
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ruh_5MYFdxTerzhfn-6fAMFpQHY.roa
File: ruh_5MYFdxTerzhfn-6fAMFpQHY.roa (raw, json)
Hash identifier: fcgb6zv8oo3picWdRkoWF+h+JLA19segkhrsrNDGGsE=
Subject key identifier: AE:E8:7F:E4:C6:05:77:14:DE:AF:38:5F:9F:EE:9F:00:C1:69:40:76
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 87
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ruh_5MYFdxTerzhfn-6fAMFpQHY.roa
Signing time: Tue 31 Mar 2026 07:35:13 +0000
ROA not before: Tue 31 Mar 2026 07:35:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Mar 31 07:35:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AEE87FE4C6057714DEAF385F9FEE9F00C1694076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:51:ca:aa:bf:b7:30:ef:43:44:d4:48:6a:
eb:d9:02:94:91:d9:1e:12:27:0d:03:57:a7:41:87:
c8:3a:ae:b3:0b:fb:55:bc:2f:37:94:11:0a:ff:33:
78:ba:c9:eb:af:2e:b3:69:be:6d:91:03:e3:30:d9:
1c:8e:6b:4a:53:fe:b1:3e:6a:da:9d:81:9d:51:80:
9c:3e:5c:f3:3a:e1:e8:6e:7e:3b:3a:9e:7c:ce:93:
8a:1d:fd:a3:43:9f:85:df:33:aa:bc:65:ba:ed:8e:
0f:6c:31:c1:ba:49:04:a3:14:bb:55:21:bf:90:e9:
65:01:f2:05:22:66:4b:eb:4f:dc:c5:19:6e:a8:97:
1d:ef:81:40:15:f1:38:34:b5:be:51:ff:48:d3:66:
a8:ae:e9:3b:70:f4:46:ee:a5:43:b2:b5:2f:54:9b:
fa:69:6c:11:9f:10:d2:4f:d8:73:b1:cd:6e:47:a3:
1b:2f:6d:08:32:a0:54:13:a6:73:30:bb:ae:2e:30:
47:15:42:fb:4f:94:ec:d2:97:66:c7:90:d9:4a:25:
f0:45:b6:13:91:d3:1f:63:a5:64:4b:ec:39:68:09:
66:f5:ca:2a:e4:39:cc:04:58:82:11:f2:7c:57:5b:
7c:fc:d2:0e:68:4f:c9:05:15:d6:3d:6d:1c:64:4d:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:7F:E4:C6:05:77:14:DE:AF:38:5F:9F:EE:9F:00:C1:69:40:76
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ruh_5MYFdxTerzhfn-6fAMFpQHY.roa
sbgp-ipAddrBlock: critical
IPv4:
157.17.64.0/20
Signature Algorithm: sha256WithRSAEncryption
99:e9:8c:6d:22:06:96:8a:ab:12:df:87:35:29:0a:dd:26:e1:
57:74:56:70:a5:80:b6:cd:ad:f6:ab:c1:d7:bb:6d:e4:43:ef:
91:e7:9d:ad:49:75:c7:be:f7:99:75:cb:5f:e0:f5:e8:c3:dd:
b3:d0:eb:1b:0e:5c:c9:44:a8:d9:b5:a6:da:6d:1a:e3:0d:e5:
e9:e3:8d:d5:0b:5c:f9:40:bf:c8:a6:06:9d:34:5d:68:87:92:
3b:41:43:d4:5c:bb:a1:94:48:4c:51:00:8e:27:98:91:7b:80:
bf:21:1f:d3:84:28:01:45:f0:b1:6f:c4:dd:45:a1:b0:10:7d:
19:a4:6f:f6:7e:61:23:53:cf:06:dc:bb:c1:96:76:75:12:69:
49:44:ac:cf:64:42:c3:ba:e3:cb:33:ab:9e:79:d1:06:8f:0b:
34:da:3f:29:dc:0d:84:9a:c6:67:5f:44:59:cc:58:86:03:5b:
2a:99:26:a3:17:b7:98:48:07:5a:5a:2e:91:8e:51:39:c8:91:
77:b9:69:ef:d0:43:60:93:8d:46:4b:f5:9e:a8:6e:62:58:f2:
a8:1b:89:73:3c:21:f4:c7:ba:fd:3f:da:5c:0b:60:36:ca:0f:
37:0e:6f:8f:a9:52:62:33:f6:3b:18:be:ef:c7:46:9f:b0:54:
a1:f7:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:24 2026 by rpki-client