$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/8-uYRxzD1rHIIF_DDeMCnwuSmQ4.cer File: 8-uYRxzD1rHIIF_DDeMCnwuSmQ4.cer (raw, json) Hash identifier: CyKVVbVMnb3dwZeBd7n2Ic38vMJ33WjtN6na2wzrfEI= Subject key identifier: F3:EB:98:47:1C:C3:D6:B1:C8:20:5F:C3:0D:E3:02:9F:0B:92:99:0E Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0AA9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/8-uYRxzD1rHIIF_DDeMCnwuSmQ4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Jun 2024 01:31:24 +0000 Certificate not after: Sun 15 Jun 2025 01:30:03 +0000 Subordinate resources: IP: 157.101.0.0/18 IP: 157.101.192.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jun 15 01:31:24 2024 GMT Not After : Jun 15 01:30:03 2025 GMT Subject: CN=F3EB98471CC3D6B1C8205FC30DE3029F0B92990E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:51:39:a9:5d:67:6f:63:da:7c:32:bb:c2:a3: 36:6b:a6:b6:39:dd:ea:95:a9:ed:f0:3d:ee:ff:48: d8:95:1f:c7:30:8e:9d:43:08:7b:f6:d6:e6:dc:5e: 55:9c:16:b9:ae:d8:d3:f0:db:d6:57:f7:d8:d7:22: ee:bb:bf:6f:62:2e:03:7f:c9:fb:34:8f:d6:cf:fb: 4b:15:b0:7f:38:83:50:86:47:fc:ca:52:5e:c2:ac: 54:32:cc:de:8a:ef:d6:e4:e6:ab:26:5d:d8:85:80: 33:49:ee:8f:fe:24:c6:09:4b:7d:ab:e6:ad:49:b5: a5:ba:05:af:a0:e3:7c:7d:35:bc:7d:ed:3c:28:33: 93:0e:00:5c:8f:7b:6d:47:d7:a5:e7:bf:6f:87:eb: 99:98:87:72:a4:56:0d:31:81:06:54:1c:71:01:94: cd:bd:04:5c:ac:7a:20:01:9a:5a:2f:48:7d:94:c6: 09:37:5b:98:1d:a7:53:a8:e4:54:1c:48:b3:a8:20: 87:e7:a5:49:72:23:4b:f8:c2:7d:8f:c6:51:9b:ed: 7f:70:d1:19:63:52:fe:8a:67:78:72:35:ee:d6:39: 19:a0:b3:c8:74:83:96:7a:b5:8b:d6:11:8a:ab:d1: 52:06:61:0e:6e:1d:66:0e:9c:56:2c:43:ab:f6:10: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EB:98:47:1C:C3:D6:B1:C8:20:5F:C3:0D:E3:02:9F:0B:92:99:0E X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/8-uYRxzD1rHIIF_DDeMCnwuSmQ4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.101.0.0/18 157.101.192.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:31:59:ed:fd:86:96:0d:ea:fb:c8:b9:04:24:b0:2d:11:44: 94:c7:5a:87:7c:3e:ef:34:c6:94:2a:ae:c5:df:ac:f4:d7:15: 9d:4b:bd:8e:4e:e2:a8:20:55:7b:79:c0:64:ec:b6:09:f8:6c: 1f:09:55:ed:af:20:c3:9d:57:e7:ba:dd:09:cb:2a:f0:aa:5d: d8:ac:a3:7b:4c:b8:74:4e:18:29:a4:ad:34:72:50:92:fc:35: 1e:2f:8e:18:93:89:56:b9:84:de:bc:89:fa:c2:ea:49:84:ff: d7:4e:63:35:93:c9:8d:31:cf:88:30:f5:06:53:5d:ae:82:42: d9:d0:52:b5:a6:23:4e:e1:a4:22:6f:e4:1f:2e:79:18:c6:cb: 1e:91:48:9c:0c:7f:41:79:9a:b2:f2:71:cf:ae:1c:ff:70:c2: 87:53:f7:84:ae:72:42:0d:c2:fb:03:0f:a2:9b:f3:c4:8d:50: 39:ac:c7:d0:47:86:4a:b3:5d:57:28:93:ff:49:3e:a4:9d:54: 39:41:d5:6f:45:bf:c5:e9:97:f1:4d:27:9d:cd:34:ee:2f:95: d4:ab:60:87:31:61:8f:ff:a0:a1:49:d4:e5:fe:14:c0:f3:16: 8f:24:8a:78:6d:c5:1e:ea:0c:b0:fe:98:8e:f2:63:39:ab:e1: bb:4f:4b:3e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI0MDYxNTAxMzEyNFoXDTI1MDYxNTAxMzAwM1owMzEx MC8GA1UEAxMoRjNFQjk4NDcxQ0MzRDZCMUM4MjA1RkMzMERFMzAyOUYwQjkyOTkw RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMxROaldZ29j2nwyu8Kj Nmumtjnd6pWp7fA97v9I2JUfxzCOnUMIe/bW5txeVZwWua7Y0/Db1lf32Nci7ru/ b2IuA3/J+zSP1s/7SxWwfziDUIZH/MpSXsKsVDLM3orv1uTmqyZd2IWAM0nuj/4k xglLfavmrUm1pboFr6DjfH01vH3tPCgzkw4AXI97bUfXpee/b4frmZiHcqRWDTGB BlQccQGUzb0EXKx6IAGaWi9IfZTGCTdbmB2nU6jkVBxIs6ggh+elSXIjS/jCfY/G UZvtf3DRGWNS/opneHI17tY5GaCzyHSDlnq1i9YRiqvRUgZhDm4dZg6cVixDq/YQ +TcCAwEAAaOCAoowggKGMB0GA1UdDgQWBBTz65hHHMPWscggX8MN4wKfC5KZDjAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MS8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTEvOC11WVJ4ekQx ckhJSUZfRERlTUNud3VTbVE0Lm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBp1lAAMEBZ1lwDANBgkqhkiG9w0B AQsFAAOCAQEAXTFZ7f2Glg3q+8i5BCSwLRFElMdah3w+7zTGlCquxd+s9NcVnUu9 jk7iqCBVe3nAZOy2CfhsHwlV7a8gw51X57rdCcsq8Kpd2Kyje0y4dE4YKaStNHJQ kvw1Hi+OGJOJVrmE3ryJ+sLqSYT/105jNZPJjTHPiDD1BlNdroJC2dBStaYjTuGk Im/kHy55GMbLHpFInAx/QXmasvJxz64c/3DCh1P3hK5yQg3C+wMPopvzxI1QOazH 0EeGSrNdVyiT/0k+pJ1UOUHVb0W/xemX8U0nnc007i+V1KtghzFhj/+goUnU5f4U wPMWjySKeG3FHuoMsP6YjvJjOavhu09LPg== -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:26 2024 by rpki-client on console-fra.rpki-client.org