$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/SNuJYh0mTFFyPbw1GLoiK8cf2_E.cer File: SNuJYh0mTFFyPbw1GLoiK8cf2_E.cer (raw, json) Hash identifier: BD4N353ihR7lemchjSgmBdgfhMBTXTb7I6ZCjWhLsg8= Subject key identifier: 48:DB:89:62:1D:26:4C:51:72:3D:BC:35:18:BA:22:2B:C7:1F:DB:F1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 306E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/SNuJYh0mTFFyPbw1GLoiK8cf2_E.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:37:55 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 103.10.244.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12398 (0x306e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:37:55 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=48DB89621D264C51723DBC3518BA222BC71FDBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:fa:e1:db:94:69:19:2d:72:33:52:a8:31: f2:20:49:28:9c:b9:7c:64:80:1f:eb:9e:a4:f5:d1: ae:80:3d:39:4a:72:e8:36:15:c0:61:c2:be:59:6b: 85:f7:10:15:02:43:82:e7:b5:a2:ec:51:9e:de:19: 34:37:4a:20:5e:53:21:e5:4f:0a:b6:f0:f5:01:3f: a6:37:90:fb:12:88:91:36:5b:f5:41:f9:af:e0:0c: 1b:de:06:fa:c4:61:7d:78:bd:ec:97:33:c2:9d:4f: 72:6e:0a:88:e4:4a:44:ab:9f:46:53:13:59:d7:f5: 34:4c:37:1d:7e:22:2b:c7:6f:c0:64:1d:61:6d:6e: e5:0e:11:d2:01:5f:2b:e4:cb:aa:dd:bb:6b:23:b9: 6b:20:9a:50:9d:76:6f:ca:eb:e6:e9:c8:be:3f:81: 7b:52:a7:a3:a8:b7:b0:a6:15:25:80:62:d7:bd:3b: 1a:b6:fb:78:bb:de:2c:3d:e1:11:da:9a:c3:aa:4c: 9f:15:4a:3e:82:64:2e:f8:47:11:38:94:a2:80:da: 90:08:49:06:d1:71:9b:db:20:33:4a:7b:b7:2a:37: f6:ea:db:99:45:a9:de:d5:fc:db:ea:b8:7b:63:bd: 59:14:dc:aa:64:d9:23:b8:c0:35:03:2d:d3:2c:42: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DB:89:62:1D:26:4C:51:72:3D:BC:35:18:BA:22:2B:C7:1F:DB:F1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/SNuJYh0mTFFyPbw1GLoiK8cf2_E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.244.0/22 Signature Algorithm: sha256WithRSAEncryption 40:e4:f2:8a:36:25:7b:48:64:14:fd:93:82:9c:1c:fb:da:95: cf:dc:da:c3:8e:7d:de:e1:4c:2a:1e:50:6f:e8:44:77:0e:4a: bb:3e:3f:2b:d8:89:f3:b3:32:8e:72:ca:d5:b3:68:b4:b4:57: bf:a2:46:b6:31:47:e5:3e:33:b4:e5:28:e2:54:21:de:5d:21: d5:11:2a:b9:59:9e:86:f2:55:e5:5b:62:11:81:f6:8f:f0:f3: fd:d0:3d:b8:a3:62:df:e1:fc:87:62:f6:d6:68:6e:51:69:45: 86:23:01:d8:3a:9f:99:d2:60:7b:da:91:d7:72:8c:19:56:23: b5:16:58:be:0f:51:86:06:00:18:c0:bc:2d:aa:f8:5b:32:f2: d7:4b:9c:8d:4b:0d:93:f2:d9:80:0c:0a:14:dc:15:a5:14:2a: 94:66:30:ac:1f:c9:5c:52:59:0e:65:19:39:8f:61:06:1c:7b: 29:6c:b2:57:91:64:ba:25:93:2f:bf:6f:fc:63:2e:4b:04:c9: 1d:7c:a0:c3:ac:7c:8c:cc:1b:7b:83:90:22:71:a0:19:cd:92: e5:19:55:93:8c:b9:be:57:83:f1:be:b7:fc:61:52:a5:dc:6c: 69:32:ad:31:a5:de:d3:d5:b2:0c:f5:e8:96:6d:7a:01:c8:e7: 4b:bd:12:c1 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICMG4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzc1NVoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoNDhEQjg5NjIxRDI2NEM1MTcyM0RCQzM1MThCQTIyMkJDNzFGREJG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCk+uHblGkZLXIzUqgx 8iBJKJy5fGSAH+uepPXRroA9OUpy6DYVwGHCvllrhfcQFQJDgue1ouxRnt4ZNDdK IF5TIeVPCrbw9QE/pjeQ+xKIkTZb9UH5r+AMG94G+sRhfXi97Jczwp1Pcm4KiORK RKufRlMTWdf1NEw3HX4iK8dvwGQdYW1u5Q4R0gFfK+TLqt27ayO5ayCaUJ12b8rr 5unIvj+Be1Kno6i3sKYVJYBi1707Grb7eLveLD3hEdqaw6pMnxVKPoJkLvhHETiU ooDakAhJBtFxm9sgM0p7tyo39urbmUWp3tX82+q4e2O9WRTcqmTZI7jANQMt0yxC aEMCAwEAAaOCAoswggKHMB0GA1UdDgQWBBRI24liHSZMUXI9vDUYuiIrxx/b8TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjIwNDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIyMDQyL1NO dUpZaDBtVEZGeVBidzFHTG9pSzhjZjJfRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnCvQwDQYJKoZIhvcN AQELBQADggEBAEDk8oo2JXtIZBT9k4KcHPvalc/c2sOOfd7hTCoeUG/oRHcOSrs+ PyvYifOzMo5yytWzaLS0V7+iRrYxR+U+M7TlKOJUId5dIdURKrlZnobyVeVbYhGB 9o/w8/3QPbijYt/h/Idi9tZoblFpRYYjAdg6n5nSYHvakddyjBlWI7UWWL4PUYYG ABjAvC2q+Fsy8tdLnI1LDZPy2YAMChTcFaUUKpRmMKwfyVxSWQ5lGTmPYQYceyls sleRZLolky+/b/xjLksEyR18oMOsfIzMG3uDkCJxoBnNkuUZVZOMub5Xg/G+t/xh UqXcbGkyrTGl3tPVsgz16JZtegHI50u9EsE= -----END CERTIFICATE-----Generated at Fri May 17 12:06:30 2024 by rpki-client on console-fra.rpki-client.org