$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer File: 377hQdw06JNkA0On8xKnAu-Rppg.cer (raw, json) Hash identifier: evzZ1aUqbEjRlNWnJzfNE8ccUcLckMGY1pfVxcWR87c= Subject key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:37:03 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 133.32.112.0/20 IP: 210.134.192.0/20 IP: 210.156.112.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16166 (0x3f26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:37:03 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=DFBEE141DC34E893640343A7F312A702EF91A698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:f1:f3:3b:1f:41:55:02:6e:d6:22:54:8b: de:3f:39:43:4d:65:41:ca:87:1c:88:fc:d2:c9:74: 4c:20:a7:80:2c:6a:12:1c:44:ee:2c:5b:06:d0:31: 42:c5:4d:1c:cd:12:34:60:9d:c1:4e:b6:ae:ec:27: e0:5d:12:42:b9:a1:48:3d:51:11:15:ef:06:80:3e: 66:bd:4a:67:7f:d9:fa:cd:99:95:ea:4f:36:f7:9a: 1f:af:08:b9:5c:9a:d7:a1:04:23:05:43:0d:87:67: 4d:94:97:d0:8f:9e:04:1d:6d:e6:0b:56:e3:ad:43: 4f:e1:99:b5:62:4e:c5:b2:b5:27:04:db:48:3a:51: 02:eb:03:8a:15:43:d9:d1:c7:00:88:41:12:5c:8b: 71:fa:b3:43:6b:09:e0:61:46:76:08:1b:f2:db:b3: cf:4d:65:c8:f3:03:1e:c2:c3:c0:3a:d9:0d:20:b8: 06:6b:4f:65:49:79:40:9f:e7:f7:49:d3:c2:33:06: d7:20:68:e5:52:7f:7d:f1:92:6f:69:98:52:ff:1f: b2:79:a2:08:b5:4d:b8:80:38:17:7b:7c:c0:aa:d2: e4:25:03:cb:d3:10:dd:e8:d1:58:ec:86:d7:70:aa: 1f:a2:dd:95:44:94:fd:07:88:2c:10:fa:c9:a8:a3: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.32.112.0/20 210.134.192.0/20 210.156.112.0/20 Signature Algorithm: sha256WithRSAEncryption 78:b9:aa:ee:c6:35:96:d9:a2:35:59:2c:68:5e:e7:4f:b8:d2: e8:ab:0e:55:bc:d8:c3:75:07:65:fd:b5:ae:ee:b0:c5:c0:38: 96:62:26:56:20:0b:47:90:bd:77:9a:2a:87:17:e5:e9:e0:40: 2c:5c:07:9a:93:73:28:68:e8:2a:7f:74:e7:ab:52:77:1f:a5: 55:97:b3:17:c3:25:b5:49:b6:87:a4:95:2e:f2:f5:80:4e:4d: e9:99:c1:85:2a:d7:2a:43:03:cf:2c:ec:7c:67:9c:f1:dd:2f: 38:0c:61:3b:8d:6b:1d:9d:c5:e3:fa:34:33:4e:2a:28:63:c0: 4d:9a:02:6f:d6:b3:99:8e:8f:d9:e7:75:bb:ba:c0:d8:c2:a0: c1:8f:95:a2:a7:0f:22:a0:1f:c2:16:06:08:5d:d3:3c:f5:7a: a5:25:19:8b:7c:3e:c3:6b:30:96:fb:40:04:76:8b:7d:4e:9b: d9:92:b3:3c:f6:7e:16:4f:ce:7c:4d:20:a6:4c:d7:6c:a8:f5: 52:43:3f:c8:93:ca:c0:11:a1:a0:17:42:1f:58:c1:08:94:03: 91:c0:8f:ad:4d:c5:77:c0:3d:58:7d:0f:55:b2:c2:be:ac:54: f0:31:07:fc:9f:88:06:21:29:a6:57:31:27:45:fe:86:c3:79: b8:df:7c:cc -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICPyYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzcwM1oXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoREZCRUUxNDFEQzM0RTg5MzY0MDM0M0E3RjMxMkE3MDJFRjkxQTY5 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ4V8fM7H0FVAm7WIlSL 3j85Q01lQcqHHIj80sl0TCCngCxqEhxE7ixbBtAxQsVNHM0SNGCdwU62ruwn4F0S QrmhSD1RERXvBoA+Zr1KZ3/Z+s2ZlepPNveaH68IuVya16EEIwVDDYdnTZSX0I+e BB1t5gtW461DT+GZtWJOxbK1JwTbSDpRAusDihVD2dHHAIhBElyLcfqzQ2sJ4GFG dggb8tuzz01lyPMDHsLDwDrZDSC4BmtPZUl5QJ/n90nTwjMG1yBo5VJ/ffGSb2mY Uv8fsnmiCLVNuIA4F3t8wKrS5CUDy9MQ3ejRWOyG13CqH6LdlUSU/QeILBD6yaij zCUCAwEAAaOCApIwggKOMB0GA1UdDgQWBBTfvuFB3DTok2QDQ6fzEqcC75GmmDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84MzQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzgzNC8zNzdoUWR3 MDZKTmtBME9uOHhLbkF1LVJwcGcubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEhSBwAwQE0obAAwQE0pxwMA0G CSqGSIb3DQEBCwUAA4IBAQB4uaruxjWW2aI1WSxoXudPuNLoqw5VvNjDdQdl/bWu 7rDFwDiWYiZWIAtHkL13miqHF+Xp4EAsXAeak3MoaOgqf3Tnq1J3H6VVl7MXwyW1 SbaHpJUu8vWATk3pmcGFKtcqQwPPLOx8Z5zx3S84DGE7jWsdncXj+jQzTiooY8BN mgJv1rOZjo/Z53W7usDYwqDBj5Wipw8ioB/CFgYIXdM89XqlJRmLfD7DazCW+0AE dot9TpvZkrM89n4WT858TSCmTNdsqPVSQz/Ik8rAEaGgF0IfWMEIlAORwI+tTcV3 wD1YfQ9VssK+rFTwMQf8n4gGISmmVzEnRf6Gw3m433zM -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:30 2024 by rpki-client on console-fra.rpki-client.org