$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer File: 6KpgLnNuGIzK5CRidiw3dvhbeTc.cer (raw, json) Hash identifier: c8keGcIMNBhs4OvMRzDFiFFNHUE0e9DNXSuE1/UboFY= Subject key identifier: E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:37:25 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 2402:700::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16185 (0x3f39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:37:25 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=E8AA602E736E188CCAE42462762C3776F85B7937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:5d:d1:6a:b8:a5:fb:ba:9d:f9:a1:90:42: 59:11:40:e9:01:e3:79:b7:67:46:16:e2:29:13:ec: 60:06:77:c5:51:bb:74:12:b4:61:e7:1e:e1:3b:92: 97:ed:c2:95:04:0f:b6:d2:8c:82:49:ef:be:7c:41: eb:a5:73:fc:3d:76:ef:4d:c0:7c:7f:f9:59:41:2e: b7:d2:bc:3c:97:65:76:48:6f:1f:07:d4:a5:f3:58: e3:1e:3f:b3:31:4e:a4:67:67:64:06:b9:58:79:60: 63:0f:e8:f9:94:8b:69:b7:95:63:1a:5d:60:6a:db: 4f:7e:83:2f:44:8d:65:78:28:2e:19:2c:e1:0b:43: 41:d8:10:2c:33:cd:ae:1d:5a:70:59:f2:46:d4:17: 6f:dc:60:3f:7b:33:bf:cc:95:c1:41:57:5b:b4:72: f5:da:34:d3:e4:33:40:6e:89:87:4c:8b:9f:a9:6b: 95:c1:d9:84:b2:93:5d:f0:8b:d1:c7:7c:dc:aa:8d: 37:36:b8:e2:ad:86:f5:20:3c:f1:71:d4:af:6d:29: 3f:0c:27:67:fe:ee:a8:ac:c0:20:c7:7c:25:61:5c: f6:6f:99:cf:bc:62:0f:4a:82:cc:35:04:ba:ef:c6: 75:32:2e:48:12:64:98:03:1f:a5:df:14:9b:9d:cb: d7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:700::/32 Signature Algorithm: sha256WithRSAEncryption 50:5e:e8:7f:fa:a8:54:d1:09:2f:5e:62:3a:72:c8:e3:0d:14: 9f:08:cb:27:3a:ec:25:21:b5:4c:1c:b2:aa:fc:c6:1b:8e:57: 54:8d:fb:b8:cf:f7:1e:d6:58:2b:35:e0:d4:62:35:c9:e9:64: bb:f6:5a:a5:8e:b9:fa:cb:6c:f0:ec:90:39:8e:e9:d1:0f:ef: f2:24:e1:70:d2:a7:7b:96:1a:28:cc:96:4c:8f:41:52:1b:a9: cd:95:30:19:a0:ac:02:bb:b4:7c:81:9d:7d:b7:6a:0b:b0:8d: a7:1c:56:63:c0:69:70:7b:de:25:8e:42:8a:c1:59:72:f5:d8: 8c:cc:3d:48:e7:f1:fc:88:8c:bc:de:3b:6f:d0:ce:e3:bc:46: 91:2d:41:17:2e:16:36:29:af:3b:f5:6c:83:6c:90:d5:a9:f4: 2e:8a:eb:10:b7:d9:cd:26:a8:de:fd:55:4c:4a:ce:5d:f0:44: 2a:70:6f:0b:0a:34:d1:8d:29:72:6f:55:73:8d:d3:f0:7c:bb: a7:a6:2c:78:91:ce:1e:3c:15:3c:5e:73:4a:f4:6e:41:a3:3e: 32:c5:9d:3a:03:e0:29:10:b2:ab:61:d3:7d:9b:df:37:99:68: b0:f3:19:5a:c0:2c:f1:46:74:9f:df:f1:9a:50:e3:98:7a:7b: d0:ca:7e:f8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICPzkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzcyNVoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoRThBQTYwMkU3MzZFMTg4Q0NBRTQyNDYyNzYyQzM3NzZGODVCNzkz NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6SXdFquKX7up35oZBC WRFA6QHjebdnRhbiKRPsYAZ3xVG7dBK0Yece4TuSl+3ClQQPttKMgknvvnxB66Vz /D12703AfH/5WUEut9K8PJdldkhvHwfUpfNY4x4/szFOpGdnZAa5WHlgYw/o+ZSL abeVYxpdYGrbT36DL0SNZXgoLhks4QtDQdgQLDPNrh1acFnyRtQXb9xgP3szv8yV wUFXW7Ry9do00+QzQG6Jh0yLn6lrlcHZhLKTXfCL0cd83KqNNza44q2G9SA88XHU r20pPwwnZ/7uqKzAIMd8JWFc9m+Zz7xiD0qCzDUEuu/GdTIuSBJkmAMfpd8Um53L 12kCAwEAAaOCAowwggKIMB0GA1UdDgQWBBToqmAuc24YjMrkJGJ2LDd2+Ft5NzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyMDkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjA5LzZL cGdMbk51R0l6SzVDUmlkaXczZHZoYmVUYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAgcAMA0GCSqGSIb3 DQEBCwUAA4IBAQBQXuh/+qhU0QkvXmI6csjjDRSfCMsnOuwlIbVMHLKq/MYbjldU jfu4z/ce1lgrNeDUYjXJ6WS79lqljrn6y2zw7JA5junRD+/yJOFw0qd7lhoozJZM j0FSG6nNlTAZoKwCu7R8gZ19t2oLsI2nHFZjwGlwe94ljkKKwVly9diMzD1I5/H8 iIy83jtv0M7jvEaRLUEXLhY2Ka879WyDbJDVqfQuiusQt9nNJqje/VVMSs5d8EQq cG8LCjTRjSlyb1VzjdPwfLunpix4kc4ePBU8XnNK9G5Boz4yxZ06A+ApELKrYdN9 m983mWiw8xlawCzxRnSf3/GaUOOYenvQyn74 -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org