$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer File: M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer (raw, json) Hash identifier: 1eKg6xL7QqiIK6AKvlBhkPbgXEFybHY7TVZ4lzCfyr0= Subject key identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:38:06 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 103.142.12.0/23 IP: 133.247.112.0/20 IP: 202.233.68.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16219 (0x3f5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:38:06 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=33D2C2C8816F30E6B58262B93C717C85513505C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:1d:34:ac:99:fa:0f:7c:f4:c0:39:e0:e8: 95:e8:08:f1:95:37:a9:57:1a:81:c1:53:36:b7:0d: 69:47:7b:cf:59:6c:a0:60:40:84:e0:57:53:a3:bd: 4a:48:eb:12:fc:21:bc:ee:64:de:77:16:ce:1a:96: 69:dd:6c:06:9f:92:40:78:2f:c7:1b:4d:40:f9:a2: 2c:97:a9:4d:a2:b8:57:af:e4:a7:e4:ee:8a:f8:ee: 92:cc:fd:1b:43:65:85:66:b9:d8:70:75:5d:f6:11: ed:b6:ae:ee:de:54:0f:b0:a5:1e:ce:b2:20:17:f9: 13:b8:89:a9:09:d0:f8:40:a7:cb:85:e5:81:17:02: c1:34:99:dd:b2:da:d3:08:89:22:2d:78:b9:8e:2d: c9:03:1f:7b:21:ef:ef:18:bb:fc:13:74:3c:83:32: eb:32:4b:32:9c:c2:de:17:6e:cd:5f:0e:a1:6d:ae: 40:82:46:76:45:38:e0:b3:2b:9f:a7:4e:cd:fe:f3: a3:72:83:0c:f0:55:6c:f0:02:f2:d6:0f:3f:94:00: 99:48:b0:1e:62:0d:78:30:e3:c5:25:22:2b:2e:47: f7:8a:7c:64:03:47:b5:45:d7:0e:76:02:21:fd:da: f3:f0:e4:b5:d1:0a:3f:12:ed:34:a4:e7:fa:25:0a: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.12.0/23 133.247.112.0/20 202.233.68.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:cd:81:06:48:1f:2c:91:78:6b:4a:a0:3f:f6:0d:5b:41:55: d0:0d:ff:c1:37:4e:21:63:bc:a8:86:8d:88:20:5d:ea:b6:74: 4a:f1:29:41:fb:84:b2:51:d1:46:1e:4e:b8:27:2c:a9:c1:80: 03:8d:02:99:5e:16:0e:95:b0:32:e4:3e:92:3b:ac:1e:d0:ab: e3:4d:a7:ad:82:e1:62:a4:d8:60:31:34:15:0a:fa:82:1e:55: 36:a1:19:3f:a2:50:df:0f:9b:5d:24:b4:9b:69:a2:3e:8c:6d: 42:1b:fd:5c:f9:b2:83:0d:7b:79:e5:e8:3d:81:fb:5d:e3:72: 08:28:3f:d4:b9:ab:14:9b:10:c1:05:f9:94:de:54:8f:95:6f: 05:7b:3c:39:34:ce:83:03:72:2e:56:f2:6a:a6:5b:12:47:41: bb:84:b1:3a:b0:18:57:58:bd:39:4b:b5:91:3f:48:8a:3d:fc: ec:20:1e:bb:eb:ef:33:d5:30:57:96:9b:93:bc:4a:ff:b7:88: 82:50:85:f1:62:bf:e1:63:43:28:f8:81:ea:7b:93:0f:82:27: fd:9b:3c:d9:f1:b7:5e:62:ea:fd:6b:6c:e7:f4:f2:ec:64:d8: 8c:e6:50:73:91:d9:fe:7d:8d:11:96:2e:57:49:f3:5f:3a:1c: a7:33:50:00 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICP1swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzgwNloXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoMzNEMkMyQzg4MTZGMzBFNkI1ODI2MkI5M0M3MTdDODU1MTM1MDVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeZHTSsmfoPfPTAOeDo legI8ZU3qVcagcFTNrcNaUd7z1lsoGBAhOBXU6O9SkjrEvwhvO5k3ncWzhqWad1s Bp+SQHgvxxtNQPmiLJepTaK4V6/kp+Tuivjuksz9G0NlhWa52HB1XfYR7bau7t5U D7ClHs6yIBf5E7iJqQnQ+ECny4XlgRcCwTSZ3bLa0wiJIi14uY4tyQMfeyHv7xi7 /BN0PIMy6zJLMpzC3hduzV8OoW2uQIJGdkU44LMrn6dOzf7zo3KDDPBVbPAC8tYP P5QAmUiwHmINeDDjxSUiKy5H94p8ZANHtUXXDnYCIf3a8/DktdEKPxLtNKTn+iUK rr0CAwEAAaOCApcwggKTMB0GA1UdDgQWBBQz0sLIgW8w5rWCYrk8cXyFUTUFxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTAyL005 TEN5SUZ2TU9hMWdtSzVQSEY4aFZFMUJjVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAFnjgwDBASF93ADBALK 6UQwDQYJKoZIhvcNAQELBQADggEBAB7NgQZIHyyReGtKoD/2DVtBVdAN/8E3TiFj vKiGjYggXeq2dErxKUH7hLJR0UYeTrgnLKnBgAONApleFg6VsDLkPpI7rB7Qq+NN p62C4WKk2GAxNBUK+oIeVTahGT+iUN8Pm10ktJtpoj6MbUIb/Vz5soMNe3nl6D2B +13jcggoP9S5qxSbEMEF+ZTeVI+VbwV7PDk0zoMDci5W8mqmWxJHQbuEsTqwGFdY vTlLtZE/SIo9/OwgHrvr7zPVMFeWm5O8Sv+3iIJQhfFiv+FjQyj4gep7kw+CJ/2b PNnxt15i6v1rbOf08uxk2IzmUHOR2f59jRGWLldJ8186HKczUAA= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org