$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer File: TtDo6n2ynqrPuqPy7oCkrptfV84.cer (raw, json) Hash identifier: ENWXsPyGDMcow3+URrX911eqd5d3uJmKraENxhU3urk= Subject key identifier: 4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 2F6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:32:32 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 2400:dcc0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 12:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12138 (0x2f6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:32:32 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:5d:91:e2:43:aa:9e:3c:f2:a3:4e:89:99: 08:ca:47:f2:84:74:d4:4c:6e:25:41:c8:57:32:1e: 79:e5:f2:ca:52:e2:40:59:99:fa:7d:cd:50:a5:d5: 07:b6:a3:85:e4:4f:58:5f:ba:07:56:45:d2:30:9f: 52:46:ab:5a:d6:a0:fa:ab:3a:9d:38:b2:89:2d:41: 20:50:20:77:31:36:69:63:76:9b:44:6f:4b:6e:06: 07:ac:4e:7b:4f:1e:0f:c9:40:be:45:d1:4b:cc:19: 28:79:37:c9:be:2a:e8:c4:2b:25:ab:3c:1c:8d:44: fd:05:2e:bb:09:4e:8e:42:89:eb:e9:85:8d:73:43: 50:07:d1:e8:69:29:e6:02:01:4c:cc:3d:f4:1b:68: 52:cd:43:93:b1:24:c3:04:50:55:6f:e8:c3:ef:2f: e2:27:0d:98:e2:16:b2:de:9f:82:30:15:b3:45:aa: 29:d9:de:99:5c:f8:18:14:b7:86:d7:29:ca:b2:f2: 5d:2a:5c:0a:89:02:df:c6:73:0d:c7:ff:78:9c:1e: 8b:61:b0:83:98:fd:3e:f9:be:4f:f9:80:5a:5d:24: e2:f7:39:b1:8c:d6:af:97:50:87:00:2a:b9:d6:77: 8b:f4:20:4c:4d:6b:e4:3e:f2:10:15:6f:80:0c:df: 75:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:dcc0::/32 Signature Algorithm: sha256WithRSAEncryption 26:96:9b:c8:3a:2e:cc:e4:e7:66:ef:d0:57:08:18:8c:7c:6b: db:d2:c1:40:22:8b:1c:57:70:51:70:c3:1c:1e:64:a5:9d:57: 14:2a:c9:ed:b2:a5:40:8a:a5:11:01:b5:2d:2d:56:72:72:ba: 60:e2:47:87:ee:f8:17:7d:62:54:00:87:c3:bf:5f:75:75:7f: aa:9e:7c:36:32:fa:9f:30:58:9e:10:fc:ba:d5:4e:00:ec:29: 4f:2e:13:b8:19:57:33:19:48:3c:f7:9f:59:98:c9:38:45:ed: 9c:6a:74:6a:7e:22:65:2c:5c:bd:ba:2c:97:90:93:71:c2:ba: cc:96:e1:0f:69:47:2a:58:01:d8:e1:16:1b:bb:dc:f5:1b:e8: 5c:e5:69:52:66:6d:d5:be:52:55:91:91:db:ff:cf:f4:fb:f7: 96:43:14:87:99:9d:22:57:e6:52:44:8c:c7:9c:02:07:5f:01: c0:f9:77:38:f4:3f:34:0b:ef:e7:69:09:dd:b7:8e:ea:94:b2: 68:9e:ab:a0:07:97:4d:9c:7b:4f:8b:c7:36:43:6b:78:78:d6: 16:19:1c:df:ea:ec:ee:a8:e6:6f:c3:b2:da:ec:c1:7c:48:01: 65:df:71:10:89:45:c8:6e:95:32:dc:2b:84:33:3f:6e:a6:80: 50:c6:eb:2d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICL2owDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzIzMloXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoNEVEMEU4RUE3REIyOUVBQUNGQkFBM0YyRUU4MEE0QUU5QjVGNTdD RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANayXZHiQ6qePPKjTomZ CMpH8oR01ExuJUHIVzIeeeXyylLiQFmZ+n3NUKXVB7ajheRPWF+6B1ZF0jCfUkar Wtag+qs6nTiyiS1BIFAgdzE2aWN2m0RvS24GB6xOe08eD8lAvkXRS8wZKHk3yb4q 6MQrJas8HI1E/QUuuwlOjkKJ6+mFjXNDUAfR6Gkp5gIBTMw99BtoUs1Dk7EkwwRQ VW/ow+8v4icNmOIWst6fgjAVs0WqKdnemVz4GBS3htcpyrLyXSpcCokC38ZzDcf/ eJwei2Gwg5j9Pvm+T/mAWl0k4vc5sYzWr5dQhwAqudZ3i/QgTE1r5D7yEBVvgAzf dasCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRO0OjqfbKeqs+6o/LugKSum19XzjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyOTMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjkzL1R0 RG82bjJ5bnFyUHVxUHk3b0NrcnB0ZlY4NC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkANzAMA0GCSqGSIb3 DQEBCwUAA4IBAQAmlpvIOi7M5Odm79BXCBiMfGvb0sFAIoscV3BRcMMcHmSlnVcU KsntsqVAiqURAbUtLVZycrpg4keH7vgXfWJUAIfDv191dX+qnnw2MvqfMFieEPy6 1U4A7ClPLhO4GVczGUg8959ZmMk4Re2canRqfiJlLFy9uiyXkJNxwrrMluEPaUcq WAHY4RYbu9z1G+hc5WlSZm3VvlJVkZHb/8/0+/eWQxSHmZ0iV+ZSRIzHnAIHXwHA +Xc49D80C+/naQndt47qlLJonqugB5dNnHtPi8c2Q2t4eNYWGRzf6uzuqOZvw7La 7MF8SAFl33EQiUXIbpUy3CuEMz9upoBQxust -----END CERTIFICATE-----Generated at Fri May 17 13:12:25 2024 by rpki-client on console-ams.rpki-client.org