$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer File: RJV2NHCVBo-WRmvzqO-pg-MncRY.cer (raw, json) Hash identifier: wOOE6OLjGCctzh2zYI09xHFAfglcXXpks91Mzq2tfa4= Subject key identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 2FD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:34:56 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 2401:3600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12247 (0x2fd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:34:56 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=449576347095068F96466BF3A8EFA983E3277116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:f6:dc:1f:9a:81:39:15:71:51:97:12:fa: 4d:ee:63:25:5f:ce:12:78:97:2a:bd:ca:90:7b:0e: ae:59:ee:77:31:a3:24:cf:86:51:3c:65:ce:d6:f8: 50:bd:95:b5:e0:e9:cb:3f:c3:32:c5:6e:ad:1a:18: e7:fa:77:5f:c1:05:99:c6:63:91:62:b4:af:9d:5b: 70:41:78:9a:29:3c:fd:60:56:be:fa:2c:c5:d2:53: 26:9a:0b:48:ed:3f:7b:b0:46:13:6c:c3:d4:29:ad: 05:c1:d6:55:e7:17:43:ba:3b:50:26:c9:8c:c2:54: a8:b8:a6:e6:ff:a4:99:de:27:2d:95:d6:1f:91:b5: c8:06:f1:8a:f7:e7:b2:30:36:17:3d:76:da:50:84: bc:45:3f:bb:ab:f1:57:ad:8e:12:df:9a:1f:7e:de: 40:77:40:16:d2:2c:82:d3:6f:ea:38:91:5e:95:42: 70:6c:15:ed:6a:af:ae:6f:46:df:76:8c:62:12:63: bb:ab:e7:01:0a:5a:6b:2c:7c:4b:15:1e:85:ce:99: 62:ff:0d:dc:72:32:21:de:89:8a:0d:e4:4e:cb:1b: d1:c2:16:f8:01:08:b6:8e:13:45:ff:52:ab:9d:b7: 52:cd:88:8c:82:06:38:fd:93:8b:88:71:42:9e:44: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:3600::/32 Signature Algorithm: sha256WithRSAEncryption a6:11:e4:9c:e1:39:aa:80:f0:d5:e1:53:c2:2d:94:0d:f6:89: 49:8b:42:46:6d:50:70:1a:a6:bd:64:83:3d:c0:ed:6b:30:ef: 17:eb:05:bf:97:3e:4d:1f:cd:51:41:68:1c:84:10:7a:90:67: 42:e5:f1:c5:e2:02:37:d8:fb:41:b0:3f:13:35:06:2e:d0:e1: 81:67:51:d5:11:64:0a:11:c7:ae:6b:7c:12:98:03:42:b1:56: f6:b0:0c:7d:5e:4a:02:80:c2:35:65:f0:7b:0c:db:6d:e9:e5: b1:e7:15:a8:da:89:43:68:c1:07:d9:3f:89:87:81:63:92:ab: dc:ed:7b:43:fb:ec:20:e9:f8:b2:0d:f6:e0:c6:88:a0:cd:78: 6d:c3:1b:58:93:ff:8a:c4:3d:99:bf:7d:f5:4a:65:40:cb:5b: 2e:be:26:98:39:58:8c:56:6f:3c:05:d3:01:44:27:18:9c:8f: ab:15:51:67:da:14:a8:3b:31:85:6f:46:ba:43:80:0a:fd:3a: fb:29:93:40:35:5b:ae:7e:e4:ba:94:ce:50:35:99:8f:7f:a0: 41:44:ab:bd:a3:f3:6a:be:7b:d5:f0:9a:c8:86:29:62:1c:1b: 84:1f:76:eb:4e:41:66:fb:77:6e:24:52:70:4c:c3:05:02:03: 2b:e3:ba:eb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICL9cwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzQ1NloXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoNDQ5NTc2MzQ3MDk1MDY4Rjk2NDY2QkYzQThFRkE5ODNFMzI3NzEx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrS9twfmoE5FXFRlxL6 Te5jJV/OEniXKr3KkHsOrlnudzGjJM+GUTxlztb4UL2VteDpyz/DMsVurRoY5/p3 X8EFmcZjkWK0r51bcEF4mik8/WBWvvosxdJTJpoLSO0/e7BGE2zD1CmtBcHWVecX Q7o7UCbJjMJUqLim5v+kmd4nLZXWH5G1yAbxivfnsjA2Fz122lCEvEU/u6vxV62O Et+aH37eQHdAFtIsgtNv6jiRXpVCcGwV7Wqvrm9G33aMYhJju6vnAQpaayx8SxUe hc6ZYv8N3HIyId6Jig3kTssb0cIW+AEIto4TRf9Sq523Us2IjIIGOP2Ti4hxQp5E NpUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRElXY0cJUGj5ZGa/Oo76mD4ydxFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTMzL1JK VjJOSENWQm8tV1JtdnpxTy1wZy1NbmNSWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATYAMA0GCSqGSIb3 DQEBCwUAA4IBAQCmEeSc4TmqgPDV4VPCLZQN9olJi0JGbVBwGqa9ZIM9wO1rMO8X 6wW/lz5NH81RQWgchBB6kGdC5fHF4gI32PtBsD8TNQYu0OGBZ1HVEWQKEceua3wS mANCsVb2sAx9XkoCgMI1ZfB7DNtt6eWx5xWo2olDaMEH2T+Jh4Fjkqvc7XtD++wg 6fiyDfbgxoigzXhtwxtYk/+KxD2Zv331SmVAy1suviaYOViMVm88BdMBRCcYnI+r FVFn2hSoOzGFb0a6Q4AK/Tr7KZNANVuufuS6lM5QNZmPf6BBRKu9o/NqvnvV8JrI hiliHBuEH3brTkFm+3duJFJwTMMFAgMr47rr -----END CERTIFICATE-----Generated at Fri May 17 08:51:51 2024 by rpki-client on console-ams.rpki-client.org