$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer File: XssWWq18PBQ8wvhOR3XlnZ19lPk.cer (raw, json) Hash identifier: zieFB1S4HjjQgsinwHJtfYrPdXT1bXbRtInoYkhsslk= Subject key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3DF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:30:49 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 103.96.112.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15864 (0x3df8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:30:49 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:91:1d:1e:b5:54:45:e3:97:c4:58:a0:3a: 6d:c6:f7:7a:21:29:bf:f2:38:25:31:7d:a4:f5:bf: c0:14:e2:31:96:ba:8c:b5:2c:8e:a0:29:b7:3e:a3: ba:69:86:cf:05:2a:18:b5:51:0b:1c:ea:77:35:86: 6d:ff:ac:71:76:fc:90:ff:03:48:ae:a2:b0:9c:58: 08:e3:ff:f9:9c:84:31:e8:b2:c1:6f:13:38:8b:fe: 77:a7:8d:ab:f2:06:f0:27:36:86:d8:bd:df:27:1d: e8:3b:2e:25:ae:20:10:e2:4b:fe:1a:3b:ce:ba:f4: ea:3b:94:f2:a3:f1:40:ff:b4:8e:c3:17:05:03:fd: 45:33:30:86:00:f6:8d:19:d3:4c:82:7f:83:1e:52: ef:ef:63:38:85:fb:ec:76:a3:dd:9c:4b:ad:c5:85: da:e6:f5:7c:fc:31:8b:a0:59:44:15:d9:8c:c9:bd: 30:16:f7:c6:59:06:57:a4:7b:cb:69:35:13:a2:71: cd:90:9a:4c:5b:a2:ef:03:71:d4:e9:d5:c9:ae:f3: d0:df:30:79:69:95:e3:c5:d0:96:13:79:dd:56:a6: f2:ab:97:56:a4:35:e9:48:92:69:83:3d:9e:3d:c1: 79:83:13:2f:d0:94:1d:9a:29:71:80:44:45:72:07: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.112.0/22 Signature Algorithm: sha256WithRSAEncryption 64:86:da:00:4f:6f:b1:f2:93:51:a4:3a:ef:17:26:be:32:78: 54:fa:21:bc:c8:6d:82:45:7c:49:06:06:67:8f:6a:2d:fe:47: 17:15:33:52:aa:77:df:f6:32:99:14:9a:97:6f:10:5d:0f:ba: 4f:75:65:e0:b7:ee:51:3f:7e:98:ce:ce:58:60:29:02:59:76: 9b:6a:23:1d:b9:89:6a:08:94:9c:fe:99:62:37:7d:01:66:2f: c5:a8:7f:8b:3c:fd:52:76:b3:65:42:ff:0d:bb:54:f1:73:34: 08:6c:89:fc:29:8f:05:a6:7d:18:23:52:27:f6:9d:24:02:05: eb:26:45:88:13:c0:19:7c:28:16:ae:6f:b9:a7:71:27:3e:f1: ae:4b:32:1a:92:38:5a:9e:a4:22:c2:5d:58:b5:d3:5a:b1:ea: ce:f6:87:30:37:f2:f5:ca:15:51:17:9b:ea:77:77:bc:91:d9: 2f:f6:30:50:de:3a:23:63:d2:26:4b:26:1c:0f:72:a5:ee:42: 51:5b:a2:44:69:a8:ad:07:a9:a1:1e:d6:c5:d7:9d:22:c6:fb: 56:b0:ff:c0:b1:4e:9e:a7:d8:09:71:8a:3d:ee:88:f5:80:df: c1:f1:c9:6f:93:5b:8a:c9:ee:89:59:e0:20:1c:bc:6b:41:19: 50:15:6c:70 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICPfgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzA0OVoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoNUVDQjE2NUFBRDdDM0MxNDNDQzJGODRFNDc3NUU1OUQ5RDdEOTRG OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALmckR0etVRF45fEWKA6 bcb3eiEpv/I4JTF9pPW/wBTiMZa6jLUsjqAptz6jummGzwUqGLVRCxzqdzWGbf+s cXb8kP8DSK6isJxYCOP/+ZyEMeiywW8TOIv+d6eNq/IG8Cc2hti93ycd6DsuJa4g EOJL/ho7zrr06juU8qPxQP+0jsMXBQP9RTMwhgD2jRnTTIJ/gx5S7+9jOIX77Haj 3ZxLrcWF2ub1fPwxi6BZRBXZjMm9MBb3xlkGV6R7y2k1E6JxzZCaTFui7wNx1OnV ya7z0N8weWmV48XQlhN53Vam8quXVqQ16UiSaYM9nj3BeYMTL9CUHZopcYBERXIH AgcCAwEAAaOCAoswggKHMB0GA1UdDgQWBBReyxZarXw8FDzC+E5HdeWdnX2U+TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwNDAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDQwL1hz c1dXcTE4UEJROHd2aE9SM1hsbloxOWxQay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnYHAwDQYJKoZIhvcN AQELBQADggEBAGSG2gBPb7Hyk1GkOu8XJr4yeFT6IbzIbYJFfEkGBmePai3+RxcV M1Kqd9/2MpkUmpdvEF0Puk91ZeC37lE/fpjOzlhgKQJZdptqIx25iWoIlJz+mWI3 fQFmL8Wof4s8/VJ2s2VC/w27VPFzNAhsifwpjwWmfRgjUif2nSQCBesmRYgTwBl8 KBaub7mncSc+8a5LMhqSOFqepCLCXVi101qx6s72hzA38vXKFVEXm+p3d7yR2S/2 MFDeOiNj0iZLJhwPcqXuQlFbokRpqK0HqaEe1sXXnSLG+1aw/8CxTp6n2Alxij3u iPWA38HxyW+TW4rJ7olZ4CAcvGtBGVAVbHA= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org