$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer File: Oc4JWSydphzAPD0ySnxsrEd3zM8.cer (raw, json) Hash identifier: hw0AemdnYULgIwcPx7muMSjj9KLLD19jgb9DCgiRSjM= Subject key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:36:24 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 2400:3800::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16132 (0x3f04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:36:24 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:1f:41:31:e8:de:b5:89:fc:49:fb:43:0e: ea:af:8a:d2:82:02:bd:7c:f5:cb:56:48:3f:3e:7c: 8b:cd:c5:58:02:94:77:13:63:f8:b5:3e:41:f8:7e: 32:ea:f3:ed:51:07:3a:cf:22:85:95:28:35:ec:fe: 62:eb:5e:ae:75:a9:1d:0e:7f:f0:ac:ae:f2:a2:e7: 1f:fb:03:e8:78:29:4c:67:cd:c3:56:d3:16:e8:e7: 17:74:b0:13:4b:3d:50:69:0c:c0:15:e6:85:62:59: 40:65:90:a3:49:7a:96:ee:21:ef:ee:c9:d9:3c:1f: 93:bd:3e:f8:c8:4d:5e:52:28:6a:7b:4a:d6:ad:7b: 81:77:23:02:e0:de:d4:d1:a2:c7:b2:7b:e1:61:27: b4:b6:5d:9d:88:dd:ae:2e:14:07:5b:8a:41:cc:26: 31:bb:34:df:73:7b:42:31:d2:96:fb:78:06:24:a0: 3f:fe:6e:1a:d5:a6:12:45:32:99:fd:ca:ab:af:5a: f2:81:92:61:6e:ab:99:40:2c:65:9d:5d:4e:8e:05: 51:ec:a9:97:46:64:f5:ad:89:09:8b:3c:c0:54:b2: e0:68:15:43:10:8d:99:06:b8:d2:c6:1d:b9:e2:7e: 33:9c:17:cb:ff:a2:c3:e1:d2:0f:56:88:07:f6:4a: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:3800::/32 Signature Algorithm: sha256WithRSAEncryption 6c:5c:0a:a4:d0:e4:0f:5b:b9:b7:33:dc:b8:92:f8:1e:c9:d4: dd:6e:cc:4e:b2:2e:7a:17:fe:08:5b:de:12:52:11:58:c7:5f: 45:f9:df:34:ba:0c:66:f1:cf:bf:a5:3d:f6:53:bb:1f:ab:87: 09:b7:f4:a6:dd:2a:e7:07:db:62:5c:a3:13:9e:b2:02:b4:cd: 95:b0:47:eb:c6:c2:5a:a3:aa:fd:94:35:8b:fc:17:08:8e:bf: ff:2b:29:1f:cd:8e:28:41:db:3f:9e:2b:c1:75:72:fc:d6:b7: b6:90:72:45:38:a7:85:db:a1:51:cd:88:ac:31:4e:32:67:e6: 1b:91:24:57:cc:fd:23:e8:9f:36:a6:d7:7a:fa:e7:5e:9d:8a: 92:83:fe:c6:02:49:ad:70:5e:0b:99:c8:fa:fb:7a:e7:6d:6e: c5:78:cb:f7:5f:fb:90:3a:be:83:87:5c:54:4c:a0:5e:6d:ff: c3:85:fa:42:af:6c:c6:00:c8:b0:dc:e0:61:70:6a:ef:6c:2a: e8:70:a0:d8:d8:41:f1:1b:1e:91:97:31:ac:7a:3a:c1:90:08: 2f:f1:66:b3:95:3c:74:d4:44:a9:16:65:60:a9:db:95:f3:9a: f2:2b:55:25:62:63:b2:9b:a4:be:41:1a:2f:a0:e5:39:3d:6c: fa:fb:a0:74 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICPwQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzYyNFoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoMzlDRTA5NTkyQzlEQTYxQ0MwM0MzRDMyNEE3QzZDQUM0Nzc3Q0ND RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5HH0Ex6N61ifxJ+0MO 6q+K0oICvXz1y1ZIPz58i83FWAKUdxNj+LU+Qfh+Murz7VEHOs8ihZUoNez+Yute rnWpHQ5/8Kyu8qLnH/sD6HgpTGfNw1bTFujnF3SwE0s9UGkMwBXmhWJZQGWQo0l6 lu4h7+7J2Twfk70++MhNXlIoantK1q17gXcjAuDe1NGix7J74WEntLZdnYjdri4U B1uKQcwmMbs033N7QjHSlvt4BiSgP/5uGtWmEkUymf3Kq69a8oGSYW6rmUAsZZ1d To4FUeypl0Zk9a2JCYs8wFSy4GgVQxCNmQa40sYdueJ+M5wXy/+iw+HSD1aIB/ZK DIcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQ5zglZLJ2mHMA8PTJKfGysR3fMzzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTAyL09j NEpXU3lkcGh6QVBEMHlTbnhzckVkM3pNOC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkADgAMA0GCSqGSIb3 DQEBCwUAA4IBAQBsXAqk0OQPW7m3M9y4kvgeydTdbsxOsi56F/4IW94SUhFYx19F +d80ugxm8c+/pT32U7sfq4cJt/Sm3SrnB9tiXKMTnrICtM2VsEfrxsJao6r9lDWL /BcIjr//KykfzY4oQds/nivBdXL81re2kHJFOKeF26FRzYisMU4yZ+YbkSRXzP0j 6J82ptd6+udenYqSg/7GAkmtcF4Lmcj6+3rnbW7FeMv3X/uQOr6Dh1xUTKBebf/D hfpCr2zGAMiw3OBhcGrvbCrocKDY2EHxGx6RlzGsejrBkAgv8WazlTx01ESpFmVg qduV85ryK1UlYmOym6S+QRovoOU5PWz6+6B0 -----END CERTIFICATE-----Generated at Fri Nov 22 09:41:08 2024 by rpki-client on console-ams.rpki-client.org