$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/JUKkw1PJBg3i8WnuTiV_er3F0Xs.cer File: JUKkw1PJBg3i8WnuTiV_er3F0Xs.cer (raw, json) Hash identifier: aIB38SOMiPD8Vq3azI5jim8FEu28Dp1Oow6gGUME4ss= Subject key identifier: 25:42:A4:C3:53:C9:06:0D:E2:F1:69:EE:4E:25:7F:7A:BD:C5:D1:7B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/437/JUKkw1PJBg3i8WnuTiV_er3F0Xs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/437/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:38:35 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 103.113.168.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16244 (0x3f74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:38:35 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=2542A4C353C9060DE2F169EE4E257F7ABDC5D17B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:b2:40:61:a7:68:a2:7c:53:1e:8c:5d:48: 00:d8:ec:b5:e1:ee:0c:00:9c:71:75:6f:74:67:ee: e6:17:81:8d:a6:88:23:9b:1d:9a:0c:1e:0f:d0:dd: 32:94:3a:a8:3c:d5:40:2a:82:ab:70:4c:68:05:b3: 60:13:3a:41:81:24:ba:aa:26:bf:d9:ac:c9:fa:87: c9:30:00:e3:3f:64:e4:f4:c7:c3:87:ed:85:11:64: 4c:9d:75:bf:83:24:9b:e3:11:80:f3:3c:c2:11:d4: 13:4e:0d:00:b6:00:6f:f8:f8:ec:7c:13:1e:d2:17: d8:ef:d3:4f:8f:cf:d6:fa:af:6c:c7:f0:2b:02:38: cd:ae:7b:a3:f4:12:08:eb:8f:b2:9e:d6:a4:32:59: ba:f6:62:0f:1c:f0:89:93:a2:41:b7:ab:a9:40:cc: 9a:ab:ee:53:cb:dc:be:63:5a:0e:e5:49:bd:49:fb: 5b:f4:40:ba:0e:8e:5b:e0:2e:0d:b4:40:ae:05:d3: 18:cc:22:7a:b1:5c:b7:73:19:b8:08:f0:cc:49:13: a5:a2:9b:4d:db:4c:2c:f6:cd:44:ab:80:2b:0d:af: db:80:df:a2:eb:ef:2d:aa:23:fe:77:19:6a:44:21: 23:69:3f:02:65:48:5f:29:ec:1f:c9:0d:7e:3e:8c: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:42:A4:C3:53:C9:06:0D:E2:F1:69:EE:4E:25:7F:7A:BD:C5:D1:7B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/437/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/437/JUKkw1PJBg3i8WnuTiV_er3F0Xs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.168.0/24 Signature Algorithm: sha256WithRSAEncryption 31:57:f0:ae:bd:ec:d0:b2:41:3a:a4:5b:67:26:7a:29:65:9a: 1a:61:e9:aa:7d:5e:bc:29:1c:91:81:4d:93:f0:f0:4f:c3:d0: 65:8a:62:7f:34:d2:73:93:69:64:20:c3:0e:17:ba:bc:33:83: d2:40:1c:92:80:81:fd:aa:9e:40:31:9f:80:4a:04:a8:b0:3a: e2:f4:2b:ba:de:dd:33:dc:8f:af:c2:c2:da:41:01:23:a0:3a: 2d:48:64:d5:a2:c0:3b:b2:28:5b:87:7a:37:dd:62:64:58:5c: 54:30:c1:89:c1:83:e9:b9:1b:f9:0d:db:14:1e:56:a0:c3:ce: ce:51:33:82:1f:e4:d8:46:98:34:09:2a:91:45:6a:bd:91:eb: f3:04:ff:36:95:67:37:78:70:40:ad:b6:7e:d8:bb:81:c2:5b: 69:c7:e3:a6:bf:42:8a:3b:ba:f5:a3:57:8f:71:33:f1:98:03: b4:3c:ea:f3:73:00:83:29:89:f5:4a:21:08:f7:df:7d:15:64: 30:5b:74:d6:b0:17:dc:04:68:ea:43:6d:d8:3d:dc:9f:ce:e1: e5:02:69:b1:6c:cd:34:c5:ae:f3:c6:38:79:9e:2d:cb:c1:43: 0a:e4:c2:bb:de:4f:6e:49:85:5b:9a:0c:91:92:ff:7a:fe:87: 59:21:05:93 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICP3QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzgzNVoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoMjU0MkE0QzM1M0M5MDYwREUyRjE2OUVFNEUyNTdGN0FCREM1RDE3 QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMR2skBhp2iifFMejF1I ANjsteHuDACccXVvdGfu5heBjaaII5sdmgweD9DdMpQ6qDzVQCqCq3BMaAWzYBM6 QYEkuqomv9msyfqHyTAA4z9k5PTHw4fthRFkTJ11v4Mkm+MRgPM8whHUE04NALYA b/j47HwTHtIX2O/TT4/P1vqvbMfwKwI4za57o/QSCOuPsp7WpDJZuvZiDxzwiZOi QberqUDMmqvuU8vcvmNaDuVJvUn7W/RAug6OW+AuDbRArgXTGMwierFct3MZuAjw zEkTpaKbTdtMLPbNRKuAKw2v24DfouvvLaoj/ncZakQhI2k/AmVIXynsH8kNfj6M Y7kCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQlQqTDU8kGDeLxae5OJX96vcXRezAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC80MzcvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzQzNy9KVUtrdzFQ SkJnM2k4V251VGlWX2VyM0YwWHMubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3GoMA0GCSqGSIb3DQEBCwUA A4IBAQAxV/CuvezQskE6pFtnJnopZZoaYemqfV68KRyRgU2T8PBPw9BlimJ/NNJz k2lkIMMOF7q8M4PSQBySgIH9qp5AMZ+ASgSosDri9Cu63t0z3I+vwsLaQQEjoDot SGTVosA7sihbh3o33WJkWFxUMMGJwYPpuRv5DdsUHlagw87OUTOCH+TYRpg0CSqR RWq9kevzBP82lWc3eHBArbZ+2LuBwltpx+Omv0KKO7r1o1ePcTPxmAO0POrzcwCD KYn1SiEI9999FWQwW3TWsBfcBGjqQ23YPdyfzuHlAmmxbM00xa7zxjh5ni3LwUMK 5MK73k9uSYVbmgyRkv96/odZIQWT -----END CERTIFICATE-----Generated at Fri Nov 22 09:41:08 2024 by rpki-client on console-ams.rpki-client.org