$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/NpZu7Bk79ap-O4kiglX9RfOnwqo.cer File: NpZu7Bk79ap-O4kiglX9RfOnwqo.cer (raw, json) Hash identifier: k+ymRhocsf5jtsqIyTnP2cDp0ruMXXZ44xtLlT60XG8= Subject key identifier: 36:96:6E:EC:19:3B:F5:AA:7E:3B:89:22:82:55:FD:45:F3:A7:C2:AA Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3ED4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:35:22 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 61.195.64.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16084 (0x3ed4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:35:22 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=36966EEC193BF5AA7E3B89228255FD45F3A7C2AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:88:0e:7e:00:0f:99:46:d7:93:a2:19:ae: 87:a0:65:d1:27:4e:c5:aa:96:f5:02:c0:d7:27:9e: 97:61:65:b6:45:54:5e:a6:84:55:b6:ee:ae:d9:f0: 6c:02:fa:82:27:dc:a1:e4:19:8c:27:cd:4a:4a:ff: d5:14:11:ec:66:26:f0:fe:fa:6c:b2:b7:11:ef:da: b6:10:1e:f0:c9:1e:c0:6e:ab:87:5b:11:a2:23:4e: c1:77:70:63:9a:f0:0e:6d:dc:b4:27:1b:d2:9d:86: 9f:20:ab:bd:b1:a4:f1:9d:a0:4d:ce:61:ab:0b:57: c2:59:80:e6:c3:fe:48:fb:e8:13:23:a4:c8:b4:4e: 38:b4:27:36:ec:ba:d7:fb:51:ff:fd:03:94:4c:15: 72:02:25:99:1d:64:4c:57:32:ee:02:9c:c8:c2:f4: 38:eb:43:b5:ae:2d:3d:70:74:3c:14:32:13:e5:b6: 0a:92:33:ce:bf:5c:94:ce:54:ce:6b:a0:3b:ad:24: be:b1:16:b1:4c:6a:7c:f1:32:d6:4b:3d:22:64:72: 08:26:1d:a6:8e:c8:7f:fe:94:ae:42:92:3f:5d:13: c8:7d:49:82:42:74:fe:43:7a:df:cf:2b:b1:e5:81: 53:e6:31:ac:b9:dd:8f:df:1d:bb:6b:68:c2:71:1a: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:96:6E:EC:19:3B:F5:AA:7E:3B:89:22:82:55:FD:45:F3:A7:C2:AA X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.64.0/20 Signature Algorithm: sha256WithRSAEncryption 8a:74:31:74:59:9d:2f:00:23:53:57:c2:b1:91:70:a8:63:19: da:54:47:fa:6f:2d:47:86:da:49:f8:4a:3e:f3:a7:b8:3c:e3: f7:e2:64:c6:0a:5e:94:12:1e:69:89:48:45:01:3d:33:33:ff: 1d:1a:52:90:91:00:3b:4d:03:56:c4:f9:12:fe:e5:78:55:8d: d1:eb:8e:da:90:f9:b4:8c:45:9a:55:4e:2a:67:53:48:9a:ca: b3:b5:3d:18:eb:94:50:b6:3d:c0:e0:ad:b6:c3:59:25:e5:b2: f4:6a:2b:95:6b:91:32:89:6f:a1:90:e9:f7:30:5c:19:fd:a3: 5e:a7:6a:2f:38:63:5a:c8:b5:8f:5d:9a:df:c3:49:a1:55:8b: c7:ca:fe:d2:17:da:55:48:7f:84:34:6b:13:3b:65:28:52:6d: cc:8b:a8:17:68:0b:0d:6d:4c:a8:6d:5b:db:7d:82:bc:4d:5f: 18:35:49:f4:07:65:98:ef:84:c4:ed:df:aa:6a:33:14:b3:d9: 04:7a:be:ef:11:6b:0c:2f:da:e0:e7:88:e8:a2:bc:fb:28:87: f8:13:b8:44:04:92:d7:4d:f4:24:b5:30:1d:74:77:69:86:e2: 45:4c:30:ab:d4:fb:3f:6b:c4:99:92:31:00:4a:83:ea:bd:da: 04:30:ac:51 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICPtQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzUyMloXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoMzY5NjZFRUMxOTNCRjVBQTdFM0I4OTIyODI1NUZENDVGM0E3QzJB QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALU7iA5+AA+ZRteTohmu h6Bl0SdOxaqW9QLA1yeel2FltkVUXqaEVbburtnwbAL6gifcoeQZjCfNSkr/1RQR 7GYm8P76bLK3Ee/athAe8MkewG6rh1sRoiNOwXdwY5rwDm3ctCcb0p2GnyCrvbGk 8Z2gTc5hqwtXwlmA5sP+SPvoEyOkyLROOLQnNuy61/tR//0DlEwVcgIlmR1kTFcy 7gKcyML0OOtDta4tPXB0PBQyE+W2CpIzzr9clM5UzmugO60kvrEWsUxqfPEy1ks9 ImRyCCYdpo7If/6UrkKSP10TyH1JgkJ0/kN6388rseWBU+YxrLndj98du2townEa wkUCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQ2lm7sGTv1qn47iSKCVf1F86fCqjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC82MzIvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzYzMi9OcFp1N0Jr NzlhcC1PNGtpZ2xYOVJmT253cW8ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPcNAMA0GCSqGSIb3DQEBCwUA A4IBAQCKdDF0WZ0vACNTV8KxkXCoYxnaVEf6by1HhtpJ+Eo+86e4POP34mTGCl6U Eh5piUhFAT0zM/8dGlKQkQA7TQNWxPkS/uV4VY3R647akPm0jEWaVU4qZ1NImsqz tT0Y65RQtj3A4K22w1kl5bL0aiuVa5EyiW+hkOn3MFwZ/aNep2ovOGNayLWPXZrf w0mhVYvHyv7SF9pVSH+ENGsTO2UoUm3Mi6gXaAsNbUyobVvbfYK8TV8YNUn0B2WY 74TE7d+qajMUs9kEer7vEWsML9rg54joorz7KIf4E7hEBJLXTfQktTAddHdphuJF TDCr1Ps/a8SZkjEASoPqvdoEMKxR -----END CERTIFICATE-----Generated at Fri Nov 22 09:41:08 2024 by rpki-client on console-ams.rpki-client.org