$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer File: 4qCwBJ8aPRI9yspc61tOXp7HlNc.cer (raw, json) Hash identifier: HDBRqFThe0cLCQ0jrvT3wdXMAaThL2k3JezfAK27CUM= Subject key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0D46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:34:32 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 160.27.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Nov 15 01:34:32 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bc:6a:b6:a9:23:69:f2:e2:1f:16:24:23:bc: 7b:7e:76:cc:7c:31:ff:5a:60:4e:fd:47:55:52:d8: 8c:65:f5:fe:f6:ed:64:f0:a8:bd:80:fe:50:8e:13: 66:e7:08:e9:6e:ea:48:fb:02:75:19:40:81:42:ea: 9a:eb:36:18:97:03:f8:a4:c0:60:a4:10:41:b5:bf: 2f:e5:70:b1:ec:4b:cf:a9:0a:6a:00:47:6f:3b:03: 09:84:b9:dc:4e:f6:f7:90:fc:c5:56:be:88:cb:7b: 68:51:62:d6:36:5c:31:45:f6:29:b1:0a:60:ce:76: 39:cb:fb:ad:49:f2:2d:31:d6:48:91:06:82:d2:27: b5:25:84:32:12:b3:c8:df:8a:33:28:72:d8:4d:6e: d0:c6:4b:ad:bf:ed:3f:a2:37:57:69:d1:ea:95:2e: c4:40:93:11:43:4c:21:80:1b:8d:f7:cd:6a:61:11: 63:9b:02:2b:39:63:6d:e4:9a:42:7a:16:99:25:36: 45:fe:aa:ad:d2:eb:a4:20:a6:10:5d:60:e0:b8:66: af:66:a7:74:0e:82:2b:97:26:33:e1:0e:00:90:f8: 6b:29:53:48:a5:10:a8:e0:c6:91:53:8b:0f:89:af: 58:61:af:2e:6f:3e:31:2d:a3:35:14:3b:26:97:66: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 73:83:e3:63:5b:d7:83:e5:02:76:69:4e:93:cf:bd:11:f9:7a: 35:75:27:65:ca:dc:6e:bb:2f:61:1b:66:dd:e5:61:a8:37:b4: 15:89:6c:ed:a4:57:5a:58:cb:66:04:ca:57:4f:f1:27:ee:f9: 03:49:f1:59:b6:b4:d0:1a:a4:c4:e9:03:d8:03:a1:63:b1:eb: 43:1b:f9:9d:38:89:8f:68:ed:d2:37:ec:50:06:90:6e:7b:99: 8e:0c:ff:a8:a7:54:c7:05:8a:77:c2:b7:20:60:68:d2:b0:d8: b4:bb:21:e2:4e:4c:e4:0f:b4:39:6e:dc:bd:7b:70:ff:63:50: 99:b0:4d:3c:7d:4a:a9:70:cc:82:6a:61:c6:36:5b:44:d2:7d: 36:25:ea:96:fc:35:06:34:e7:21:25:34:c0:a4:31:8e:dd:15: 3b:dd:8e:7d:f3:31:5f:12:80:89:3d:30:91:a1:95:54:81:ed: 62:6e:dd:0e:80:cd:cb:9a:6e:45:9e:85:6e:0f:fa:88:5a:bc: c6:fe:a4:9a:c4:0d:4a:e9:93:eb:6c:f4:4e:a2:38:d4:54:02: c3:d1:05:b1:9d:5f:1c:97:94:2f:cb:35:39:e0:aa:bf:88:da: d5:d6:f8:17:ba:45:b9:c6:ba:c8:91:5c:a2:a3:88:51:7a:59: 2a:4b:7b:2b -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI0MTExNTAxMzQzMloXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoRTJBMEIwMDQ5RjFBM0QxMjNEQ0FDQTVDRUI1QjRFNUU5RUM3OTRE NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOy8arapI2ny4h8WJCO8 e352zHwx/1pgTv1HVVLYjGX1/vbtZPCovYD+UI4TZucI6W7qSPsCdRlAgULqmus2 GJcD+KTAYKQQQbW/L+VwsexLz6kKagBHbzsDCYS53E7295D8xVa+iMt7aFFi1jZc MUX2KbEKYM52Ocv7rUnyLTHWSJEGgtIntSWEMhKzyN+KMyhy2E1u0MZLrb/tP6I3 V2nR6pUuxECTEUNMIYAbjffNamERY5sCKzljbeSaQnoWmSU2Rf6qrdLrpCCmEF1g 4Lhmr2andA6CK5cmM+EOAJD4aylTSKUQqODGkVOLD4mvWGGvLm8+MS2jNRQ7Jpdm CtcCAwEAAaOCAoowggKGMB0GA1UdDgQWBBTioLAEnxo9Ej3KylzrW05enseU1zAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTAyNDcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzEwMjQ3LzRx Q3dCSjhhUFJJOXlzcGM2MXRPWHA3SGxOYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCgGzANBgkqhkiG9w0B AQsFAAOCAQEAc4PjY1vXg+UCdmlOk8+9Efl6NXUnZcrcbrsvYRtm3eVhqDe0FYls 7aRXWljLZgTKV0/xJ+75A0nxWba00BqkxOkD2AOhY7HrQxv5nTiJj2jt0jfsUAaQ bnuZjgz/qKdUxwWKd8K3IGBo0rDYtLsh4k5M5A+0OW7cvXtw/2NQmbBNPH1KqXDM gmphxjZbRNJ9NiXqlvw1BjTnISU0wKQxjt0VO92OffMxXxKAiT0wkaGVVIHtYm7d DoDNy5puRZ6Fbg/6iFq8xv6kmsQNSumT62z0TqI41FQCw9EFsZ1fHJeUL8s1OeCq v4ja1db4F7pFuca6yJFcoqOIUXpZKkt7Kw== -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:32 2024 by rpki-client on console-fra.rpki-client.org