$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer File: RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer (raw, json) Hash identifier: OGnfKGY86lhh8qYfecWw2ZyZxHlwkq3xDZ5XIciCO0g= Subject key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 306A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:37:50 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 103.149.4.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12394 (0x306a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:37:50 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:14:01:0a:57:14:96:ee:8f:a6:53:14:b4: 12:d9:b4:fb:a3:24:f2:6c:81:74:f3:4e:69:9b:3d: b2:29:c0:57:7c:ea:ca:e2:d2:56:98:d6:b7:fa:1b: 4e:1b:78:e9:00:8e:5c:db:70:38:3f:a2:9a:84:ad: 4a:bc:96:de:7b:82:a0:d8:6e:db:be:22:b2:90:b5: 6c:19:9e:ef:15:89:4c:fa:a3:2f:5e:e4:6e:96:e8: 09:23:19:6d:1b:a7:ad:0a:fd:c0:cb:71:88:ab:9e: 53:c3:38:58:36:b0:4b:e7:14:4e:da:b4:72:46:24: 03:f1:2d:82:04:93:73:9f:d4:ac:ae:ce:ab:ad:4e: fb:57:8f:49:93:66:3a:5e:d4:17:33:b6:4a:5e:e7: a6:76:eb:0a:37:32:91:1b:d9:b1:98:eb:4d:c6:27: aa:29:1c:21:a1:43:a4:a0:2f:f2:d7:ae:b8:df:1e: 45:52:9a:58:6a:5c:75:d1:eb:5a:8c:63:f4:ab:b0: 80:8d:8f:61:24:74:b5:ce:6e:5a:3d:c6:45:4f:72: 99:30:1a:d7:c3:09:8c:82:44:b5:ec:23:c0:38:a8: 3d:40:a2:d6:80:d4:c5:bc:de:d5:5c:0b:ae:96:b9: 41:fd:17:61:09:02:4e:08:f7:71:dd:15:7f:8e:ed: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.4.0/23 Signature Algorithm: sha256WithRSAEncryption 51:e9:4a:6b:e9:2e:38:fe:4e:90:6d:af:6b:4f:19:c8:39:aa: 89:0b:65:58:08:9e:f9:ed:07:9e:29:d3:3b:27:ad:75:26:09: 3c:57:08:80:2c:81:11:2b:64:f4:b0:21:32:b5:73:82:6c:ac: 02:60:51:b2:7e:da:7c:29:33:9e:88:4e:03:33:db:9a:6b:22: 40:e0:62:4b:7d:8b:97:d5:57:5a:cc:7c:9c:b6:7f:79:eb:57: 0b:83:b2:70:bd:99:79:ec:63:3f:03:d1:00:8e:0f:2c:de:ef: 3e:b0:b5:2a:5e:cf:24:1e:4b:ec:c0:ca:a2:37:cf:5c:c2:df: 05:cd:a8:b3:35:73:35:3f:85:82:b8:bb:2b:19:2b:f1:da:79: a5:4d:58:03:25:af:52:15:67:5f:2f:2f:c8:13:21:90:b1:e4: a1:02:e5:f8:b9:21:17:d4:64:9e:13:d1:5b:26:d1:35:39:09: b1:5e:05:d2:1f:24:ef:d3:31:d4:c5:64:35:96:4a:21:29:95: 7d:e5:38:a9:39:2d:c8:4b:99:aa:40:c2:15:51:40:b9:db:e0: e2:41:67:1a:8e:fc:17:34:f1:89:47:70:f0:b2:bf:91:da:42: 85:cd:c7:92:1a:b4:82:0c:c9:97:e2:3d:73:00:35:2c:bb:5c: 2d:38:6c:15 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICMGowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzc1MFoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoNDQ2QzY1QjdBRjkxN0FGRkE3NEY2QjA5RTQzN0FDMEYzNjUzNzQx RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTTFAEKVxSW7o+mUxS0 Etm0+6Mk8myBdPNOaZs9sinAV3zqyuLSVpjWt/obTht46QCOXNtwOD+imoStSryW 3nuCoNhu274ispC1bBme7xWJTPqjL17kbpboCSMZbRunrQr9wMtxiKueU8M4WDaw S+cUTtq0ckYkA/EtggSTc5/UrK7Oq61O+1ePSZNmOl7UFzO2Sl7npnbrCjcykRvZ sZjrTcYnqikcIaFDpKAv8teuuN8eRVKaWGpcddHrWoxj9KuwgI2PYSR0tc5uWj3G RU9ymTAa18MJjIJEtewjwDioPUCi1oDUxbze1VwLrpa5Qf0XYQkCTgj3cd0Vf47t /nkCAwEAAaOCAoswggKHMB0GA1UdDgQWBBREbGW3r5F6/6dPawnkN6wPNlN0HTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyMTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjE3L1JH eGx0Ni1SZXYtblQyc0o1RGVzRHpaVGRCMC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlQQwDQYJKoZIhvcN AQELBQADggEBAFHpSmvpLjj+TpBtr2tPGcg5qokLZVgInvntB54p0zsnrXUmCTxX CIAsgRErZPSwITK1c4JsrAJgUbJ+2nwpM56ITgMz25prIkDgYkt9i5fVV1rMfJy2 f3nrVwuDsnC9mXnsYz8D0QCODyze7z6wtSpezyQeS+zAyqI3z1zC3wXNqLM1czU/ hYK4uysZK/HaeaVNWAMlr1IVZ18vL8gTIZCx5KEC5fi5IRfUZJ4T0Vsm0TU5CbFe BdIfJO/TMdTFZDWWSiEplX3lOKk5LchLmapAwhVRQLnb4OJBZxqO/Bc08YlHcPCy v5HaQoXNx5IatIIMyZfiPXMANSy7XC04bBU= -----END CERTIFICATE-----Generated at Fri May 17 01:06:27 2024 by rpki-client on console-fra.rpki-client.org