$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer File: YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer (raw, json) Hash identifier: G+EuzlXL5zoRPlJXdmlESseJnPgDQiFu9/7FrHP1Joc= Subject key identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0A7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:35:00 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 166.119.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2686 (0xa7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: May 15 01:35:00 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=60D43E3EFDB63A2F244F0E3C388C68D93EC25865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:8e:46:5c:04:6a:fb:78:41:bd:61:66:bf: aa:6c:5a:a4:09:a4:98:63:b6:33:72:ea:0a:3f:6b: 17:0c:38:83:3b:14:ce:2c:a2:57:75:b2:08:25:dd: 10:ec:f0:43:39:b9:8a:9c:e7:86:ef:de:73:32:a2: a4:7f:c5:bd:a5:f2:21:23:48:cd:b8:a9:65:23:92: fa:43:b7:18:b2:ca:b9:71:3d:0c:32:8a:7b:76:cb: f4:7b:d4:de:54:ab:89:2a:f7:f1:3e:17:f0:7f:93: f2:6d:cd:84:8b:a8:eb:e9:4a:e0:8c:fb:ba:61:34: b1:3b:a9:92:75:c4:9c:f8:43:80:26:e3:a6:92:94: d3:04:60:99:8c:96:42:52:a2:d4:b0:14:7a:97:89: f2:c5:21:fd:e1:b9:51:71:94:12:f9:5d:98:e4:b0: 25:7d:f4:ee:de:56:53:9c:1e:f2:07:18:89:6b:1a: 49:47:8e:a8:96:9f:a1:bf:a8:36:78:ee:2c:da:ce: f1:08:36:26:a7:f8:65:e4:7d:fa:fe:b3:eb:3e:53: 14:e9:e7:e0:03:32:5b:10:58:50:f3:be:db:ca:49: f8:03:dc:cd:68:44:a9:9c:33:af:8b:cd:e7:5d:35: f3:10:bc:fd:39:76:35:8e:40:ee:a2:c7:39:bc:2a: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.119.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:80:0e:69:c8:14:8e:84:80:81:95:da:0b:7e:ca:5b:2f:42: 39:e3:49:41:e3:65:eb:3e:d5:75:33:d9:e4:67:19:af:39:f5: fc:1b:dd:a8:76:f8:99:8e:1b:7f:ad:ff:23:cd:76:d1:91:84: 68:ae:39:ec:9a:63:01:58:4e:35:e8:00:2f:60:97:ef:dc:63: 77:3e:95:62:ad:b4:b3:25:a9:ff:0c:6d:39:7f:fa:4a:73:60: 94:ee:36:86:61:25:cc:19:b3:be:6e:b5:bf:60:7c:1e:ec:ff: 47:54:af:e3:7b:61:20:54:47:f0:2d:6e:d4:db:dc:16:64:bb: 06:5d:2d:fa:e2:89:65:bd:c2:c7:3b:f5:8e:af:6f:0d:fc:e0: 86:7a:46:5c:4d:89:33:1a:b6:24:43:08:97:d1:a9:7a:ec:b0: 16:a8:e9:6f:fb:07:98:a1:87:b0:d2:96:de:13:85:3d:01:7e: 6c:af:5a:7f:e0:07:07:b9:65:bb:c7:cc:29:6b:5f:cc:c3:52: eb:6b:62:9e:1d:73:84:7d:37:db:85:79:d3:a8:6a:3e:99:5f: 46:fd:9c:6a:8b:e1:74:2b:62:8c:de:d4:7c:14:a1:34:9f:97: 23:7b:93:d1:60:f3:86:f8:8f:c4:17:16:2f:7e:96:50:36:c6: fb:94:41:00 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICCn4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI0MDUxNTAxMzUwMFoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoNjBENDNFM0VGREI2M0EyRjI0NEYwRTNDMzg4QzY4RDkzRUMyNTg2 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFZjkZcBGr7eEG9YWa/ qmxapAmkmGO2M3LqCj9rFww4gzsUziyiV3WyCCXdEOzwQzm5ipznhu/eczKipH/F vaXyISNIzbipZSOS+kO3GLLKuXE9DDKKe3bL9HvU3lSriSr38T4X8H+T8m3NhIuo 6+lK4Iz7umE0sTupknXEnPhDgCbjppKU0wRgmYyWQlKi1LAUepeJ8sUh/eG5UXGU EvldmOSwJX307t5WU5we8gcYiWsaSUeOqJafob+oNnjuLNrO8Qg2Jqf4ZeR9+v6z 6z5TFOnn4AMyWxBYUPO+28pJ+APczWhEqZwzr4vN51018xC8/Tl2NY5A7qLHObwq pj8CAwEAAaOCAoowggKGMB0GA1UdDgQWBBRg1D4+/bY6LyRPDjw4jGjZPsJYZTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxODYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTg2L1lO US1QdjIyT2k4a1R3NDhPSXhvMlQ3Q1dHVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCmdzANBgkqhkiG9w0B AQsFAAOCAQEAGIAOacgUjoSAgZXaC37KWy9COeNJQeNl6z7VdTPZ5GcZrzn1/Bvd qHb4mY4bf63/I8120ZGEaK457JpjAVhONegAL2CX79xjdz6VYq20syWp/wxtOX/6 SnNglO42hmElzBmzvm61v2B8Huz/R1Sv43thIFRH8C1u1NvcFmS7Bl0t+uKJZb3C xzv1jq9vDfzghnpGXE2JMxq2JEMIl9GpeuywFqjpb/sHmKGHsNKW3hOFPQF+bK9a f+AHB7llu8fMKWtfzMNS62tinh1zhH0324V506hqPplfRv2caovhdCtijN7UfBSh NJ+XI3uT0WDzhviPxBcWL36WUDbG+5RBAA== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:45 2024 by rpki-client on console-ams.rpki-client.org