$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer File: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer (raw, json) Hash identifier: piBQt/GcdYinIpDklKiIxzWY4+JWv9mV3FY0yTV27B4= Subject key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3080 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:38:15 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 202.213.72.0/21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12416 (0x3080) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:38:15 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:8b:53:16:a5:a7:f2:07:b0:e5:f6:60:f6: 47:31:3c:44:47:38:11:5c:09:13:34:99:93:c4:94: 48:cd:64:49:d7:0e:74:6a:ae:43:a3:0f:74:dc:8c: 42:45:6a:3f:1f:69:63:44:1f:4d:4a:37:63:e5:c9: 42:57:b1:5b:61:64:57:aa:94:0f:ca:9e:8e:6d:98: 4b:ca:38:6f:9f:d6:7e:b5:e1:95:69:13:62:f4:76: 34:53:1f:bb:e4:9e:84:d4:4c:7b:33:21:15:2e:43: 4b:52:86:66:2d:95:6e:a9:40:7d:04:f9:4d:24:cf: 92:a3:b6:9b:da:38:cd:44:05:35:2b:1a:2f:63:ec: a6:78:77:14:92:ed:4c:40:cc:81:e2:60:94:cf:3b: ae:04:12:5b:ca:b7:7f:ca:68:46:1d:97:21:02:6a: b2:3b:4c:3d:ca:cd:5d:72:e6:19:53:9d:cd:af:76: d0:2c:47:66:5f:fc:d3:f9:55:8b:2b:12:52:c8:73: c1:a6:3a:76:2c:1e:58:04:87:eb:78:90:63:7c:ed: f7:5e:c2:6c:8b:71:07:a9:75:41:36:3b:8d:cb:4e: 37:46:c6:2f:3b:4e:23:bd:8f:62:7d:c1:2c:ad:0a: 80:16:0a:25:e4:53:71:80:e8:fb:31:3e:87:45:8d: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.213.72.0/21 Signature Algorithm: sha256WithRSAEncryption a1:27:cc:f2:02:0d:db:31:79:9f:97:5a:7e:e7:43:3e:7d:72: 38:45:3a:1e:b5:fd:3a:7a:fe:5a:5a:a6:e9:c4:29:d8:b8:28: cf:21:9a:8c:14:3e:6a:91:ce:2c:33:b3:57:d5:81:5f:ad:91: 7c:06:d7:8d:ca:26:d6:01:7b:49:89:28:bb:0f:e6:60:af:1c: 10:d3:a3:13:dc:39:d7:90:17:7b:dd:39:c1:63:32:02:77:0d: 1d:21:54:4d:ae:34:32:2c:2d:33:18:93:2e:83:1e:9a:b5:df: 35:96:f1:31:89:af:f1:2b:ca:74:23:8e:ef:23:ba:7d:3c:0f: c7:01:9d:56:c5:c1:5e:97:11:6b:8b:d2:49:dc:4e:5d:b0:5c: 74:7f:87:06:55:34:4c:33:2e:31:74:e5:48:72:f7:31:44:61: 01:27:14:1a:af:36:04:bf:ce:ae:3a:35:79:0a:cb:53:84:f2: c0:b2:ea:4d:0b:d5:b6:b9:65:4a:2d:e5:b4:66:25:3e:5b:da: d0:30:1a:a0:a7:af:b3:f4:05:2d:5b:3b:03:05:ad:24:5d:cd: 03:0c:59:1c:c3:15:b6:8d:90:ec:e8:5f:1d:6d:1a:23:34:63: 82:b9:4b:e5:b0:30:05:61:f8:b6:2b:fe:57:c3:ab:71:3b:5d: fc:4b:b9:95 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICMIAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzgxNVoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoRTU0RDBBNzMyQ0UxQzY1MTRBMzRBM0QwNkU5MTZCMUM0RkI4QUEw QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMW4i1MWpafyB7Dl9mD2 RzE8REc4EVwJEzSZk8SUSM1kSdcOdGquQ6MPdNyMQkVqPx9pY0QfTUo3Y+XJQlex W2FkV6qUD8qejm2YS8o4b5/WfrXhlWkTYvR2NFMfu+SehNRMezMhFS5DS1KGZi2V bqlAfQT5TSTPkqO2m9o4zUQFNSsaL2Pspnh3FJLtTEDMgeJglM87rgQSW8q3f8po Rh2XIQJqsjtMPcrNXXLmGVOdza920CxHZl/80/lViysSUshzwaY6diweWASH63iQ Y3zt917CbItxB6l1QTY7jctON0bGLztOI72PYn3BLK0KgBYKJeRTcYDo+zE+h0WN 1tECAwEAAaOCAoQwggKAMB0GA1UdDgQWBBTlTQpzLOHGUUo0o9BukWscT7iqCjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC85Ni8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOTYvNVUwS2N5emh4 bEZLTktQUWJwRnJIRS00cWdvLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8rVSDANBgkqhkiG9w0BAQsFAAOC AQEAoSfM8gIN2zF5n5dafudDPn1yOEU6HrX9Onr+Wlqm6cQp2LgozyGajBQ+apHO LDOzV9WBX62RfAbXjcom1gF7SYkouw/mYK8cENOjE9w515AXe905wWMyAncNHSFU Ta40MiwtMxiTLoMemrXfNZbxMYmv8SvKdCOO7yO6fTwPxwGdVsXBXpcRa4vSSdxO XbBcdH+HBlU0TDMuMXTlSHL3MURhAScUGq82BL/Orjo1eQrLU4TywLLqTQvVtrll Si3ltGYlPlva0DAaoKevs/QFLVs7AwWtJF3NAwxZHMMVto2Q7OhfHW0aIzRjgrlL 5bAwBWH4tiv+V8OrcTtd/Eu5lQ== -----END CERTIFICATE-----Generated at Fri May 17 01:06:26 2024 by rpki-client on console-fra.rpki-client.org