$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/c_ecDnoVC5QkVnFc9SCcgvKWGpY.cer File: c_ecDnoVC5QkVnFc9SCcgvKWGpY.cer (raw, json) Hash identifier: LSizNLoKWVS+gbXmUFYOCFSUbb0vZvoRXY1JjkMRpCo= Subject key identifier: 73:F7:9C:0E:7A:15:0B:94:24:56:71:5C:F5:20:9C:82:F2:96:1A:96 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 307B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/c_ecDnoVC5QkVnFc9SCcgvKWGpY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:38:09 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 2401:c800::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 12:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12411 (0x307b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:38:09 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=73F79C0E7A150B942456715CF5209C82F2961A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7e:fa:71:77:66:52:f7:8c:33:16:9d:bd:46: 64:67:da:38:20:18:13:09:95:c3:3f:7d:be:a4:72: 51:77:cd:b2:71:38:51:4d:e4:ec:88:66:4b:1c:99: a9:4b:b2:ba:b1:9d:52:91:bd:9c:c1:e3:bd:f7:c8: 49:3b:a6:0c:97:c9:63:0c:25:7f:12:20:04:d4:b5: a9:74:da:d2:79:5d:33:2f:b1:02:0b:66:df:f9:43: 18:04:0a:23:b3:8a:34:3d:75:8c:3b:a8:0e:d3:67: 39:98:63:d5:03:c2:95:05:96:f8:61:97:6c:f1:f0: 35:8a:20:5a:39:47:6f:c6:13:3f:a4:dc:f2:57:c8: 55:f6:15:a0:5e:21:a6:45:da:fa:41:8f:a4:fa:fd: 1a:03:a8:14:d7:4c:3e:dd:31:56:2b:64:9a:29:75: a8:4b:61:71:35:cc:0c:b2:e4:70:38:85:94:aa:78: fe:7a:6c:2d:ba:52:99:8c:e7:64:ba:83:0c:52:50: 8b:43:b8:c3:48:ea:44:68:69:3e:9b:14:0a:c9:dc: 5a:7d:35:b0:4a:4e:09:75:2b:5a:3e:36:09:f9:9f: 53:4f:58:39:91:49:dc:f8:78:b7:6a:7f:b4:42:4e: ca:85:97:2a:63:e7:78:e3:f9:65:fb:86:98:5c:71: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F7:9C:0E:7A:15:0B:94:24:56:71:5C:F5:20:9C:82:F2:96:1A:96 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/c_ecDnoVC5QkVnFc9SCcgvKWGpY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:c800::/32 Signature Algorithm: sha256WithRSAEncryption 4e:83:1b:d7:c3:34:c4:0d:d8:bf:1e:1d:69:67:ca:37:a5:c7: e9:5a:4d:18:21:8c:e6:7a:a6:62:4b:b2:b8:64:ad:51:d3:93: 1d:a5:e0:f0:ef:c5:97:b9:42:9c:5a:91:dc:cb:1b:2d:c3:96: 6d:f3:86:2f:b0:77:21:28:2f:9b:35:39:aa:d5:77:e3:9e:8b: d2:11:a1:62:2c:6d:2e:46:26:08:70:05:51:90:fe:85:28:5f: 8b:34:a6:3a:e5:85:54:76:21:c2:8e:d8:b7:d1:68:f8:4b:4b: 87:5a:61:06:5f:a9:9b:49:96:d1:ad:d5:cf:6f:e6:80:ef:0b: 84:39:52:1a:8e:23:74:5e:e4:a9:e4:fc:c7:d7:36:61:8d:bc: 6b:d4:93:60:21:46:45:4d:8f:0c:32:a0:a0:85:66:ea:c7:57: 0f:45:e3:0c:c4:c1:a3:ee:46:ad:e7:80:02:78:97:3d:ae:12: 2e:69:df:41:14:0f:d1:ba:c5:f2:d2:44:be:bd:46:8d:35:39: 1c:43:f6:49:ac:65:73:1e:db:08:6c:e9:78:7a:a6:9b:9a:57: 5e:84:a6:0d:00:60:2b:34:7c:e5:7c:c7:6a:95:ed:09:5c:d4: e5:a2:d0:5f:91:2f:14:54:89:23:23:aa:c0:77:73:00:6e:c9: 6e:cf:f6:c4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICMHswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzgwOVoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoNzNGNzlDMEU3QTE1MEI5NDI0NTY3MTVDRjUyMDlDODJGMjk2MUE5 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOp++nF3ZlL3jDMWnb1G ZGfaOCAYEwmVwz99vqRyUXfNsnE4UU3k7IhmSxyZqUuyurGdUpG9nMHjvffISTum DJfJYwwlfxIgBNS1qXTa0nldMy+xAgtm3/lDGAQKI7OKND11jDuoDtNnOZhj1QPC lQWW+GGXbPHwNYogWjlHb8YTP6Tc8lfIVfYVoF4hpkXa+kGPpPr9GgOoFNdMPt0x Vitkmil1qEthcTXMDLLkcDiFlKp4/npsLbpSmYznZLqDDFJQi0O4w0jqRGhpPpsU CsncWn01sEpOCXUrWj42CfmfU09YOZFJ3Ph4t2p/tEJOyoWXKmPneOP5ZfuGmFxx DqECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRz95wOehULlCRWcVz1IJyC8pYaljAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyOTUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjk1L2Nf ZWNEbm9WQzVRa1ZuRmM5U0NjZ3ZLV0dwWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAcgAMA0GCSqGSIb3 DQEBCwUAA4IBAQBOgxvXwzTEDdi/Hh1pZ8o3pcfpWk0YIYzmeqZiS7K4ZK1R05Md peDw78WXuUKcWpHcyxstw5Zt84YvsHchKC+bNTmq1XfjnovSEaFiLG0uRiYIcAVR kP6FKF+LNKY65YVUdiHCjti30Wj4S0uHWmEGX6mbSZbRrdXPb+aA7wuEOVIajiN0 XuSp5PzH1zZhjbxr1JNgIUZFTY8MMqCghWbqx1cPReMMxMGj7kat54ACeJc9rhIu ad9BFA/RusXy0kS+vUaNNTkcQ/ZJrGVzHtsIbOl4eqabmldehKYNAGArNHzlfMdq le0JXNTlotBfkS8UVIkjI6rAd3MAbsluz/bE -----END CERTIFICATE-----Generated at Fri May 17 13:12:25 2024 by rpki-client on console-ams.rpki-client.org