+vYJ4xOoLaEEYptEqXju8nGrlGYxtjTSDw3i8Xu6WIt+ qHRXfafZ/mYHLaIFFrZQoWSwnyKgUWyxRyL/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBcmFWH/4zpY2keSEtt//oDZTFHQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0JjbUZXSF80enBZMmtlU0V0dF9fb0RaVEZIUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYOgEAwDQYJKoZIhvcNAQELBQADggEBAFV2E7qMBDgg86DGceCfUViAh3h6 zb2JolNuwZm4VtUgf8nKVb2/+ufrYRd7/NFKodSoKRHhsZyuxHYIKvD/ExKWEcgA IpOV6mo1sO0tJU3bHcMQy5aKlbSy4ulqKu7fcphAGrMbxN1AaXDNHTWtyszqH5LW MFfi7CFeW4tZIVoY/lAz3fPUfvCleCM4/FImlfM73vON3YW3bA+fHZm/X3KFpV78 ywqebqkFrVD78WeEXx6KY8rmoDUFmegh0SMHHQIrv0RcKZmbvhF2oX7n8pLQVipd lklrfkyJwArpVYRzMshRMWrWA83rPUMU3rDP0By61A9R1Zn3oR0KiHzGgcU= -----END CERTIFICATE-----Generated at Wed Nov 5 19:09:17 2025 by rpki-client