$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EEHyVUnhC50i3Ax6_9IpOKVozLQ.roa File: EEHyVUnhC50i3Ax6_9IpOKVozLQ.roa (raw, json) Hash identifier: FenZWYEFBuV4CcQcNzJfd+B1NTCA6tXlQWdRD8vY+FU= Subject key identifier: 10:41:F2:55:49:E1:0B:9D:22:DC:0C:7A:FF:D2:29:38:A5:68:CC:B4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 15D9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EEHyVUnhC50i3Ax6_9IpOKVozLQ.roa Signing time: Tue 31 Mar 2026 08:00:31 +0000 ROA not before: Tue 31 Mar 2026 08:00:31 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5593 (0x15d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:00:31 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1041F25549E10B9D22DC0C7AFFD22938A568CCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:48:0f:a8:10:1b:4c:66:76:b5:36:cd:e6: 62:1f:56:c3:d4:ab:10:20:21:c2:94:9c:97:5c:4a: 41:82:af:e6:56:ef:e8:dc:07:c7:ee:34:3a:fd:22: c5:67:60:d1:cb:2d:a3:09:81:bd:6e:e5:b1:e2:b3: 0e:f5:2c:11:86:13:03:1d:ca:ef:e1:20:0a:f2:c2: 14:07:16:aa:fa:98:36:5c:0a:22:15:1d:a0:58:81: c5:a5:92:b3:09:9d:27:b5:22:15:d6:69:e5:56:f8: ba:05:1e:b7:b0:80:b7:ac:2e:0c:d1:69:25:e0:dc: ee:b7:56:75:5f:25:e7:6f:75:43:ab:bd:4d:27:cd: a2:87:2d:bb:5c:8a:aa:6e:e2:42:f9:c6:ff:ba:ae: 0a:f8:c3:2b:cc:c8:3f:d6:e5:5b:1c:71:ca:5e:b9: 30:de:f5:9b:4c:9b:58:81:3f:cb:46:dd:da:95:12: 2f:86:32:7a:d0:22:97:80:8d:4b:f0:d7:45:14:ce: e3:70:85:b3:72:81:2f:0c:34:1f:42:a3:98:9d:13: 83:1f:c7:0b:e0:6f:a6:b0:70:8e:3f:62:2c:a5:d9: 3e:a7:cb:ad:dd:a7:1d:1e:59:b7:0c:b5:b9:74:e4: 75:d1:43:b9:9f:3f:1e:9b:0d:6a:d4:e4:2c:16:37: e5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:41:F2:55:49:E1:0B:9D:22:DC:0C:7A:FF:D2:29:38:A5:68:CC:B4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EEHyVUnhC50i3Ax6_9IpOKVozLQ.roa sbgp-ipAddrBlock: critical IPv4: 49.98.19.0/24 Signature Algorithm: sha256WithRSAEncryption 12:60:37:d9:cf:03:2d:bb:20:86:22:ee:fa:94:f1:7a:61:f7: 4c:3b:8e:ed:d2:bd:5c:a3:bd:52:35:e1:04:6d:c2:7a:84:07: 2d:7c:99:de:a5:2f:26:6a:91:68:ba:e3:14:94:50:a0:8a:cb: a3:26:4f:01:80:00:19:2c:f2:0a:e4:7d:82:e3:b0:1f:7f:9f: 65:08:eb:87:3e:4f:18:33:03:60:a7:28:94:e6:1b:2d:30:d3: 53:6c:c4:8d:56:f9:73:2d:d5:f8:d5:a7:5d:49:64:e3:f7:9e: 83:99:71:c6:19:6b:f6:75:df:a5:2e:dd:f0:b6:1b:2b:a5:44: 39:77:aa:52:05:8e:99:db:ba:71:38:80:c5:d5:4e:54:71:06: 93:2f:f9:01:68:0b:fc:58:31:59:6d:63:c4:4d:07:9e:1c:a8: 9b:ec:f7:cb:8e:56:9d:1d:2a:2f:56:65:5d:c3:bc:32:4a:3d: 76:7d:81:e6:60:c0:95:47:c8:55:d1:14:0b:f0:39:a6:d6:16: 71:4a:a6:f3:f1:56:00:73:c7:fa:0d:d9:74:b2:15:ad:8e:ef: 90:2b:98:0d:93:90:8d:27:64:b3:2a:84:29:0c:c3:60:97:49: b9:e6:96:bc:28:73:7f:f9:2b:94:dc:ed:b9:ef:04:7f:ce:ef: d2:cd:b2:e1 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODAwMzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEwNDFGMjU1NDlFMTBC OUQyMkRDMEM3QUZGRDIyOTM4QTU2OENDQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJJUgPqBAbTGZ2tTbN5mIfVsPUqxAgIcKUnJdcSkGCr+ZW7+jc B8fuNDr9IsVnYNHLLaMJgb1u5bHisw71LBGGEwMdyu/hIArywhQHFqr6mDZcCiIV HaBYgcWlkrMJnSe1IhXWaeVW+LoFHrewgLesLgzRaSXg3O63VnVfJedvdUOrvU0n zaKHLbtciqpu4kL5xv+6rgr4wyvMyD/W5VscccpeuTDe9ZtMm1iBP8tG3dqVEi+G MnrQIpeAjUvw10UUzuNwhbNygS8MNB9Co5idE4Mfxwvgb6awcI4/Yiyl2T6ny63d px0eWbcMtbl05HXRQ7mfPx6bDWrU5CwWN+UnAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUEEHyVUnhC50i3Ax6/9IpOKVozLQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0VFSHlWVW5oQzUwaTNBeDZfOUlwT0tWb3pMUS5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAxYhMwDQYJKoZIhvcNAQELBQADggEB ABJgN9nPAy27IIYi7vqU8Xph90w7ju3SvVyjvVI14QRtwnqEBy18md6lLyZqkWi6 4xSUUKCKy6MmTwGAABks8grkfYLjsB9/n2UI64c+TxgzA2CnKJTmGy0w01NsxI1W +XMt1fjVp11JZOP3noOZccYZa/Z136Uu3fC2GyulRDl3qlIFjpnbunE4gMXVTlRx BpMv+QFoC/xYMVltY8RNB54cqJvs98uOVp0dKi9WZV3DvDJKPXZ9geZgwJVHyFXR FAvwOabWFnFKpvPxVgBzx/oN2XSyFa2O75ArmA2TkI0nZLMqhCkMw2CXSbnmlrwo c3/5K5Tc7bnvBH/O79LNsuE= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:37 2026 by rpki-client