$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer File: zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer (raw, json) Hash identifier: UQ17CNNMCGMZ7yYbxT+TMxzEHhUfYzrNT40PkZ6MPBQ= Subject key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 2F79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:32:56 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 202.55.136.0/22 IP: 202.73.64.0/19 IP: 202.233.0.0/18 IP: 210.166.192.0/20 IP: 223.223.164.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12153 (0x2f79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:32:56 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:a6:2b:53:a0:36:ec:70:b0:06:00:88:1f: 04:99:37:8d:bf:03:45:e8:7d:50:33:c3:ca:6b:3a: b1:8a:39:e4:02:72:e6:d5:6a:53:bc:08:2b:eb:60: 74:e2:15:7e:0c:d5:6f:a9:0e:a8:d5:1e:83:75:30: 0f:db:04:56:6e:01:9e:50:15:63:28:40:5f:16:0e: e8:9d:69:a4:ea:37:56:fc:21:31:99:1e:ad:c5:4a: 48:15:8c:66:b9:4c:f8:e1:d5:2b:f9:c7:f2:24:58: dc:8e:22:33:b5:2d:43:62:44:62:bd:22:c8:94:ce: 0a:8c:1e:d5:21:5e:98:d1:3f:ae:b1:c8:12:99:ac: a3:0d:5b:d0:28:a4:f2:a1:c3:cf:de:a0:7c:8f:a5: f6:0b:f5:9c:6d:23:bd:38:87:60:a6:c8:67:27:ff: 1a:8c:74:6b:ba:c1:d6:8f:d4:7f:5c:c7:cf:bb:b4: 8d:de:3f:69:52:b2:51:2c:6c:fb:73:3f:13:90:2e: 05:67:50:6b:75:32:a0:a1:12:c3:6d:2e:5e:23:26: 19:f1:66:fa:f1:e0:f0:cc:63:4b:6c:ac:bd:b9:a4: 01:2a:32:49:ee:36:19:cd:30:14:d6:91:a3:fd:42: c1:1a:82:b0:a1:a1:77:6e:78:97:98:72:96:cf:01: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.55.136.0/22 202.73.64.0/19 202.233.0.0/18 210.166.192.0/20 223.223.164.0/22 Signature Algorithm: sha256WithRSAEncryption 00:fc:c9:78:02:5e:f6:ec:f5:58:91:9a:a0:29:5e:68:9a:e6: 84:51:24:ee:e1:2a:a2:15:5b:34:52:94:38:19:23:6d:e7:18: e6:4d:51:54:6e:5e:c1:eb:2b:2f:eb:d4:a6:95:e3:6e:83:de: 79:7c:25:b0:c4:af:de:d0:95:c7:69:44:22:85:94:26:ea:e5: c6:6b:49:21:59:51:68:79:14:17:3d:ff:92:81:22:18:0f:2e: 2f:b4:0f:0d:dd:df:43:59:60:71:2e:93:7f:a4:c0:63:15:d3: 93:87:76:4c:d4:62:43:59:e3:cf:a5:32:92:b3:05:63:c9:09: d1:48:78:bd:48:e7:d3:97:e0:c5:f4:13:e8:b9:80:cc:a1:82: 94:ce:e3:60:1e:af:ac:3b:2b:d2:f5:3a:40:9c:13:47:f5:1f: 9d:0e:a1:f5:f7:eb:eb:b5:d0:2e:7f:26:33:b7:2d:08:4b:81: 8b:ab:cc:1f:a0:3a:5b:30:bc:0f:d1:03:7f:56:81:a5:e9:d4: cd:2d:df:61:38:91:5d:a3:b3:b9:c7:b7:15:5a:ee:e1:e7:0b: ea:4b:f3:fc:fc:d7:20:07:f8:37:37:79:86:22:c6:e8:cd:12: 14:3a:dc:06:46:c1:6b:0c:e6:4f:ff:8a:dd:5a:85:ab:ac:4b: 54:2b:cf:26 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICL3kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzI1NloXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoQ0Q1RTIzMUVCRjQ0QzdBNDAzOUEyRjc4RTgzNEI2Q0YzRDZBRkEx NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJgapitToDbscLAGAIgf BJk3jb8DReh9UDPDyms6sYo55AJy5tVqU7wIK+tgdOIVfgzVb6kOqNUeg3UwD9sE Vm4BnlAVYyhAXxYO6J1ppOo3VvwhMZkercVKSBWMZrlM+OHVK/nH8iRY3I4iM7Ut Q2JEYr0iyJTOCowe1SFemNE/rrHIEpmsow1b0Cik8qHDz96gfI+l9gv1nG0jvTiH YKbIZyf/Gox0a7rB1o/Uf1zHz7u0jd4/aVKyUSxs+3M/E5AuBWdQa3UyoKESw20u XiMmGfFm+vHg8MxjS2ysvbmkASoySe42Gc0wFNaRo/1CwRqCsKGhd254l5hyls8B 4G0CAwEAAaOCApwwggKYMB0GA1UdDgQWBBTNXiMev0THpAOaL3joNLbPPWr6FDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MS8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTEvelY0akhyOUV4 NlFEbWk5NDZEUzJ6ejFxLWhRLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAso3iAMEBcpJQAMEBsrpAAMEBNKm wAMEAt/fpDANBgkqhkiG9w0BAQsFAAOCAQEAAPzJeAJe9uz1WJGaoCleaJrmhFEk 7uEqohVbNFKUOBkjbecY5k1RVG5ewesrL+vUppXjboPeeXwlsMSv3tCVx2lEIoWU JurlxmtJIVlRaHkUFz3/koEiGA8uL7QPDd3fQ1lgcS6Tf6TAYxXTk4d2TNRiQ1nj z6UykrMFY8kJ0Uh4vUjn05fgxfQT6LmAzKGClM7jYB6vrDsr0vU6QJwTR/UfnQ6h 9ffr67XQLn8mM7ctCEuBi6vMH6A6WzC8D9EDf1aBpenUzS3fYTiRXaOzuce3FVru 4ecL6kvz/PzXIAf4Nzd5hiLG6M0SFDrcBkbBawzmT/+K3VqFq6xLVCvPJg== -----END CERTIFICATE-----Generated at Fri May 17 01:01:20 2024 by rpki-client on console-ams.rpki-client.org