$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LMLA5KeC1vKhF04vdCDftQO6p0A.roa File: LMLA5KeC1vKhF04vdCDftQO6p0A.roa (raw, json) Hash identifier: vfTDCCemz0zmT7yE1Ri3Br3JvT6qr/30K/fcB3s1tn8= Subject key identifier: 2C:C2:C0:E4:A7:82:D6:F2:A1:17:4E:2F:74:20:DF:B5:03:BA:A7:40 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0451 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LMLA5KeC1vKhF04vdCDftQO6p0A.roa Signing time: Thu 27 Jul 2023 16:43:14 +0000 ROA not before: Thu 27 Jul 2023 16:43:14 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:43:14 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=2CC2C0E4A782D6F2A1174E2F7420DFB503BAA740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:5a:39:1a:47:59:f4:d0:b2:61:3c:cc:1e: 2e:47:8f:98:0c:71:43:ce:70:33:fa:52:d9:5c:85: ae:6d:a3:e2:99:92:ba:6b:9e:da:01:e0:01:eb:1a: 76:7c:47:3c:a8:7e:e2:23:f3:24:93:67:33:8d:fc: 40:a2:40:88:9e:eb:74:fb:43:0b:91:87:08:26:e8: cd:61:15:e0:9f:8a:6f:bc:1a:5f:b0:49:1b:f7:70: 9d:c2:00:af:3d:30:1f:6e:4a:03:a2:ea:f1:4d:4c: d0:3a:12:02:d1:4f:52:ce:81:c9:d5:95:8a:18:78: 19:c6:e4:35:57:7c:df:23:cc:89:72:47:9a:5f:86: 23:d3:33:73:e3:31:61:75:e0:8f:7a:f4:8f:c6:c2: bd:04:d4:27:02:7b:53:1c:06:e6:87:2a:d6:7e:5a: c1:7f:ff:5d:c0:57:6c:8e:9f:45:8a:a8:04:ea:5d: de:b7:3d:24:0f:93:44:4e:f0:71:3d:79:53:eb:aa: 58:1b:eb:0f:c3:41:f1:59:3f:85:e5:c7:f5:31:46: d6:6d:b3:cd:ea:46:91:7a:9f:b0:e0:ec:cf:dc:ae: 97:69:1e:ce:42:62:10:53:81:b2:a3:b1:49:2b:fb: c3:6f:e8:ce:46:14:93:ab:eb:3d:be:ee:a1:9e:52: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C2:C0:E4:A7:82:D6:F2:A1:17:4E:2F:74:20:DF:B5:03:BA:A7:40 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LMLA5KeC1vKhF04vdCDftQO6p0A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.194.0/23 Signature Algorithm: sha256WithRSAEncryption b7:29:17:38:58:26:07:b4:2f:24:e5:b2:e4:63:c4:2c:62:de: 34:85:04:9b:d1:34:9f:4c:26:74:51:bc:3b:77:6b:b8:17:10: a8:ff:74:8e:39:41:e3:01:88:8a:6b:3d:e6:c7:3c:e4:96:dd: 01:93:26:22:91:b3:8f:85:86:d6:6a:f6:40:ca:9f:43:f2:84: d4:5d:ae:8a:64:75:7f:00:e2:17:e1:6e:c0:8c:87:d0:ac:19: 2d:de:e5:77:bf:2d:61:73:ac:67:25:cb:e8:a8:f6:a3:b3:4c: ff:84:59:bb:af:59:a9:f7:2a:89:11:1e:72:0f:f5:ca:69:b2: e7:e6:c1:63:1d:8d:49:9d:35:c2:f4:92:fd:18:af:ee:19:de: 69:bb:fb:0b:05:3f:e2:cf:f2:e1:91:a3:b3:66:b3:22:18:50: 94:63:5a:6b:fb:11:3a:72:62:a4:e7:99:30:48:d8:10:49:12: fe:3e:0b:a6:1f:20:5d:e1:06:74:a5:bc:5e:23:42:24:ae:d2: 92:60:be:82:95:a6:81:7c:5a:15:ec:a1:0c:03:a8:3f:95:77: 84:35:da:c0:55:86:15:b1:93:7e:ec:27:3e:ec:ea:ea:30:9e: 68:1c:a8:3a:13:79:81:aa:65:99:14:f3:e5:d3:6c:4d:7f:7f: 46:9f:98:2f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjQzMTRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDJDQzJDMEU0QTc4MkQ2 RjJBMTE3NEUyRjc0MjBERkI1MDNCQUE3NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcTVo5GkdZ9NCyYTzMHi5Hj5gMcUPOcDP6Utlcha5to+KZkrpr ntoB4AHrGnZ8RzyofuIj8ySTZzON/ECiQIie63T7QwuRhwgm6M1hFeCfim+8Gl+w SRv3cJ3CAK89MB9uSgOi6vFNTNA6EgLRT1LOgcnVlYoYeBnG5DVXfN8jzIlyR5pf hiPTM3PjMWF14I969I/Gwr0E1CcCe1McBuaHKtZ+WsF//13AV2yOn0WKqATqXd63 PSQPk0RO8HE9eVPrqlgb6w/DQfFZP4Xlx/UxRtZts83qRpF6n7Dg7M/crpdpHs5C YhBTgbKjsUkr+8Nv6M5GFJOr6z2+7qGeUgTFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULMLA5KeC1vKhF04vdCDftQO6p0AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xNTEE1S2VDMXZLaEYwNHZkQ0RmdFFPNnAwQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExasIwDQYJKoZIhvcNAQELBQADggEBALcpFzhYJge0LyTlsuRjxCxi3jSF BJvRNJ9MJnRRvDt3a7gXEKj/dI45QeMBiIprPebHPOSW3QGTJiKRs4+FhtZq9kDK n0PyhNRdropkdX8A4hfhbsCMh9CsGS3e5Xe/LWFzrGcly+io9qOzTP+EWbuvWan3 KokRHnIP9cppsufmwWMdjUmdNcL0kv0Yr+4Z3mm7+wsFP+LP8uGRo7NmsyIYUJRj Wmv7ETpyYqTnmTBI2BBJEv4+C6YfIF3hBnSlvF4jQiSu0pJgvoKVpoF8WhXsoQwD qD+Vd4Q12sBVhhWxk37sJz7s6uownmgcqDoTeYGqZZkU8+XTbE1/f0afmC8= -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:24 2024 by rpki-client on console.sobornost.net