$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer File: RJV2NHCVBo-WRmvzqO-pg-MncRY.cer (raw, json) Hash identifier: decYPmspKW9yxVKcSUXgKIRSJ/4H6GtCAyxYCrWbnO4= Subject key identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:36:45 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 2401:3600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16150 (0x3f16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:36:45 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=449576347095068F96466BF3A8EFA983E3277116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:f6:dc:1f:9a:81:39:15:71:51:97:12:fa: 4d:ee:63:25:5f:ce:12:78:97:2a:bd:ca:90:7b:0e: ae:59:ee:77:31:a3:24:cf:86:51:3c:65:ce:d6:f8: 50:bd:95:b5:e0:e9:cb:3f:c3:32:c5:6e:ad:1a:18: e7:fa:77:5f:c1:05:99:c6:63:91:62:b4:af:9d:5b: 70:41:78:9a:29:3c:fd:60:56:be:fa:2c:c5:d2:53: 26:9a:0b:48:ed:3f:7b:b0:46:13:6c:c3:d4:29:ad: 05:c1:d6:55:e7:17:43:ba:3b:50:26:c9:8c:c2:54: a8:b8:a6:e6:ff:a4:99:de:27:2d:95:d6:1f:91:b5: c8:06:f1:8a:f7:e7:b2:30:36:17:3d:76:da:50:84: bc:45:3f:bb:ab:f1:57:ad:8e:12:df:9a:1f:7e:de: 40:77:40:16:d2:2c:82:d3:6f:ea:38:91:5e:95:42: 70:6c:15:ed:6a:af:ae:6f:46:df:76:8c:62:12:63: bb:ab:e7:01:0a:5a:6b:2c:7c:4b:15:1e:85:ce:99: 62:ff:0d:dc:72:32:21:de:89:8a:0d:e4:4e:cb:1b: d1:c2:16:f8:01:08:b6:8e:13:45:ff:52:ab:9d:b7: 52:cd:88:8c:82:06:38:fd:93:8b:88:71:42:9e:44: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:3600::/32 Signature Algorithm: sha256WithRSAEncryption 32:94:63:8b:98:9c:48:ce:c5:7b:96:43:bf:79:b3:54:bf:e9: 2a:ea:ba:c4:c4:5b:92:19:8a:30:26:b9:f7:a4:39:88:c8:89: dc:3b:98:02:5c:bf:7c:ef:83:20:07:0d:9b:45:1e:70:e1:d5: 88:d5:b4:34:d3:87:da:53:6e:5b:2b:d5:70:b3:fb:70:35:c8: ac:56:c1:7a:e3:62:7b:0f:3d:03:20:15:d1:95:34:fd:06:6e: 70:5e:40:cd:fd:65:52:78:3a:a6:32:0e:55:d5:5c:44:23:93: 8e:b7:e5:b6:e7:10:51:b5:87:26:7f:4f:8e:24:14:7c:63:77: 8e:d8:3b:ce:5c:69:d4:d4:37:0e:6e:41:e0:b5:c5:b4:0e:40: 55:73:cc:ff:69:71:2c:45:ca:4d:89:84:94:03:21:36:60:d5: e6:b6:7f:03:cb:7e:e8:36:d1:77:ac:06:3e:c2:0a:2d:90:86: 81:9d:88:08:ac:4e:7a:57:f2:79:0b:45:45:d6:5b:0c:0c:1b: 9a:28:5c:d3:f3:2a:74:e9:d2:65:c7:10:46:22:97:d6:b0:92: c0:8f:c5:7d:97:99:68:ab:54:6a:26:df:5d:ed:85:65:6d:7e: 70:91:42:bd:52:d0:06:c7:f1:22:de:cb:e8:36:d8:cf:9c:f6: c2:33:01:36 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICPxYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzY0NVoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoNDQ5NTc2MzQ3MDk1MDY4Rjk2NDY2QkYzQThFRkE5ODNFMzI3NzEx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrS9twfmoE5FXFRlxL6 Te5jJV/OEniXKr3KkHsOrlnudzGjJM+GUTxlztb4UL2VteDpyz/DMsVurRoY5/p3 X8EFmcZjkWK0r51bcEF4mik8/WBWvvosxdJTJpoLSO0/e7BGE2zD1CmtBcHWVecX Q7o7UCbJjMJUqLim5v+kmd4nLZXWH5G1yAbxivfnsjA2Fz122lCEvEU/u6vxV62O Et+aH37eQHdAFtIsgtNv6jiRXpVCcGwV7Wqvrm9G33aMYhJju6vnAQpaayx8SxUe hc6ZYv8N3HIyId6Jig3kTssb0cIW+AEIto4TRf9Sq523Us2IjIIGOP2Ti4hxQp5E NpUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRElXY0cJUGj5ZGa/Oo76mD4ydxFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTMzL1JK VjJOSENWQm8tV1JtdnpxTy1wZy1NbmNSWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATYAMA0GCSqGSIb3 DQEBCwUAA4IBAQAylGOLmJxIzsV7lkO/ebNUv+kq6rrExFuSGYowJrn3pDmIyInc O5gCXL9874MgBw2bRR5w4dWI1bQ004faU25bK9Vws/twNcisVsF642J7Dz0DIBXR lTT9Bm5wXkDN/WVSeDqmMg5V1VxEI5OOt+W25xBRtYcmf0+OJBR8Y3eO2DvOXGnU 1DcObkHgtcW0DkBVc8z/aXEsRcpNiYSUAyE2YNXmtn8Dy37oNtF3rAY+wgotkIaB nYgIrE56V/J5C0VF1lsMDBuaKFzT8yp06dJlxxBGIpfWsJLAj8V9l5loq1RqJt9d 7YVlbX5wkUK9UtAGx/Ei3svoNtjPnPbCMwE2 -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org