$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EWZCSZKfOi6SvGs-pPSNYvF0a5Q.roa File: EWZCSZKfOi6SvGs-pPSNYvF0a5Q.roa (raw, json) Hash identifier: 4ny3+ARKziRL3LRiycA56HcK+fKwf8ygrONMo50XKIc= Subject key identifier: 11:66:42:49:92:9F:3A:2E:92:BC:6B:3E:A4:F4:8D:62:F1:74:6B:94 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1506 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EWZCSZKfOi6SvGs-pPSNYvF0a5Q.roa Signing time: Tue 31 Mar 2026 07:58:47 +0000 ROA not before: Tue 31 Mar 2026 07:58:47 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5382 (0x1506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:58:47 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=11664249929F3A2E92BC6B3EA4F48D62F1746B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:09:cc:b6:77:6f:2b:4e:50:a3:2e:52:cb: e6:79:53:44:28:87:44:40:21:1c:c1:73:ce:75:fd: fe:7e:69:8a:d7:16:02:03:24:4a:41:72:ea:5f:e3: 74:f4:5d:ff:20:dc:af:6c:87:f1:d3:bc:53:1f:f3: ad:72:de:2c:d5:c2:81:d2:78:d5:b7:1a:be:7b:b9: a4:3f:06:c1:47:a4:6e:fe:20:56:e2:54:d8:2f:58: 57:7f:60:29:fd:a4:07:7b:a3:fa:7f:80:ff:89:81: d5:a8:6b:20:ca:d6:dc:81:44:bd:09:3f:f8:1d:7e: 41:bd:61:4e:bf:8b:4a:b2:25:ea:6e:c3:82:58:40: a6:71:24:e0:56:67:44:ac:28:0f:e8:53:2b:27:be: 96:70:26:97:34:ef:57:22:0f:da:c8:bc:c9:f9:fc: d9:15:d9:40:f0:6c:37:f3:c4:ed:62:e8:97:48:95: 95:4f:1c:54:f3:72:08:24:3a:ab:86:42:a1:a6:e3: a2:6e:17:c4:5d:70:fa:e4:2e:99:b9:27:de:37:28: 30:7a:8a:6d:f3:5f:fd:e0:88:ed:58:66:7a:c9:ec: d2:ee:6b:52:d2:43:29:58:89:13:22:39:69:42:0e: 45:6f:f5:bd:92:d9:f6:7c:ad:f0:70:e1:16:f4:fd: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:42:49:92:9F:3A:2E:92:BC:6B:3E:A4:F4:8D:62:F1:74:6B:94 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EWZCSZKfOi6SvGs-pPSNYvF0a5Q.roa sbgp-ipAddrBlock: critical IPv4: 211.14.88.0/22 Signature Algorithm: sha256WithRSAEncryption ad:7e:3f:f3:1c:77:74:75:f1:ac:fa:0b:77:d1:05:af:f7:b7: 6a:07:01:b5:5e:a2:0e:5e:ce:ce:a0:d3:ce:7e:9f:31:b5:2f: c3:f9:57:52:1b:5b:a2:61:8f:88:3d:59:9c:83:c5:cb:6c:62: 27:03:37:48:a1:31:45:48:04:38:31:88:d7:d6:39:07:f7:91: 4e:66:9f:28:fa:7c:57:8b:31:b9:11:57:31:67:04:77:9b:62: ae:1e:2d:4e:d8:a6:dd:af:59:c7:23:46:60:0b:46:24:f6:97: b1:cb:7a:5e:57:5a:91:39:38:2f:9e:96:59:07:bf:c2:bc:e5: 2a:8c:a7:a7:10:2a:29:36:e2:a3:91:2a:7d:6d:71:e1:5a:35: a8:d5:2e:a0:d1:3e:5c:2d:4c:1a:d8:48:98:5e:62:86:36:64: 75:8a:7b:5c:e7:c2:53:53:39:1b:e0:36:25:78:7e:b1:b6:50: 8a:b8:73:8a:36:5a:24:ba:ff:7c:c9:eb:59:8d:d4:fd:bb:c3: 0a:44:2f:ff:9d:0b:c7:8f:ae:31:4d:90:2d:5b:95:e7:f2:77: 6e:43:c0:77:b4:5e:00:17:98:14:3f:37:8a:67:8d:58:25:bc: e3:c3:ae:a3:a8:b9:64:50:ca:bd:25:57:db:39:cf:84:ac:6c: af:a7:b8:12 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU4NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDExNjY0MjQ5OTI5RjNB MkU5MkJDNkIzRUE0RjQ4RDYyRjE3NDZCOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOJgnMtndvK05Qoy5Sy+Z5U0Qoh0RAIRzBc851/f5+aYrXFgID JEpBcupf43T0Xf8g3K9sh/HTvFMf861y3izVwoHSeNW3Gr57uaQ/BsFHpG7+IFbi VNgvWFd/YCn9pAd7o/p/gP+JgdWoayDK1tyBRL0JP/gdfkG9YU6/i0qyJepuw4JY QKZxJOBWZ0SsKA/oUysnvpZwJpc071ciD9rIvMn5/NkV2UDwbDfzxO1i6JdIlZVP HFTzcggkOquGQqGm46JuF8RdcPrkLpm5J943KDB6im3zX/3giO1YZnrJ7NLua1LS QylYiRMiOWlCDkVv9b2S2fZ8rfBw4Rb0/WnXAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUEWZCSZKfOi6SvGs+pPSNYvF0a5QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0VXWkNTWktmT2k2U3ZHcy1wUFNOWXZGMGE1US5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALTDlgwDQYJKoZIhvcNAQELBQADggEB AK1+P/Mcd3R18az6C3fRBa/3t2oHAbVeog5ezs6g085+nzG1L8P5V1IbW6Jhj4g9 WZyDxctsYicDN0ihMUVIBDgxiNfWOQf3kU5mnyj6fFeLMbkRVzFnBHebYq4eLU7Y pt2vWccjRmALRiT2l7HLel5XWpE5OC+ellkHv8K85SqMp6cQKik24qORKn1tceFa NajVLqDRPlwtTBrYSJheYoY2ZHWKe1znwlNTORvgNiV4frG2UIq4c4o2WiS6/3zJ 61mN1P27wwpEL/+dC8ePrjFNkC1blefyd25DwHe0XgAXmBQ/N4pnjVglvOPDrqOo uWRQyr0lV9s5z4SsbK+nuBI= -----END CERTIFICATE-----Generated at Tue Apr 7 19:42:58 2026 by rpki-client