$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer File: VfNagqI2vO2BkIjU2QiH4Lllx88.cer (raw, json) Hash identifier: W+6KwYAaC6lZisLTR1Qsvpm5VI6Ban2ZwXQ80jJUlQA= Subject key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:37:34 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 180.235.140.0/22 IP: 202.70.176.0/20 IP: 210.255.240.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16193 (0x3f41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:37:34 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=55F35A82A236BCED819088D4D90887E0B965C7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:38:6d:64:24:44:de:7c:c1:82:21:45:3b: 3d:bb:b7:35:48:54:65:a9:37:0e:70:62:32:8e:e6: 3e:f7:4b:18:9f:20:11:9f:0c:f3:93:5d:d1:a6:01: 05:ae:8b:d3:0c:cc:49:f3:5e:96:3e:93:f1:9e:0c: a2:1d:ce:5f:32:f3:57:fa:78:85:10:40:65:8d:8e: bb:f9:ba:92:f2:3c:a9:5e:7d:32:32:da:26:fe:2e: 04:f9:48:d6:31:a1:8e:f6:fb:52:92:95:14:34:62: ac:dc:55:eb:63:aa:0f:0f:5e:8e:c1:14:c1:33:f4: 07:b5:19:2d:36:09:46:10:52:14:5b:5a:e3:ac:01: 76:6f:ca:27:21:c2:8e:84:4c:2e:e1:e1:14:b1:ca: c5:5a:7f:f0:6e:da:5f:52:71:45:ee:6d:ab:e2:60: 5b:cf:ff:a3:b1:96:a5:0b:85:cf:da:ae:25:36:ab: 64:8e:b9:64:f4:4c:00:f9:12:e1:90:0a:5c:ab:a2: 90:e1:21:ea:b0:8d:19:01:74:bf:7d:84:67:98:7a: 1e:82:b3:6d:a5:29:da:8b:da:49:a0:c5:33:bb:09: af:4d:6e:fb:58:98:e5:23:6b:f8:23:c6:c1:83:92: cb:e2:5d:20:8f:df:21:e1:f7:12:f7:75:62:7d:11: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.235.140.0/22 202.70.176.0/20 210.255.240.0/20 Signature Algorithm: sha256WithRSAEncryption 4b:bc:c5:6f:ca:0f:de:63:6b:03:a0:c1:68:b9:ae:97:7f:63: d2:d1:97:21:d5:92:04:0e:3d:3c:19:0c:72:aa:8e:78:f6:03: d1:9f:ab:a4:17:9a:b6:ce:ac:ac:f9:b5:94:ad:47:e6:f3:a8: 60:6f:15:0e:4b:c9:5b:76:6c:34:6e:be:89:d7:0b:ec:30:85: c9:23:37:f3:ce:4b:74:b4:61:2b:f7:08:44:59:08:58:65:a1: b1:20:79:bd:62:79:45:48:d8:44:c1:8a:66:bd:df:58:db:2e: ab:4e:71:38:7b:40:4f:e1:96:f2:d9:62:c2:7d:85:7d:53:2c: e1:2a:c1:e4:98:b4:d4:be:77:78:eb:fd:e9:27:18:62:95:1c: e6:ca:49:8b:09:20:2d:90:b7:e7:e0:e8:b2:6c:63:54:be:df: 34:35:ed:4e:0c:dc:0e:b6:16:d4:1c:a9:aa:d4:1c:21:be:6c: 33:d2:54:d7:54:4a:62:a3:ce:e6:8e:e2:20:c8:71:bc:7d:b0: eb:a4:fa:08:1c:40:69:99:ff:31:a7:5b:bf:5f:3d:e4:07:04: 97:03:de:ec:a7:43:06:ff:7c:47:c9:18:aa:e4:43:f7:47:02: e2:71:cf:55:23:c7:b5:63:0c:5e:d3:49:30:19:fb:4e:ec:62: 18:53:83:2b -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICP0EwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzczNFoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoNTVGMzVBODJBMjM2QkNFRDgxOTA4OEQ0RDkwODg3RTBCOTY1QzdD RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALItOG1kJETefMGCIUU7 Pbu3NUhUZak3DnBiMo7mPvdLGJ8gEZ8M85Nd0aYBBa6L0wzMSfNelj6T8Z4Moh3O XzLzV/p4hRBAZY2Ou/m6kvI8qV59MjLaJv4uBPlI1jGhjvb7UpKVFDRirNxV62Oq Dw9ejsEUwTP0B7UZLTYJRhBSFFta46wBdm/KJyHCjoRMLuHhFLHKxVp/8G7aX1Jx Re5tq+JgW8//o7GWpQuFz9quJTarZI65ZPRMAPkS4ZAKXKuikOEh6rCNGQF0v32E Z5h6HoKzbaUp2ovaSaDFM7sJr01u+1iY5SNr+CPGwYOSy+JdII/fIeH3Evd1Yn0R RFECAwEAAaOCApIwggKOMB0GA1UdDgQWBBRV81qCoja87YGQiNTZCIfguWXHzzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NDgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg0OC9WZk5hZ3FJ MnZPMkJrSWpVMlFpSDRMbGx4ODgubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCtOuMAwQEykawAwQE0v/wMA0G CSqGSIb3DQEBCwUAA4IBAQBLvMVvyg/eY2sDoMFoua6Xf2PS0Zch1ZIEDj08GQxy qo549gPRn6ukF5q2zqys+bWUrUfm86hgbxUOS8lbdmw0br6J1wvsMIXJIzfzzkt0 tGEr9whEWQhYZaGxIHm9YnlFSNhEwYpmvd9Y2y6rTnE4e0BP4Zby2WLCfYV9Uyzh KsHkmLTUvnd46/3pJxhilRzmykmLCSAtkLfn4OiybGNUvt80Ne1ODNwOthbUHKmq 1Bwhvmwz0lTXVEpio87mjuIgyHG8fbDrpPoIHEBpmf8xp1u/Xz3kBwSXA97sp0MG /3xHyRiq5EP3RwLicc9VI8e1Ywxe00kwGftO7GIYU4Mr -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org