$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYMQuuzC8BlUVI9WnIa6MpXGTNc.roa File: EYMQuuzC8BlUVI9WnIa6MpXGTNc.roa (raw, json) Hash identifier: 4k6kZNIXct/T6pay3rTBkKF0atRNwUU2dl+TUjlEsiQ= Subject key identifier: 11:83:10:BA:EC:C2:F0:19:54:54:8F:56:9C:86:BA:32:95:C6:4C:D7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 154B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYMQuuzC8BlUVI9WnIa6MpXGTNc.roa Signing time: Tue 31 Mar 2026 07:59:21 +0000 ROA not before: Tue 31 Mar 2026 07:59:21 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5451 (0x154b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 07:59:21 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=118310BAECC2F01954548F569C86BA3295C64CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:68:43:0b:c6:0e:0a:e7:98:55:57:da:0e: ac:ce:cf:22:bf:37:5f:a8:d4:c9:6b:12:c9:b4:a9: 08:e8:f5:1d:c0:3c:19:41:d4:68:93:a0:45:de:67: f2:02:8f:4b:eb:c8:fa:d1:61:0d:6e:b6:66:c2:28: 65:70:d5:f7:30:a9:5b:e9:dc:a6:6b:dc:ea:66:9b: 3d:5b:06:f9:65:6b:ea:b8:93:3c:95:82:f4:6b:56: 0e:5a:98:e7:49:79:9d:c6:44:51:5f:4b:88:ab:0d: d8:29:27:a5:bb:bd:5e:51:3e:1c:09:3e:32:d8:89: dc:a2:53:2e:c0:6d:09:8b:88:b5:41:18:74:56:b7: 06:10:d8:f2:32:a2:72:df:7b:cd:86:13:7c:66:74: af:76:4e:96:0f:e5:64:8c:48:44:fb:f5:05:44:cd: db:7e:54:1d:37:3d:0e:bc:15:c2:33:47:8d:f6:2d: 53:a5:00:a8:cd:da:b3:25:35:d6:09:2c:1b:12:15: 08:94:76:ed:34:b4:9c:ac:d0:ea:6e:67:75:5e:67: f3:69:f3:a2:3c:d0:1f:54:8c:d3:60:38:62:0a:25: 4b:9b:3e:30:3a:42:da:a5:3f:7a:dd:fe:bd:6d:16: e7:36:a3:64:9c:e9:9b:21:45:13:41:5e:6b:08:9a: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:83:10:BA:EC:C2:F0:19:54:54:8F:56:9C:86:BA:32:95:C6:4C:D7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYMQuuzC8BlUVI9WnIa6MpXGTNc.roa sbgp-ipAddrBlock: critical IPv4: 220.159.60.0/22 Signature Algorithm: sha256WithRSAEncryption 92:a8:b2:50:33:67:50:32:f2:5b:04:4d:36:be:0b:36:6c:cb: 3a:ef:b8:5d:9a:96:5b:5f:d1:df:15:e8:d8:c2:8a:d5:5e:01: b9:ec:42:65:b3:18:9b:ff:ff:fd:35:0a:79:65:17:63:44:2a: 8c:6b:6a:0a:37:52:fd:ff:4c:f2:13:ef:a8:23:d5:8a:a6:18: 7f:16:47:01:06:93:a7:a1:c4:91:18:20:f5:17:93:c4:b9:16: ec:55:1d:c0:58:f8:65:20:b6:fa:6d:ef:b2:e5:11:60:b2:49: 0f:9f:d7:97:aa:34:6a:a0:cd:42:dd:99:e6:08:30:29:68:76: 09:1d:ec:f9:50:cf:9c:b1:c5:e8:5d:e1:03:2c:c4:a2:01:c1: ae:97:ca:98:27:a2:dd:77:10:04:b4:13:f9:2c:cc:6a:80:8b: ac:1b:7d:2e:84:4c:ea:e9:35:f5:c0:75:1d:b6:82:95:7e:be: 0d:d7:1a:05:cf:1b:ba:a1:9a:51:97:ca:a0:c1:59:d3:c9:37: 57:90:9f:f0:e5:15:67:e5:ca:c0:8c:82:a7:58:f4:13:db:e0: 29:53:de:3f:03:bc:61:fb:33:50:ad:46:ad:a8:97:bf:e9:6b: 3d:e1:46:b4:68:63:2b:8e:d1:0f:4e:67:0f:8a:04:09:e8:aa: 14:0a:7f:e4 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICFUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw NzU5MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDExODMxMEJBRUNDMkYw MTk1NDU0OEY1NjlDODZCQTMyOTVDNjRDRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD+2hDC8YOCueYVVfaDqzOzyK/N1+o1MlrEsm0qQjo9R3APBlB 1GiToEXeZ/ICj0vryPrRYQ1utmbCKGVw1fcwqVvp3KZr3Opmmz1bBvlla+q4kzyV gvRrVg5amOdJeZ3GRFFfS4irDdgpJ6W7vV5RPhwJPjLYidyiUy7AbQmLiLVBGHRW twYQ2PIyonLfe82GE3xmdK92TpYP5WSMSET79QVEzdt+VB03PQ68FcIzR432LVOl AKjN2rMlNdYJLBsSFQiUdu00tJys0OpuZ3VeZ/Np86I80B9UjNNgOGIKJUubPjA6 QtqlP3rd/r1tFuc2o2Sc6ZshRRNBXmsImmoDAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUEYMQuuzC8BlUVI9WnIa6MpXGTNcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0VZTVF1dXpDOEJsVVZJOVduSWE2TXBYR1ROYy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALcnzwwDQYJKoZIhvcNAQELBQADggEB AJKoslAzZ1Ay8lsETTa+CzZsyzrvuF2alltf0d8V6NjCitVeAbnsQmWzGJv///01 CnllF2NEKoxrago3Uv3/TPIT76gj1YqmGH8WRwEGk6ehxJEYIPUXk8S5FuxVHcBY +GUgtvpt77LlEWCySQ+f15eqNGqgzULdmeYIMClodgkd7PlQz5yxxehd4QMsxKIB wa6Xypgnot13EAS0E/kszGqAi6wbfS6ETOrpNfXAdR22gpV+vg3XGgXPG7qhmlGX yqDBWdPJN1eQn/DlFWflysCMgqdY9BPb4ClT3j8DvGH7M1CtRq2ol7/paz3hRrRo YyuO0Q9OZw+KBAnoqhQKf+Q= -----END CERTIFICATE-----Generated at Tue Apr 7 19:45:19 2026 by rpki-client