$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ibua-y1MeGPnzOg9PLCgiMrjn20.roa File: ibua-y1MeGPnzOg9PLCgiMrjn20.roa (raw, json) Hash identifier: mm1fy8ISWa4+KEeNvDTGKZA5R+qrN2vg8faBXdsnIO8= Subject key identifier: 89:BB:9A:FB:2D:4C:78:63:E7:CC:E8:3D:3C:B0:A0:88:CA:E3:9F:6D Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0500 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ibua-y1MeGPnzOg9PLCgiMrjn20.roa Signing time: Thu 29 Feb 2024 01:39:17 +0000 ROA not before: Thu 29 Feb 2024 01:39:17 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 120.137.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:39:17 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=89BB9AFB2D4C7863E7CCE83D3CB0A088CAE39F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:ae:5f:6e:bb:49:b3:67:2d:77:54:6a:cd: 96:33:82:6a:be:48:1d:25:d9:4a:e8:d1:b6:52:1e: 53:36:14:3d:a1:a0:7a:b5:ea:73:d2:b4:60:41:8b: df:38:e5:25:92:e9:74:5d:fa:da:70:4e:68:89:42: f6:02:4b:ac:8a:95:65:c6:aa:6b:56:db:65:4b:53: f1:0d:7c:d9:73:8b:e1:cd:15:10:32:e2:e7:2a:9b: e5:8e:a1:8a:ed:e2:a2:52:97:a3:57:d7:35:3c:bb: 4b:70:22:7f:af:36:5c:01:cb:fa:9e:98:56:59:e9: a0:8a:a4:18:6a:8a:68:00:8f:d5:4f:32:e9:bb:4b: 78:b7:18:13:5a:a2:48:4b:ba:44:b3:32:58:f8:cf: dd:de:81:a9:be:26:a9:07:65:8d:e8:50:79:fd:bf: b7:76:08:95:15:8c:2b:7e:c3:f0:fb:e0:a7:7c:32: 70:74:50:5f:87:2f:65:be:62:92:e8:59:21:8d:fe: d5:6c:87:6c:50:68:9c:5c:4c:c5:fe:ab:c1:71:a9: a0:57:29:b9:fe:00:dc:2f:56:b7:87:3f:ed:15:9a: a7:1a:e5:c5:3a:49:40:b3:c1:68:7c:02:2c:74:e6: fb:e4:7a:f1:71:d4:61:3b:20:2d:05:04:aa:8b:bf: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BB:9A:FB:2D:4C:78:63:E7:CC:E8:3D:3C:B0:A0:88:CA:E3:9F:6D X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ibua-y1MeGPnzOg9PLCgiMrjn20.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.137.128.0/17 Signature Algorithm: sha256WithRSAEncryption 24:be:9d:10:ce:e4:fd:8d:fa:93:df:65:6e:ce:c1:ca:dc:7a: 08:8c:8a:40:d3:1e:8f:6d:a5:80:f8:fb:85:1a:0e:80:41:71: 77:54:de:6a:78:ab:47:e9:bc:4f:0a:fa:fa:bb:02:f0:76:71: 44:94:dc:2d:d0:66:83:24:7e:b4:7f:46:46:68:42:6c:c8:40: ce:42:26:ed:2a:2f:1a:49:c4:d3:c4:c3:87:a9:6f:a0:20:5e: 8e:89:be:5e:13:30:88:d5:28:2e:4b:a2:a0:ce:3c:e9:26:73: 08:99:ac:38:e5:4b:d4:ab:f7:4d:00:5c:57:bb:08:74:c8:09: 50:d7:ef:d4:2c:5b:83:f3:69:47:d6:ca:e6:51:e1:e3:de:a6: b3:a0:e4:70:cc:04:2a:42:27:e5:89:d2:1a:c5:15:d7:b4:f0: 21:8a:e3:98:37:fa:82:ab:cf:23:fa:2d:c9:10:de:da:d0:f0: 88:ef:b4:1c:41:a9:ec:83:77:bb:52:78:02:17:13:42:e8:ca: e9:2d:44:5c:62:bb:9b:9c:a3:f9:10:f0:16:fb:5e:13:8a:79: 31:9d:95:cb:e5:d8:84:0b:41:b5:f5:71:86:5c:50:07:3c:90: b5:5c:13:77:a8:f3:a2:5f:39:bb:c1:0a:a2:42:e5:a8:7a:88: c3:da:48:6f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTM5MTdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg5QkI5QUZCMkQ0Qzc4 NjNFN0NDRTgzRDNDQjBBMDg4Q0FFMzlGNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0ga5fbrtJs2ctd1RqzZYzgmq+SB0l2Uro0bZSHlM2FD2hoHq1 6nPStGBBi9845SWS6XRd+tpwTmiJQvYCS6yKlWXGqmtW22VLU/ENfNlzi+HNFRAy 4ucqm+WOoYrt4qJSl6NX1zU8u0twIn+vNlwBy/qemFZZ6aCKpBhqimgAj9VPMum7 S3i3GBNaokhLukSzMlj4z93egam+JqkHZY3oUHn9v7d2CJUVjCt+w/D74Kd8MnB0 UF+HL2W+YpLoWSGN/tVsh2xQaJxcTMX+q8FxqaBXKbn+ANwvVreHP+0Vmqca5cU6 SUCzwWh8Aix05vvkevFx1GE7IC0FBKqLv/yDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUibua+y1MeGPnzOg9PLCgiMrjn20wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L2lidWEteTFNZUdQbnpPZzlQTENnaU1yam4yMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd4iYAwDQYJKoZIhvcNAQELBQADggEBACS+nRDO5P2N+pPfZW7OwcrcegiM ikDTHo9tpYD4+4UaDoBBcXdU3mp4q0fpvE8K+vq7AvB2cUSU3C3QZoMkfrR/RkZo QmzIQM5CJu0qLxpJxNPEw4epb6AgXo6Jvl4TMIjVKC5LoqDOPOkmcwiZrDjlS9Sr 900AXFe7CHTICVDX79QsW4PzaUfWyuZR4ePeprOg5HDMBCpCJ+WJ0hrFFde08CGK 45g3+oKrzyP6LckQ3trQ8IjvtBxBqeyDd7tSeAIXE0LoyuktRFxiu5uco/kQ8Bb7 XhOKeTGdlcvl2IQLQbX1cYZcUAc8kLVcE3eo86JfObvBCqJC5ah6iMPaSG8= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:40 2024 by rpki-client on console-ams.rpki-client.org