$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer File: E7HIAH8jQgMPRBx3TKnLznR-ylA.cer (raw, json) Hash identifier: 6wXHCSJsnh2MbbYwmeB7PtFFZZPeVo4YVEdAAdBUXos= Subject key identifier: 13:B1:C8:00:7F:23:42:03:0F:44:1C:77:4C:A9:CB:CE:74:7E:CA:50 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3E5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:32:39 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 103.225.252.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15966 (0x3e5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:32:39 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=13B1C8007F2342030F441C774CA9CBCE747ECA50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:fa:19:e6:7d:b3:fc:c7:15:b3:9e:1f:26: d1:66:15:d5:51:a8:62:fe:29:86:19:cb:16:03:db: a7:18:87:7d:f4:2b:b1:d2:a9:85:a2:16:6a:5e:44: 14:00:eb:77:2f:d4:39:2f:e5:5a:3d:e9:41:3a:07: ae:3c:8e:4c:5e:cf:aa:55:d4:ef:ba:01:5e:d4:b3: dd:d2:05:4c:77:12:58:d7:45:9a:36:ae:ed:af:56: 5e:f8:5e:1d:f9:a0:39:5a:7a:0e:ae:56:6c:64:6f: 2e:7a:ff:06:5a:44:89:1d:75:fc:0c:e9:03:5f:c5: 6a:65:ec:fa:66:b9:1e:c4:9e:70:d7:81:32:58:7d: 64:7e:76:a0:6c:7a:25:d4:e2:1d:8a:dd:70:0d:f8: 3c:3b:2b:ce:a3:0a:03:dd:e1:f4:18:fe:d3:96:9f: 4b:00:94:6c:64:01:66:c3:6e:1f:72:7d:15:a7:16: f4:37:75:13:3b:6f:48:8d:ea:93:ad:46:96:b7:33: fe:d9:97:69:a3:ad:28:67:11:dc:82:87:e0:e4:4b: 2f:00:7a:84:aa:c0:8a:d5:d5:73:36:d3:dc:e1:a4: 8b:6b:25:8c:ab:b6:09:bf:2f:77:11:68:8d:04:70: 3b:7c:0f:be:eb:c9:3c:43:0e:83:d8:ef:ec:f0:0f: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B1:C8:00:7F:23:42:03:0F:44:1C:77:4C:A9:CB:CE:74:7E:CA:50 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.252.0/23 Signature Algorithm: sha256WithRSAEncryption 11:6e:8c:12:4e:96:13:65:71:86:c0:3a:df:09:c1:22:6d:bc: 71:32:9b:69:a6:31:2b:d5:87:c4:71:35:23:35:59:44:d5:21: ed:b4:ae:f0:52:02:a3:ce:26:c6:71:01:02:ad:d5:00:3d:0a: d0:77:d5:16:07:bd:a7:82:63:d3:1a:3e:c6:9e:e4:b7:23:f3: f8:e0:56:af:71:79:a7:39:49:d7:6b:32:90:ac:6e:99:1e:bf: 6a:4c:93:27:5b:96:d4:19:b5:34:2c:97:fb:dd:ab:76:04:09: f7:23:42:0d:27:00:0d:c8:3a:2c:58:c7:49:02:02:fa:ad:2b: 50:26:3b:2b:4a:68:2e:3d:69:a3:36:2f:a0:13:a0:37:4d:69: 89:5d:b2:85:f9:80:6e:e7:c3:c9:e3:af:c6:69:9b:7c:ff:83: 5b:68:1a:72:68:76:fb:51:a3:ca:4c:ad:83:17:43:fa:dc:ad: f5:d5:a5:77:1f:b9:ed:e1:70:77:43:19:4b:1d:9f:99:f6:b7: 1f:73:49:f3:28:86:ed:e6:9b:36:7a:07:96:cd:e7:aa:40:44: c0:10:50:78:10:da:15:b5:fc:2e:5d:9e:d7:3e:5e:b3:08:d3: 1c:32:62:03:f8:58:e0:dd:7d:fc:56:4d:b3:29:69:90:e0:81: 62:45:97:bc -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICPl4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzIzOVoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoMTNCMUM4MDA3RjIzNDIwMzBGNDQxQzc3NENBOUNCQ0U3NDdFQ0E1 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANJy+hnmfbP8xxWznh8m 0WYV1VGoYv4phhnLFgPbpxiHffQrsdKphaIWal5EFADrdy/UOS/lWj3pQToHrjyO TF7PqlXU77oBXtSz3dIFTHcSWNdFmjau7a9WXvheHfmgOVp6Dq5WbGRvLnr/BlpE iR11/AzpA1/FamXs+ma5HsSecNeBMlh9ZH52oGx6JdTiHYrdcA34PDsrzqMKA93h 9Bj+05afSwCUbGQBZsNuH3J9FacW9Dd1EztvSI3qk61Glrcz/tmXaaOtKGcR3IKH 4ORLLwB6hKrAitXVczbT3OGki2sljKu2Cb8vdxFojQRwO3wPvuvJPEMOg9jv7PAP ymMCAwEAAaOCAoswggKHMB0GA1UdDgQWBBQTscgAfyNCAw9EHHdMqcvOdH7KUDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyMjcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjI3L0U3 SElBSDhqUWdNUFJCeDNUS25Mem5SLXlsQS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn4fwwDQYJKoZIhvcN AQELBQADggEBABFujBJOlhNlcYbAOt8JwSJtvHEym2mmMSvVh8RxNSM1WUTVIe20 rvBSAqPOJsZxAQKt1QA9CtB31RYHvaeCY9MaPsae5Lcj8/jgVq9xeac5SddrMpCs bpkev2pMkydbltQZtTQsl/vdq3YECfcjQg0nAA3IOixYx0kCAvqtK1AmOytKaC49 aaM2L6AToDdNaYldsoX5gG7nw8njr8Zpm3z/g1toGnJodvtRo8pMrYMXQ/rcrfXV pXcfue3hcHdDGUsdn5n2tx9zSfMohu3mmzZ6B5bN56pARMAQUHgQ2hW1/C5dntc+ XrMI0xwyYgP4WODdffxWTbMpaZDggWJFl7w= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org