
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/L85NS3zCVoTL49XBiTMQDViszlU.roa
File: L85NS3zCVoTL49XBiTMQDViszlU.roa (raw, json)
Hash identifier: OTD5HnMAdkWoidp67ONRXO4TF16SuxA/kyRgqRuWm98=
Subject key identifier: 2F:CE:4D:4B:7C:C2:56:84:CB:E3:D5:C1:89:33:10:0D:58:AC:CE:55
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 64
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/L85NS3zCVoTL49XBiTMQDViszlU.roa
Signing time: Tue 31 Mar 2026 08:42:46 +0000
ROA not before: Tue 31 Mar 2026 08:42:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2405:25c0:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Mar 31 08:42:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2FCE4D4B7CC25684CBE3D5C18933100D58ACCE55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:c0:81:20:fb:77:fd:98:91:6f:55:03:77:
e3:0c:6e:a9:1f:50:3b:af:d1:ef:d4:d8:f6:5e:60:
e9:44:95:93:c8:25:f6:e8:ce:d9:b5:11:50:85:fc:
c8:6f:d7:75:30:91:23:d0:eb:5d:77:7f:57:24:15:
b5:c4:05:31:2f:ad:da:27:cd:5e:c3:54:2b:f5:e9:
2d:76:bc:c7:81:d4:95:65:a1:9f:1c:02:13:b1:41:
9b:cb:55:19:ad:4d:7a:a9:75:a5:39:ae:30:f3:a5:
77:71:ce:1e:57:79:5c:5f:77:b9:ae:5d:29:92:43:
3b:45:4f:d7:e8:7b:17:b0:7e:87:ec:fa:95:7b:f3:
fe:b5:12:df:4a:2a:16:8b:fc:ee:48:51:d2:1c:b7:
74:e2:8e:62:46:42:e8:44:68:32:38:f2:a4:be:b1:
0f:5e:ef:19:4c:20:32:75:0c:e1:53:e6:c1:6d:92:
f0:63:20:9d:54:f6:8f:ed:61:d1:ce:d5:44:68:7c:
f9:0e:cc:db:84:19:47:ab:f4:e1:af:94:ae:1a:9c:
38:6b:65:a5:c3:89:8a:97:2d:f8:58:40:db:4a:4c:
01:77:ee:8e:dd:3e:f8:12:b2:79:cb:3d:24:b9:d6:
63:36:9a:51:8f:97:f1:4d:a4:ae:c8:e4:56:96:36:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:4D:4B:7C:C2:56:84:CB:E3:D5:C1:89:33:10:0D:58:AC:CE:55
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/L85NS3zCVoTL49XBiTMQDViszlU.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:7000::/36
Signature Algorithm: sha256WithRSAEncryption
28:10:7d:08:c4:c1:a7:38:28:ce:67:cf:8b:1f:b4:a5:d7:15:
c4:7a:25:4e:6c:01:75:a3:75:aa:28:1e:59:19:a8:2f:13:19:
28:8f:f6:90:c9:f7:37:59:21:db:aa:c9:f1:b7:bb:36:0f:e2:
4c:09:e6:56:f4:57:60:c3:54:63:b7:d6:54:cf:c4:c2:79:44:
63:52:1a:bc:f3:42:3c:16:49:55:06:20:31:8a:ed:92:95:09:
fa:79:e6:3f:31:93:5a:64:f5:a8:a6:f3:35:11:e4:22:8a:4b:
e5:7f:e2:cf:ee:7c:5d:53:04:a5:02:f9:14:6b:4b:d9:12:12:
b8:15:fe:cb:0e:2f:46:67:9a:ea:fc:6e:f4:52:9c:37:6e:f8:
f7:e7:e1:bd:80:62:df:22:45:d0:8d:d5:16:f0:17:98:d3:de:
5a:76:d8:95:96:ae:37:ce:72:83:7b:dc:e4:f5:4b:80:66:49:
fa:b2:25:0b:71:e2:53:e9:dc:1b:60:2e:37:26:fd:64:f3:67:
bd:c3:ef:48:36:77:0b:64:6e:b3:ac:16:08:45:54:b8:e0:23:
ff:fb:cb:f8:f5:25:02:ff:ae:af:6a:64:54:b2:86:e6:a1:e1:
84:c1:99:6c:2e:3b:3f:89:de:af:25:c2:aa:ac:ef:26:10:68:
ce:d6:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:49 2026 by rpki-client