$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer File: QNrM4gBs56aox2tTIKDhiYRdFWA.cer (raw, json) Hash identifier: 4WwX3W3vnS1pB6uIsqOKtyJIoMiJLoUhmzy3+Bw2aK8= Subject key identifier: 40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0D72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:38:44 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 160.25.134.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3442 (0xd72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Nov 15 01:38:44 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:eb:3a:85:da:55:4d:03:4e:5e:c3:8d:57:b1: 7d:79:ef:13:ec:d4:d9:e4:77:ec:14:89:b0:7b:b2: f0:45:e5:3e:bb:45:98:49:a2:cd:1a:54:cf:88:85: 1f:ad:61:3b:05:ca:76:97:0b:38:cf:50:75:6f:ac: 92:37:e8:04:b4:43:e3:ff:1b:42:87:e0:d6:1c:f1: 95:98:8c:e7:6a:c7:0d:1c:a1:df:85:37:61:87:c1: f2:26:6e:69:b9:30:b2:97:62:c3:27:60:34:d0:9f: 58:35:85:5f:1a:4c:43:78:b5:dd:34:dc:34:11:d8: b2:91:2a:4e:1e:4f:3c:69:c6:fa:7f:44:63:93:78: ad:3c:9d:5f:04:9e:95:1e:5e:54:15:89:1c:e4:18: b3:56:60:79:91:ac:1f:23:9e:f8:2b:e2:5e:e0:18: 96:5c:2a:e3:5b:cc:30:03:a1:ad:52:d8:23:af:92: ca:98:85:fa:c3:c5:00:27:8c:68:5e:bf:3b:b6:cd: 75:bb:68:58:39:bb:4a:6a:99:72:8a:18:10:f6:6a: 61:ad:8c:00:70:f6:ea:35:66:0d:8b:ec:b8:93:b0: 4f:47:e5:24:59:37:26:c3:9b:d4:64:fd:7e:bd:78: 5c:c0:f6:55:df:0d:a4:cc:25:5c:0c:60:e9:94:da: 9a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.134.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:50:44:73:50:17:fa:67:30:df:ec:71:39:c2:b3:2f:ac:88: 2c:d9:de:e1:c0:57:80:8c:74:60:29:de:94:99:86:39:28:43: 58:19:87:60:c9:e4:73:8b:20:b8:bb:ad:9b:7e:86:30:c0:1e: f8:72:6f:35:c8:d1:5e:74:f4:39:98:b0:1d:7f:b6:7b:6b:18: ee:9c:c1:07:3d:03:68:f7:39:32:59:d6:f0:47:4b:ab:fc:7a: b0:c7:92:09:86:4a:21:64:9c:24:d5:ce:31:c9:7e:d1:da:a5: a8:b6:46:f1:7c:2c:6d:06:2e:cc:9a:95:53:26:17:a6:99:d5: 1f:05:ff:a3:90:72:90:46:f6:51:7f:5f:5c:1f:09:0f:74:36: 27:c3:92:2c:1f:fc:46:2a:4c:39:84:20:90:64:99:aa:8a:5c: eb:65:76:71:47:1c:ff:67:a3:a0:b8:b2:13:fd:f2:10:8f:9d: 2e:8a:09:32:68:69:92:89:c6:03:01:ef:9a:f6:94:35:71:ff: 7b:ae:78:d3:b0:1a:a1:40:0c:05:2d:8a:9e:c3:e0:25:93:61: 70:43:d1:46:5d:34:f9:7f:72:24:e3:d6:79:db:bf:e9:f7:1c: 62:0c:78:46:78:af:94:0c:2d:7a:7d:05:3d:17:e2:9f:28:fc: e4:bf:43:98 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDXIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI0MTExNTAxMzg0NFoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoNDBEQUNDRTIwMDZDRTdBNkE4Qzc2QjUzMjBBMEUxODk4NDVEMTU2 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN/rOoXaVU0DTl7DjVex fXnvE+zU2eR37BSJsHuy8EXlPrtFmEmizRpUz4iFH61hOwXKdpcLOM9QdW+skjfo BLRD4/8bQofg1hzxlZiM52rHDRyh34U3YYfB8iZuabkwspdiwydgNNCfWDWFXxpM Q3i13TTcNBHYspEqTh5PPGnG+n9EY5N4rTydXwSelR5eVBWJHOQYs1ZgeZGsHyOe +CviXuAYllwq41vMMAOhrVLYI6+SypiF+sPFACeMaF6/O7bNdbtoWDm7SmqZcooY EPZqYa2MAHD26jVmDYvsuJOwT0flJFk3JsOb1GT9fr14XMD2Vd8NpMwlXAxg6ZTa muMCAwEAAaOCAoswggKHMB0GA1UdDgQWBBRA2sziAGznpqjHa1MgoOGJhF0VYDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNjYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjY2L1FO ck00Z0JzNTZhb3gydFRJS0RoaVlSZEZXQS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgGYYwDQYJKoZIhvcN AQELBQADggEBAGtQRHNQF/pnMN/scTnCsy+siCzZ3uHAV4CMdGAp3pSZhjkoQ1gZ h2DJ5HOLILi7rZt+hjDAHvhybzXI0V509DmYsB1/tntrGO6cwQc9A2j3OTJZ1vBH S6v8erDHkgmGSiFknCTVzjHJftHapai2RvF8LG0GLsyalVMmF6aZ1R8F/6OQcpBG 9lF/X1wfCQ90NifDkiwf/EYqTDmEIJBkmaqKXOtldnFHHP9no6C4shP98hCPnS6K CTJoaZKJxgMB75r2lDVx/3uueNOwGqFADAUtip7D4CWTYXBD0UZdNPl/ciTj1nnb v+n3HGIMeEZ4r5QMLXp9BT0X4p8o/OS/Q5g= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org