
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/hoCLvvAN6CLS4_QjO6p5GxU7z7A.roa
File: hoCLvvAN6CLS4_QjO6p5GxU7z7A.roa (raw, json)
Hash identifier: YPpbN17D/R1hEnvwBmiIpaPBOAlLanO1A3DF4aEHLs0=
Subject key identifier: 86:80:8B:BE:F0:0D:E8:22:D2:E3:F4:23:3B:AA:79:1B:15:3B:CF:B0
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 8A
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/hoCLvvAN6CLS4_QjO6p5GxU7z7A.roa
Signing time: Tue 31 Mar 2026 07:35:14 +0000
ROA not before: Tue 31 Mar 2026 07:35:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Mar 31 07:35:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=86808BBEF00DE822D2E3F4233BAA791B153BCFB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:f6:19:ba:16:e2:d1:cd:43:89:11:2b:3e:
6e:6c:eb:ba:a1:25:8a:b4:95:08:bd:07:1a:0e:e8:
49:5f:7b:38:26:aa:6c:a1:5f:9b:3f:16:45:b5:33:
13:58:a9:88:48:4f:03:16:96:83:45:dc:ed:4c:73:
b4:b2:d0:db:94:43:2b:f4:ca:01:62:52:58:c4:d5:
2f:43:8f:2f:ed:e2:a8:ec:52:3f:aa:9b:a9:63:da:
ac:e6:d2:d6:14:d1:91:37:3a:bd:16:90:5a:a7:11:
b6:5e:3f:b0:10:29:44:f5:df:9e:de:b0:73:ef:cd:
81:b3:01:be:93:7d:31:ce:f5:06:37:43:43:84:a1:
7b:ac:ff:0b:3a:e9:fe:12:f7:b9:2f:ab:a3:f0:1f:
17:2e:d9:e1:d4:ba:9c:43:af:6c:c2:85:6d:8b:9b:
39:f2:ab:4c:7e:55:33:84:84:a9:f4:0c:df:82:ff:
ce:04:b5:99:fb:2e:dd:bf:93:96:44:24:ff:31:29:
9d:57:33:25:00:5e:22:1e:81:91:0c:db:05:9c:d2:
aa:0c:f2:58:9f:9a:63:66:db:16:00:85:04:8f:62:
9e:da:03:6d:00:1e:3b:de:20:4b:98:23:51:04:fa:
7d:7b:f9:25:38:a1:1e:75:06:05:27:e5:f3:76:05:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:8B:BE:F0:0D:E8:22:D2:E3:F4:23:3B:AA:79:1B:15:3B:CF:B0
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/hoCLvvAN6CLS4_QjO6p5GxU7z7A.roa
sbgp-ipAddrBlock: critical
IPv4:
157.17.88.0/21
Signature Algorithm: sha256WithRSAEncryption
77:b8:4e:ec:ea:20:6e:48:ed:4a:20:a9:ce:df:bc:ca:06:40:
07:67:8b:f3:54:61:9c:36:42:1e:27:a3:78:88:29:b4:88:f9:
42:ca:d3:52:3e:4d:67:0b:f9:ab:c0:c5:0c:3c:57:aa:e7:fd:
d3:e5:60:b9:db:c6:51:54:7c:cb:d3:e8:b2:d5:56:7c:29:5d:
90:01:d6:f2:3e:8e:61:4b:e3:a4:c9:a9:4f:0c:8b:73:0f:21:
bf:9e:41:02:e1:d1:08:91:45:eb:be:a7:45:62:b9:86:f0:4b:
a3:91:7b:69:a9:a5:e9:82:d8:13:09:c0:55:ae:20:17:9a:57:
99:66:fb:41:84:41:df:7b:f9:cf:04:6b:4a:cc:4d:11:93:39:
10:a5:d6:fc:0b:12:f8:75:e3:18:4f:2e:3e:b3:ab:6d:c2:d9:
3c:6c:d5:a7:3e:6c:d8:24:9b:d0:6d:4e:05:44:47:92:8a:a2:
56:68:38:e6:ee:06:45:17:72:72:98:46:8b:e1:fd:7e:56:d6:
58:3b:43:c9:e7:93:89:7d:7d:fd:7d:b1:e0:ca:31:48:79:9e:
1f:55:e7:61:cd:ec:9a:b7:8b:c8:52:6f:4f:b4:17:49:a4:fc:
89:ac:a7:6a:cf:06:58:cb:bc:33:f9:2a:71:bf:58:6b:7c:ee:
03:b8:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:46 2026 by rpki-client