$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/JBra7Mj35LpaR0iGfqi63Fgwh3s.roa File: JBra7Mj35LpaR0iGfqi63Fgwh3s.roa (raw, json) Hash identifier: IdtsD8asfd7Vo9FzT768lCZ+77fuG379P7iSPwk6MWw= Subject key identifier: 24:1A:DA:EC:C8:F7:E4:BA:5A:47:48:86:7E:A8:BA:DC:58:30:87:7B Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 02A8 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JBra7Mj35LpaR0iGfqi63Fgwh3s.roa Signing time: Tue 31 Mar 2026 07:33:52 +0000 ROA not before: Tue 31 Mar 2026 07:33:52 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 4713 IP address blocks: 218.224.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: Mar 31 07:33:52 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=241ADAECC8F7E4BA5A4748867EA8BADC5830877B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:ba:28:51:95:07:e4:aa:45:da:1d:76:5e: c0:59:8b:64:54:cd:b8:34:63:59:4d:a7:ad:64:2b: 55:62:f0:c5:77:63:09:0f:73:09:83:98:4c:a8:15: 2e:13:89:e3:02:6a:76:33:bb:53:24:b8:0e:ab:bb: f0:e3:8f:5f:9e:54:bd:4c:7d:91:4e:85:47:ef:d1: 18:63:6c:5f:9e:1e:34:c9:0b:75:b2:7b:ac:58:08: 0f:96:bf:ab:98:4b:bf:4b:65:7c:84:6a:0b:62:b2: d4:6f:9f:17:c7:ac:8f:fd:d0:7f:10:45:eb:b0:58: 22:72:e9:8a:59:02:bc:66:53:1e:39:2f:2f:dc:42: 41:dd:93:37:42:25:3c:09:e8:e4:e7:e3:85:c7:9d: 85:ff:1d:5c:1a:2a:d9:83:1a:74:94:63:4d:c5:89: 7b:c4:eb:fc:42:30:fa:e2:24:f3:2a:8e:2c:92:3d: 3e:ce:1d:42:9d:fc:82:69:57:6f:cf:31:c5:21:61: cf:6d:9f:f9:72:f6:5f:fa:6c:3e:62:0f:f3:e7:0c: 62:d8:e9:54:42:69:c7:49:db:d4:bf:3a:af:08:dc: 0e:64:74:fa:45:70:61:51:74:aa:87:1d:f1:84:87: 92:25:a3:dc:27:4d:ba:a8:f1:81:35:a9:c5:11:98: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1A:DA:EC:C8:F7:E4:BA:5A:47:48:86:7E:A8:BA:DC:58:30:87:7B X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JBra7Mj35LpaR0iGfqi63Fgwh3s.roa sbgp-ipAddrBlock: critical IPv4: 218.224.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:66:43:d5:17:72:f2:95:a4:70:97:b1:e9:52:25:23:6c:37: 80:25:0d:13:22:72:7c:af:cb:bf:95:3c:79:f2:31:92:ad:c6: 2e:4d:c4:b9:6e:02:3b:ba:0c:29:56:b9:01:76:0c:f3:a7:ee: 45:df:11:99:90:98:b8:cf:38:6a:19:ad:55:66:9a:6f:8f:32: 9b:9d:79:c5:67:3e:47:9d:04:dd:01:c3:71:56:a0:d0:a3:b8: d1:65:62:16:db:97:95:d0:8d:fe:89:b7:fb:b3:f2:ac:66:a7: 54:67:93:4a:33:ec:36:23:b5:4a:0d:46:d7:6c:3f:84:d9:9e: 17:ea:8e:1f:7f:bb:a4:e2:43:92:50:22:66:8d:1e:52:02:5a: 64:50:54:28:23:ef:97:b2:2c:66:5c:7a:cb:6e:7b:67:86:ba: 11:0b:9a:25:2f:bb:15:fc:0f:a8:eb:02:60:f9:b9:19:12:64: b1:3b:84:ec:f1:81:bb:c1:e4:8a:d4:51:54:87:6d:4d:d1:e1: 03:21:9b:8b:76:5e:4c:6b:ba:bf:4e:0c:a6:a8:f7:8e:8a:f5: ed:b0:49:3c:a9:7b:20:e2:d8:05:fc:79:07:db:b7:ab:47:bd: ce:2f:7b:83:e7:b9:ff:df:2c:bc:80:55:36:3c:11:49:e7:e0: 93:d4:5b:04 -----BEGIN CERTIFICATE----- MIIEvDCCA6SgAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw NzMzNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI0MUFEQUVDQzhGN0U0 QkE1QTQ3NDg4NjdFQThCQURDNTgzMDg3N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+irooUZUH5KpF2h12XsBZi2RUzbg0Y1lNp61kK1Vi8MV3YwkP cwmDmEyoFS4TieMCanYzu1MkuA6ru/Djj1+eVL1MfZFOhUfv0RhjbF+eHjTJC3Wy e6xYCA+Wv6uYS79LZXyEagtistRvnxfHrI/90H8QReuwWCJy6YpZArxmUx45Ly/c QkHdkzdCJTwJ6OTn44XHnYX/HVwaKtmDGnSUY03FiXvE6/xCMPriJPMqjiySPT7O HUKd/IJpV2/PMcUhYc9tn/ly9l/6bD5iD/PnDGLY6VRCacdJ29S/Oq8I3A5kdPpF cGFRdKqHHfGEh5Ilo9wnTbqo8YE1qcURmAJRAgMBAAGjggHYMIIB1DAdBgNVHQ4E FgQUJBra7Mj35LpaR0iGfqi63Fgwh3swHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMTMxL0pCcmE3TWozNUxwYVIwaUdmcWk2M0Znd2gzcy5yb2EwHgYI KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDa4DANBgkqhkiG9w0BAQsFAAOCAQEA H2ZD1Rdy8pWkcJex6VIlI2w3gCUNEyJyfK/Lv5U8efIxkq3GLk3EuW4CO7oMKVa5 AXYM86fuRd8RmZCYuM84ahmtVWaab48ym515xWc+R50E3QHDcVag0KO40WViFtuX ldCN/om3+7PyrGanVGeTSjPsNiO1Sg1G12w/hNmeF+qOH3+7pOJDklAiZo0eUgJa ZFBUKCPvl7IsZlx6y257Z4a6EQuaJS+7FfwPqOsCYPm5GRJksTuE7PGBu8HkitRR VIdtTdHhAyGbi3ZeTGu6v04Mpqj3jor17bBJPKl7IOLYBfx5B9u3q0e9zi97g+e5 /98svIBVNjwRSefgk9RbBA== -----END CERTIFICATE-----Generated at Tue Apr 7 19:46:15 2026 by rpki-client