$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer File: MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer (raw, json) Hash identifier: t5qIAG464iQJXYpPvNVfynI7K/Okr7hg7ysfqYbyzCA= Subject key identifier: 32:A9:40:56:44:78:3B:78:6C:8D:DF:24:54:BB:5B:DF:51:19:83:B4 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3066 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:37:46 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 2404:a00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12390 (0x3066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:37:46 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=32A9405644783B786C8DDF2454BB5BDF511983B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:82:b1:bf:ca:a5:b7:97:46:42:30:74:bc: 49:27:c3:29:e2:05:01:04:b7:1c:e4:93:3e:58:db: 61:92:4e:e4:9f:f2:8d:74:5a:ed:4d:c5:1b:00:9e: 5c:8c:37:36:13:b7:0a:f4:4f:1b:90:27:54:64:76: 01:65:8c:5f:26:0a:ee:27:b6:95:a2:3e:2e:91:c5: 46:7c:0a:a2:c1:16:df:fe:db:98:75:b4:7e:3d:df: 37:d4:7f:0e:41:b9:92:dc:31:c4:b2:60:c9:d7:7f: 02:a4:9e:81:02:b7:5c:15:b4:97:5c:37:b2:89:13: 78:d1:e4:88:ae:d8:49:3d:dd:25:43:f5:14:62:92: 42:49:15:67:54:4b:6f:db:07:97:b6:3e:e9:9d:2e: 02:eb:ff:78:40:88:3d:bc:de:4b:b4:66:f1:20:b7: fd:f5:e2:25:1a:f4:a5:bd:14:3f:01:d0:f9:53:3a: dc:e0:a1:b8:b9:a2:78:3f:e5:82:04:ca:ba:58:d8: 61:68:43:52:6f:40:c3:00:9f:54:84:43:dc:ec:7c: f2:42:e1:ee:dc:e3:49:ee:96:10:5e:18:6f:00:2e: 37:bd:80:81:3b:99:17:ec:b8:11:73:af:ec:be:0c: 00:6b:2b:94:52:3f:33:46:cb:eb:ae:a2:78:3c:01: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:40:56:44:78:3B:78:6C:8D:DF:24:54:BB:5B:DF:51:19:83:B4 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:a00::/32 Signature Algorithm: sha256WithRSAEncryption 52:64:ba:e6:7b:91:6a:a0:7d:a9:2c:be:b3:3a:e5:7c:84:96: 66:52:e4:23:f7:a3:41:ec:45:2f:2d:a6:d0:75:41:c4:d8:d6: 5b:44:58:11:de:56:b0:f2:ee:e8:b2:57:5a:95:84:c3:1d:5d: 36:f4:0e:bd:19:ef:ef:5c:89:61:8a:f9:65:09:d4:8e:30:95: 57:2d:f8:0c:0f:c1:35:71:98:99:72:7a:f0:c4:69:b1:1f:7f: a1:02:66:15:5c:d5:d8:9f:13:5d:bb:69:f5:40:58:9b:73:34: 12:f9:05:65:56:6d:5b:43:2b:71:42:c5:24:77:81:31:f8:84: bb:4f:e1:53:0f:4a:43:02:39:e4:7c:bb:fb:20:ae:d1:89:69: ac:16:a4:8f:a5:60:17:7c:02:2c:e8:e6:4a:6c:6b:11:ae:77: 9f:fd:fd:eb:8a:72:d7:6e:4d:69:d4:b5:c8:b7:5f:f0:d6:0a: 0e:f2:f4:f5:e5:47:22:4a:fb:f3:34:78:3b:fb:a3:6e:41:55: dd:f8:f3:b2:88:e5:e4:16:99:62:0e:1e:e8:55:eb:d9:ad:b9: f3:db:32:63:ff:0c:ce:fe:d1:fb:3c:28:69:91:9c:88:3a:f7: 82:c6:b2:89:36:aa:8b:c5:cc:40:04:e8:86:cb:88:c8:17:e0: 5a:de:d1:e4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICMGYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzc0NloXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoMzJBOTQwNTY0NDc4M0I3ODZDOERERjI0NTRCQjVCREY1MTE5ODNC NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALxMgrG/yqW3l0ZCMHS8 SSfDKeIFAQS3HOSTPljbYZJO5J/yjXRa7U3FGwCeXIw3NhO3CvRPG5AnVGR2AWWM XyYK7ie2laI+LpHFRnwKosEW3/7bmHW0fj3fN9R/DkG5ktwxxLJgydd/AqSegQK3 XBW0l1w3sokTeNHkiK7YST3dJUP1FGKSQkkVZ1RLb9sHl7Y+6Z0uAuv/eECIPbze S7Rm8SC3/fXiJRr0pb0UPwHQ+VM63OChuLmieD/lggTKuljYYWhDUm9AwwCfVIRD 3Ox88kLh7tzjSe6WEF4YbwAuN72AgTuZF+y4EXOv7L4MAGsrlFI/M0bL666ieDwB pJ8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBQyqUBWRHg7eGyN3yRUu1vfURmDtDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxNTIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTUyL01x bEFWa1I0TzNoc2pkOGtWTHRiMzFFWmc3US5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBAoAMA0GCSqGSIb3 DQEBCwUAA4IBAQBSZLrme5FqoH2pLL6zOuV8hJZmUuQj96NB7EUvLabQdUHE2NZb RFgR3law8u7osldalYTDHV029A69Ge/vXIlhivllCdSOMJVXLfgMD8E1cZiZcnrw xGmxH3+hAmYVXNXYnxNdu2n1QFibczQS+QVlVm1bQytxQsUkd4Ex+IS7T+FTD0pD AjnkfLv7IK7RiWmsFqSPpWAXfAIs6OZKbGsRrnef/f3rinLXbk1p1LXIt1/w1goO 8vT15UciSvvzNHg7+6NuQVXd+POyiOXkFpliDh7oVevZrbnz2zJj/wzO/tH7PChp kZyIOveCxrKJNqqLxcxABOiGy4jIF+Ba3tHk -----END CERTIFICATE-----Generated at Fri May 17 01:06:27 2024 by rpki-client on console-fra.rpki-client.org