$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer File: BBtmBwjGjZdwQYqBch_wdx8KShk.cer (raw, json) Hash identifier: pL3Rm1cGKpipLJUHg70zxo9cXSAa895KN/zBlsmYt0Y= Subject key identifier: 04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:36:37 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 2402:73c0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16143 (0x3f0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:36:37 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=041B660708C68D9770418A81721FF0771F0A4A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:ef:8e:b2:cb:5c:4a:84:d1:2f:81:ed:1d: 23:a4:a1:31:20:6a:5a:45:cf:fb:93:a1:93:95:11: bc:9c:8a:0b:94:d1:3c:19:1f:bb:81:00:e8:13:f5: 79:11:e7:84:45:9f:9a:53:c4:ac:70:ba:a3:10:2b: 59:20:cc:42:24:f8:85:39:58:c5:37:06:2e:b6:28: ea:56:bd:96:87:93:18:b6:8f:9e:f7:5f:07:c3:88: 87:4a:e2:a8:9e:3d:b6:8f:7d:a7:82:ea:78:f6:02: 6b:c1:92:52:45:ca:17:50:d5:c5:94:08:07:e6:1c: 1a:40:42:08:e3:56:d2:d9:ed:77:9c:eb:f5:2e:69: a9:94:f8:06:72:18:45:eb:35:8d:85:ca:db:bf:98: 8e:e8:28:c9:ce:76:63:60:51:88:31:bd:34:56:49: 04:b6:9b:7b:d3:48:a3:4a:e9:6f:33:8f:3d:a6:81: 91:16:6c:da:1f:5e:a2:99:d8:4a:ac:0c:90:1f:17: 4f:b0:1b:96:06:15:be:09:4a:15:48:39:2f:ff:89: 13:40:0e:78:ae:0e:e6:fa:56:e5:e9:7e:c3:e7:53: 65:ad:d8:10:48:88:ce:3a:db:ca:23:56:fd:46:b9: c8:05:09:5e:df:36:f7:1b:50:cf:0c:9d:9b:fb:2f: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:73c0::/32 Signature Algorithm: sha256WithRSAEncryption 63:dc:fc:95:3b:19:24:e7:b9:4f:85:2e:57:c0:ff:db:31:ca: 3c:13:b5:6e:0d:e0:d6:bf:94:aa:08:b1:b3:9c:11:9d:29:de: 4b:d7:f1:bd:b3:d8:ec:57:db:89:0e:04:cb:ca:51:48:21:74: b4:bd:35:86:13:c4:37:24:5c:90:a2:ac:41:50:52:2b:15:ad: ae:c5:69:bd:6c:94:59:2c:3a:c7:d9:62:dc:63:9c:49:3d:ca: 0f:f1:18:59:7f:fd:86:99:ec:12:93:48:ac:f7:56:29:50:cd: 43:81:09:a4:84:0c:db:9c:6a:ff:c1:25:fb:4b:5c:59:34:5c: 8f:64:91:82:15:5d:7b:56:83:46:ed:8f:b0:ba:ae:18:4e:f8: d1:1c:9a:e3:70:41:59:0a:11:f4:29:5e:46:e5:03:9b:1b:30: 6f:59:f5:31:4e:7e:0d:c8:b9:16:77:5f:90:74:0d:26:3d:b1: e4:a1:e5:9d:f7:46:09:76:3a:b0:db:4a:5d:b2:47:da:15:e0: 99:d9:e3:2b:21:17:fa:70:7b:ae:53:3a:6b:80:c7:ab:f9:5c: de:49:5b:96:bd:2f:b4:88:58:95:82:d1:7a:b3:d6:a9:e3:05: a2:da:57:1b:25:93:94:e5:0a:0f:3a:cd:75:c4:4c:a5:7d:c1: b6:53:b8:09 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICPw8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzYzN1oXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoMDQxQjY2MDcwOEM2OEQ5NzcwNDE4QTgxNzIxRkYwNzcxRjBBNEEx OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALo5746yy1xKhNEvge0d I6ShMSBqWkXP+5Ohk5URvJyKC5TRPBkfu4EA6BP1eRHnhEWfmlPErHC6oxArWSDM QiT4hTlYxTcGLrYo6la9loeTGLaPnvdfB8OIh0riqJ49to99p4LqePYCa8GSUkXK F1DVxZQIB+YcGkBCCONW0tntd5zr9S5pqZT4BnIYRes1jYXK27+Yjugoyc52Y2BR iDG9NFZJBLabe9NIo0rpbzOPPaaBkRZs2h9eopnYSqwMkB8XT7AblgYVvglKFUg5 L/+JE0AOeK4O5vpW5el+w+dTZa3YEEiIzjrbyiNW/Ua5yAUJXt829xtQzwydm/sv sh0CAwEAAaOCAowwggKIMB0GA1UdDgQWBBQEG2YHCMaNl3BBioFyH/B3HwpKGTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMjAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzIwL0JC dG1Cd2pHalpkd1FZcUJjaF93ZHg4S1Noay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAnPAMA0GCSqGSIb3 DQEBCwUAA4IBAQBj3PyVOxkk57lPhS5XwP/bMco8E7VuDeDWv5SqCLGznBGdKd5L 1/G9s9jsV9uJDgTLylFIIXS0vTWGE8Q3JFyQoqxBUFIrFa2uxWm9bJRZLDrH2WLc Y5xJPcoP8RhZf/2GmewSk0is91YpUM1DgQmkhAzbnGr/wSX7S1xZNFyPZJGCFV17 VoNG7Y+wuq4YTvjRHJrjcEFZChH0KV5G5QObGzBvWfUxTn4NyLkWd1+QdA0mPbHk oeWd90YJdjqw20pdskfaFeCZ2eMrIRf6cHuuUzprgMer+VzeSVuWvS+0iFiVgtF6 s9ap4wWi2lcbJZOU5QoPOs11xEylfcG2U7gJ -----END CERTIFICATE-----Generated at Fri Nov 22 09:41:08 2024 by rpki-client on console-ams.rpki-client.org