$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/58Ey1qC86su8cgsb084frfVPaSI.roa File: 58Ey1qC86su8cgsb084frfVPaSI.roa (raw, json) Hash identifier: x51PVS53g3AdMhV/MiOQ6pySzEhovw0hyuPEucKDFcM= Subject key identifier: E7:C1:32:D6:A0:BC:EA:CB:BC:72:0B:1B:D3:CE:1F:AD:F5:4F:69:22 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15C8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/58Ey1qC86su8cgsb084frfVPaSI.roa Signing time: Tue 31 Mar 2026 08:00:25 +0000 ROA not before: Tue 31 Mar 2026 08:00:25 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5576 (0x15c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:25 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E7C132D6A0BCEACBBC720B1BD3CE1FADF54F6922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:20:46:da:0a:d3:fd:aa:73:fd:cc:4f:8c: be:ce:2f:e4:d7:7f:9f:91:91:10:6e:08:97:d3:93: c3:a3:9d:a1:9c:b8:f7:d2:20:90:b2:c2:cf:cf:c6: f7:8a:0c:1e:ee:b5:15:31:df:d3:ea:02:56:c7:80: 50:b8:26:59:49:59:28:8b:25:5f:e6:bf:62:f1:f9: bd:dd:ff:23:64:14:d1:86:6e:56:33:57:a5:d4:1e: 9e:6f:cd:24:90:8f:b1:89:8d:5c:81:88:d0:84:8a: ba:1f:a5:f8:d8:e7:55:34:47:83:54:cb:6f:07:57: b2:4b:7e:1d:16:20:af:4b:1e:0a:f0:e3:0e:c8:1a: 59:b1:c7:7b:4a:ae:b4:0f:e3:68:6f:96:30:8c:b4: 2c:65:6d:b0:67:1a:61:ea:40:6b:69:ba:13:c5:6c: 1f:a2:07:86:a2:98:4e:4e:1d:ad:a9:9b:4e:4b:40: ad:da:68:97:82:c3:de:aa:a3:a8:43:44:6f:94:d6: f7:e8:36:7b:2d:ce:d2:89:4f:16:dc:1d:d5:0f:51: e7:d4:e6:02:f6:41:03:98:22:3c:0a:cb:30:f0:45: 7b:a3:c6:c2:82:b6:c1:dc:36:83:d9:03:13:ba:04: b0:cf:89:0f:b7:da:b3:b7:cb:ae:1f:17:85:03:d4: 0d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:32:D6:A0:BC:EA:CB:BC:72:0B:1B:D3:CE:1F:AD:F5:4F:69:22 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/58Ey1qC86su8cgsb084frfVPaSI.roa sbgp-ipAddrBlock: critical IPv4: 49.96.252.0/23 Signature Algorithm: sha256WithRSAEncryption 67:fb:07:27:20:b4:b8:67:f7:ca:33:f7:75:a6:77:d9:79:fe: c3:13:54:80:49:2e:44:b8:c9:0b:5b:4d:df:cb:4d:e2:32:7d: ac:15:06:59:a9:73:ba:f3:ec:a4:69:87:17:ee:e1:ec:15:a2: ab:80:4b:aa:63:c5:1b:a7:c6:12:bc:e0:47:61:bf:d8:76:80: de:79:17:f0:0c:dd:5a:99:4d:98:af:91:7b:ca:26:02:9c:93: 74:f0:04:d4:66:cf:b2:69:93:ec:ba:34:84:f1:11:e9:3e:42: e5:51:3a:80:d0:bb:48:b3:c4:70:a0:23:6b:9b:ee:69:42:60: 58:07:9b:29:41:ab:20:bf:1e:82:ac:a6:38:8c:d3:85:cc:3e: 55:a0:e0:1a:78:19:f8:10:e4:13:20:1f:3d:ad:84:81:4e:1d: 21:fe:7d:f9:0c:bd:cd:a0:2d:71:cb:be:0a:71:9c:f7:cf:ae: ed:5a:c1:92:1f:37:b3:46:43:05:b7:63:7c:fe:6b:77:46:06: 49:4c:d2:85:7c:b5:d3:cf:72:f3:76:32:36:27:28:20:5a:aa: 02:cb:8e:28:f7:6e:e5:8a:97:88:e2:be:02:52:66:cd:86:b9: c8:7c:37:ac:fa:53:69:a8:aa:22:a3:44:37:d2:33:58:57:dc: c3:ad:3d:bd -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU3QzEzMkQ2QTBCQ0VB Q0JCQzcyMEIxQkQzQ0UxRkFERjU0RjY5MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXBiBG2grT/apz/cxPjL7OL+TXf5+RkRBuCJfTk8OjnaGcuPfS IJCyws/PxveKDB7utRUx39PqAlbHgFC4JllJWSiLJV/mv2Lx+b3d/yNkFNGGblYz V6XUHp5vzSSQj7GJjVyBiNCEirofpfjY51U0R4NUy28HV7JLfh0WIK9LHgrw4w7I Glmxx3tKrrQP42hvljCMtCxlbbBnGmHqQGtpuhPFbB+iB4aimE5OHa2pm05LQK3a aJeCw96qo6hDRG+U1vfoNnstztKJTxbcHdUPUefU5gL2QQOYIjwKyzDwRXujxsKC tsHcNoPZAxO6BLDPiQ+32rO3y64fF4UD1A1DAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQU58Ey1qC86su8cgsb084frfVPaSIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5LzU4RXkxcUM4NnN1OGNnc2IwODRmcmZWUGFTSS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExYPwwDQYJKoZIhvcNAQELBQADggEB AGf7BycgtLhn98oz93Wmd9l5/sMTVIBJLkS4yQtbTd/LTeIyfawVBlmpc7rz7KRp hxfu4ewVoquAS6pjxRunxhK84Edhv9h2gN55F/AM3VqZTZivkXvKJgKck3TwBNRm z7Jpk+y6NITxEek+QuVROoDQu0izxHCgI2ub7mlCYFgHmylBqyC/HoKspjiM04XM PlWg4Bp4GfgQ5BMgHz2thIFOHSH+ffkMvc2gLXHLvgpxnPfPru1awZIfN7NGQwW3 Y3z+a3dGBklM0oV8tdPPcvN2MjYnKCBaqgLLjij3buWKl4jivgJSZs2Guch8N6z6 U2moqiKjRDfSM1hX3MOtPb0= -----END CERTIFICATE-----Generated at Tue Apr 7 22:24:56 2026 by rpki-client