$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer File: XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer (raw, json) Hash identifier: axvbOWgDHkIjalA7ZYT+VNXBK0jia+4byRb0b5vUnj8= Subject key identifier: 5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:36:59 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 2400:fba0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16162 (0x3f22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:36:59 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:64:99:f7:51:d3:ad:ff:29:eb:20:14:96: 45:e9:49:e1:9e:c1:d5:ab:af:b2:0c:e1:ea:0b:81: d1:b3:bf:c5:dd:ed:b6:59:04:9a:86:f9:79:29:57: 9a:49:75:b6:3f:83:46:5a:e2:a1:a5:9e:5a:b8:03: d1:9d:93:74:df:b6:fa:fd:2e:d5:11:ed:1a:e4:66: d7:a9:d2:50:82:3f:f7:49:02:f5:d7:a6:f1:10:e5: c1:20:ba:48:82:ea:0f:f3:f4:8f:89:ee:03:a6:d4: 77:aa:83:2c:76:b1:d3:21:41:6e:4f:ce:f7:a2:dd: 75:53:cb:51:51:9a:4e:f7:5a:08:ab:22:2b:81:41: f8:fb:7e:3d:06:a7:c3:32:81:6b:5b:02:1d:19:7b: c6:94:89:e6:a1:07:95:d7:4a:b1:36:27:9d:10:90: b9:7b:ec:70:37:e1:64:c4:84:41:f9:18:4a:5b:07: b8:cf:d4:b8:46:89:2e:22:17:3a:db:e7:85:66:53: 6f:9b:da:3c:60:3e:1d:7f:c8:61:1a:a1:0d:74:0a: ed:75:82:54:d1:f9:14:60:71:17:65:44:d3:b5:9b: c1:ef:fd:b4:a9:38:8a:ca:ff:73:5b:b1:7b:98:c2: dd:68:26:27:36:d5:59:0f:5a:1d:ed:99:84:48:fb: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:fba0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:31:94:01:a1:8f:bb:ea:17:93:90:9c:45:ed:4a:9e:b2:ef: 2c:28:d8:e1:40:d5:ce:5b:90:fa:2a:49:11:cc:45:02:67:62: 71:d4:c7:d9:5a:e3:ec:36:3d:40:23:40:e4:96:55:33:de:84: 64:a3:be:74:57:7a:09:dd:ed:e5:1a:7b:06:e4:37:77:1e:8d: 89:5b:05:66:ab:e8:b8:44:d9:4e:24:27:ac:d7:75:8a:7b:3c: 3a:8e:cf:7e:c3:9e:ee:aa:22:16:22:b4:ed:16:9c:7e:79:2e: 76:17:27:da:7c:90:cc:2b:41:0d:20:5f:37:ee:d5:8b:1d:9a: dd:a6:c3:c4:19:d3:7f:94:f8:db:81:d7:e5:48:4e:9c:06:8e: 39:34:90:ff:01:34:bb:28:36:36:4c:e5:86:f9:9b:51:ab:e0: 61:9a:87:ff:b3:60:ed:4a:c4:69:b9:83:51:b6:7f:b6:78:34: e5:26:b9:29:75:7a:04:ae:a5:58:e8:df:77:4a:38:c0:f3:aa: 09:59:67:94:6f:08:8f:d4:44:69:d1:aa:f4:63:de:e6:fb:ca: ff:97:2e:c0:18:e1:0a:ff:b0:5c:9e:9b:73:65:39:9c:bf:09: 0e:9b:08:0a:fb:5b:b5:f5:5a:79:64:db:8c:9b:c3:51:90:ad: cb:f8:62:81 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICPyIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzY1OVoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoNUM5NEQ0NjAxMjZEM0UyMjRCMURCRDY2NDZGQUU5MjQzQTYwRUM0 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALrfZJn3UdOt/ynrIBSW RelJ4Z7B1auvsgzh6guB0bO/xd3ttlkEmob5eSlXmkl1tj+DRlrioaWeWrgD0Z2T dN+2+v0u1RHtGuRm16nSUII/90kC9dem8RDlwSC6SILqD/P0j4nuA6bUd6qDLHax 0yFBbk/O96LddVPLUVGaTvdaCKsiK4FB+Pt+PQanwzKBa1sCHRl7xpSJ5qEHlddK sTYnnRCQuXvscDfhZMSEQfkYSlsHuM/UuEaJLiIXOtvnhWZTb5vaPGA+HX/IYRqh DXQK7XWCVNH5FGBxF2VE07Wbwe/9tKk4isr/c1uxe5jC3WgmJzbVWQ9aHe2ZhEj7 42kCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRclNRgEm0+IksdvWZG+ukkOmDsQTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0MTkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDE5L1hK VFVZQkp0UGlKTEhiMW1SdnJwSkRwZzdFRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAPugMA0GCSqGSIb3 DQEBCwUAA4IBAQB6MZQBoY+76heTkJxF7Uqesu8sKNjhQNXOW5D6KkkRzEUCZ2Jx 1MfZWuPsNj1AI0DkllUz3oRko750V3oJ3e3lGnsG5Dd3Ho2JWwVmq+i4RNlOJCes 13WKezw6js9+w57uqiIWIrTtFpx+eS52FyfafJDMK0ENIF837tWLHZrdpsPEGdN/ lPjbgdflSE6cBo45NJD/ATS7KDY2TOWG+ZtRq+Bhmof/s2DtSsRpuYNRtn+2eDTl JrkpdXoErqVY6N93SjjA86oJWWeUbwiP1ERp0ar0Y97m+8r/ly7AGOEK/7Bcnptz ZTmcvwkOmwgK+1u19Vp5ZNuMm8NRkK3L+GKB -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org