$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/IKcN2Pan97KkZ1Mu0bYKphCilzk.cer File: IKcN2Pan97KkZ1Mu0bYKphCilzk.cer (raw, json) Hash identifier: ohyTliZ8LEcq1TIIxdTKoF64ko7pY3mbh4PJbjUIBPE= Subject key identifier: 20:A7:0D:D8:F6:A7:F7:B2:A4:67:53:2E:D1:B6:0A:A6:10:A2:97:39 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 2F4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:31:57 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 202.166.185.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12110 (0x2f4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:31:57 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=20A70DD8F6A7F7B2A467532ED1B60AA610A29739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:ff:f2:66:ff:42:17:0a:0b:5a:56:61:17: f6:c1:39:a6:ae:b0:dd:ed:76:e4:e5:c7:36:04:4a: 95:cf:41:d9:f1:f7:12:84:ea:bb:98:95:26:55:61: be:7f:d5:a9:6f:a4:5b:f6:cb:24:98:c6:60:0a:16: ef:c8:b5:7f:b6:d7:17:56:84:f5:d2:0f:09:9e:bf: e4:1f:89:5c:64:02:64:59:19:3f:ff:5c:ee:82:ce: 72:f2:fe:a4:43:16:6d:74:51:f9:c4:2f:94:de:3c: f4:67:39:86:ec:fe:d9:b0:1e:09:c0:bc:2e:59:b0: e2:a4:85:47:95:88:89:fd:aa:19:dd:5c:48:e0:1f: 25:16:be:30:69:cc:5a:31:8d:c7:7a:ce:3a:5c:13: cf:5b:b0:6c:28:5a:d8:a9:84:29:66:a0:53:f9:c9: ed:02:4f:5b:77:d6:8d:82:5a:be:00:42:44:a9:83: af:bb:ec:f2:8a:0f:6f:ad:d5:e1:0b:f1:56:91:21: 67:a1:0c:e4:c6:fb:ea:2a:23:83:35:1f:6c:1d:76: 39:aa:58:5f:95:be:6b:b1:87:ab:9c:23:60:d2:7e: 6d:f3:fd:6a:c6:ea:a8:63:37:9d:a3:a9:14:ef:6e: d8:db:48:0e:e6:a0:2f:f6:4d:6e:21:61:49:f2:33: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:0D:D8:F6:A7:F7:B2:A4:67:53:2E:D1:B6:0A:A6:10:A2:97:39 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.166.185.0/24 Signature Algorithm: sha256WithRSAEncryption 79:a8:0e:33:23:e8:52:8b:b4:ea:66:9f:b0:d8:4f:ca:37:9d: 26:09:36:60:aa:24:f4:25:0d:51:91:3c:fa:e3:f6:6c:2c:1c: fc:ce:a3:b7:e3:2b:35:f4:3e:d0:2c:f7:85:f9:15:ce:f5:11: 4e:e0:1d:76:9e:54:42:7c:e6:28:30:be:3a:00:ce:5c:2f:c0: b3:e9:c7:d5:0f:c1:62:b3:ce:e3:b1:42:8b:4e:ca:81:22:c4: 5a:fb:40:15:96:1e:18:ac:e4:43:c5:7f:08:02:e6:67:22:a6: 08:92:25:7f:bf:72:75:64:a7:57:8c:49:19:b3:08:0d:17:fb: 5e:07:50:2a:38:d4:ed:b8:52:11:2e:02:ab:b4:8f:d9:7b:0d: a8:0e:e3:5b:cd:ad:46:b8:7c:05:21:f9:d1:ec:6c:99:e5:97: 49:04:2b:0c:0c:5e:2f:11:ee:eb:05:39:56:31:5a:ff:48:75: f1:ee:de:87:df:93:67:a8:bd:07:6a:00:a9:b8:6a:72:5a:ac: 33:18:31:91:ea:fc:36:75:fe:06:99:2b:e1:7b:6c:81:d8:13: a9:86:c5:14:18:1c:b9:b9:6d:f8:05:05:44:79:dd:e9:bd:52: f1:3b:c0:2d:22:7f:6e:52:10:e8:2f:dd:72:b1:36:72:61:72: d2:41:2e:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL04wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzE1N1oXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoMjBBNzBERDhGNkE3RjdCMkE0Njc1MzJFRDFCNjBBQTYxMEEyOTcz OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqE//Jm/0IXCgtaVmEX 9sE5pq6w3e125OXHNgRKlc9B2fH3EoTqu5iVJlVhvn/VqW+kW/bLJJjGYAoW78i1 f7bXF1aE9dIPCZ6/5B+JXGQCZFkZP/9c7oLOcvL+pEMWbXRR+cQvlN489Gc5huz+ 2bAeCcC8Llmw4qSFR5WIif2qGd1cSOAfJRa+MGnMWjGNx3rOOlwTz1uwbCha2KmE KWagU/nJ7QJPW3fWjYJavgBCRKmDr7vs8ooPb63V4QvxVpEhZ6EM5Mb76iojgzUf bB12OapYX5W+a7GHq5wjYNJ+bfP9asbqqGM3naOpFO9u2NtIDuagL/ZNbiFhSfIz PGcCAwEAAaOCAokwggKFMB0GA1UdDgQWBBQgpw3Y9qf3sqRnUy7RtgqmEKKXOTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvNDY4OC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNDY4OC9JS2NO MlBhbjk3S2taMU11MGJZS3BoQ2lsemsubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqa5MA0GCSqGSIb3DQEB CwUAA4IBAQB5qA4zI+hSi7TqZp+w2E/KN50mCTZgqiT0JQ1RkTz64/ZsLBz8zqO3 4ys19D7QLPeF+RXO9RFO4B12nlRCfOYoML46AM5cL8Cz6cfVD8Fis87jsUKLTsqB IsRa+0AVlh4YrORDxX8IAuZnIqYIkiV/v3J1ZKdXjEkZswgNF/teB1AqONTtuFIR LgKrtI/Zew2oDuNbza1GuHwFIfnR7GyZ5ZdJBCsMDF4vEe7rBTlWMVr/SHXx7t6H 35NnqL0HagCpuGpyWqwzGDGR6vw2df4GmSvhe2yB2BOphsUUGBy5uW34BQVEed3p vVLxO8AtIn9uUhDoL91ysTZyYXLSQS5S -----END CERTIFICATE-----Generated at Fri May 17 01:06:27 2024 by rpki-client on console-fra.rpki-client.org