$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer File: RsHMLWUoO-OBBxn16hqHkDA6Ink.cer (raw, json) Hash identifier: hEmVhtEu35Vr2qc+gfd6gm9kFJ1VH6ggwUXlu55hqZ0= Subject key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0D63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:37:13 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 157.15.254.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3427 (0xd63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Nov 15 01:37:13 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:66:05:d5:60:08:60:be:5b:a9:26:b6:89: ef:60:0b:0e:34:af:10:de:a9:e2:78:06:a8:b5:20: 79:d3:ad:0d:6e:b0:25:2c:04:80:8c:a8:e4:49:c2: 9f:33:e9:b4:57:88:e7:aa:1c:40:1f:1b:18:01:20: 6a:a7:f5:e3:eb:a6:af:6d:11:96:b7:4b:9d:a2:ea: 6a:85:1c:f8:46:1a:36:79:66:03:bb:80:39:17:92: a2:b3:29:dc:4a:27:29:c2:14:f8:96:3c:0b:97:4f: 7c:ab:26:17:dc:e5:bb:ac:35:c5:99:96:e3:a1:71: fe:8b:4b:64:8e:d4:2c:f6:84:d9:73:73:ef:73:3c: 57:3c:ed:c2:fc:38:0d:89:13:09:68:ee:7d:e4:94: 59:d2:f8:55:76:f7:87:b6:a7:a2:0b:92:8d:11:d1: 31:ff:29:4d:bd:f0:0c:93:2c:33:1a:cf:c0:3b:ef: 47:23:50:9b:68:14:14:74:89:3f:ba:da:e2:9f:0f: 8d:9a:d1:6e:7b:23:09:40:80:26:0a:cc:8b:15:15: a9:e6:b1:e9:91:33:ca:55:14:85:a6:05:c3:2c:fc: 61:84:02:32:64:0c:8f:78:9a:53:5a:ce:1e:fc:37: 97:d3:4c:ad:a0:4a:d2:43:e6:c5:93:5a:56:14:1f: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.254.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:dd:46:f0:10:9e:99:45:e3:59:19:61:76:72:7d:f5:ae:ee: fb:cf:86:c9:69:e0:8b:11:04:48:38:86:07:6b:bd:a1:44:b8: 5b:01:48:16:08:74:83:66:cb:02:85:87:f1:07:74:e7:16:ac: 1a:ef:d5:40:14:23:8d:9a:20:86:35:6e:05:c9:9d:2d:f9:d4: 40:97:81:5a:cc:4f:61:a1:0c:56:e1:49:41:8a:bb:07:28:b0: fa:b4:05:4f:ee:c1:15:cb:94:fa:79:5f:85:d6:86:02:6c:1b: 58:4d:ee:ac:21:a6:ed:7b:51:18:5e:b9:2a:25:7c:b0:58:27: 4f:e0:f2:77:c6:cb:68:c3:f5:03:1b:96:17:81:ac:d2:cd:10: 60:d1:30:11:0b:70:c1:6f:de:46:cb:c0:49:df:a7:0a:71:9f: d5:d2:ee:f1:52:df:5c:c3:a6:aa:25:c8:c9:be:a2:6b:eb:aa: b9:51:68:ca:a2:fe:05:f8:43:8b:37:17:0a:04:60:a7:85:83: 11:8b:9e:35:01:4a:d7:d5:69:0e:01:db:cd:99:6d:26:25:d4: b5:a9:b4:6b:0b:c5:8a:3c:2f:e9:93:f3:8a:62:b3:50:06:83: 8f:34:ec:4d:2f:dc:67:0a:85:96:48:03:c3:16:e4:ca:c4:ba: 8f:dc:f3:9e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI0MTExNTAxMzcxM1oXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoNDZDMUNDMkQ2NTI4M0JFMzgxMDcxOUY1RUExQTg3OTAzMDNBMjI3 OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN20ZgXVYAhgvlupJraJ 72ALDjSvEN6p4ngGqLUgedOtDW6wJSwEgIyo5EnCnzPptFeI56ocQB8bGAEgaqf1 4+umr20RlrdLnaLqaoUc+EYaNnlmA7uAOReSorMp3EonKcIU+JY8C5dPfKsmF9zl u6w1xZmW46Fx/otLZI7ULPaE2XNz73M8Vzztwvw4DYkTCWjufeSUWdL4VXb3h7an oguSjRHRMf8pTb3wDJMsMxrPwDvvRyNQm2gUFHSJP7ra4p8PjZrRbnsjCUCAJgrM ixUVqeax6ZEzylUUhaYFwyz8YYQCMmQMj3iaU1rOHvw3l9NMraBK0kPmxZNaVhQf 4HUCAwEAAaOCAoswggKHMB0GA1UdDgQWBBRGwcwtZSg744EHGfXqGoeQMDoieTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNTIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjUyL1Jz SE1MV1VvTy1PQkJ4bjE2aHFIa0RBNkluay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdD/4wDQYJKoZIhvcN AQELBQADggEBAEzdRvAQnplF41kZYXZyffWu7vvPhslp4IsRBEg4hgdrvaFEuFsB SBYIdINmywKFh/EHdOcWrBrv1UAUI42aIIY1bgXJnS351ECXgVrMT2GhDFbhSUGK uwcosPq0BU/uwRXLlPp5X4XWhgJsG1hN7qwhpu17URheuSolfLBYJ0/g8nfGy2jD 9QMblheBrNLNEGDRMBELcMFv3kbLwEnfpwpxn9XS7vFS31zDpqolyMm+omvrqrlR aMqi/gX4Q4s3FwoEYKeFgxGLnjUBStfVaQ4B282ZbSYl1LWptGsLxYo8L+mT84pi s1AGg4807E0v3GcKhZZIA8MW5MrEuo/c854= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org