$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer File: e0mod1mUgnl1qzfm35YGTJJHg_E.cer (raw, json) Hash identifier: nvuY8xemHM+RQB2T6bCdEj6LuZ0tdTB+kZqcvixTgik= Subject key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:37:36 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 27.109.96.0/21 IP: 103.154.6.0/23 IP: 119.47.96.0/20 IP: 180.200.248.0/22 IP: 202.70.224.0/19 IP: 202.238.16.0/20 IP: 218.231.160.0/19 IP: 219.111.208.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16195 (0x3f43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:37:36 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=7B49A8775994827975AB37E6DF96064C924783F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:7c:4e:bf:12:10:0f:71:96:82:76:71:73: ca:b8:76:af:51:66:56:35:29:a1:ac:78:f7:b0:a1: 1b:e5:87:20:82:d7:2a:5f:2c:d0:ef:55:69:01:a4: 72:93:4f:49:06:37:fe:73:58:62:c4:12:c5:37:7a: 06:84:82:01:a7:7b:84:ba:65:08:0e:f9:d0:59:d1: 4b:6a:2d:c8:22:57:ea:bd:7b:53:bc:0b:8d:32:7f: eb:48:d3:ce:31:9a:54:e8:b6:b7:4f:a2:ae:76:3d: 1b:bd:cd:de:c0:fa:6c:2c:9e:f0:5c:4d:13:6a:20: 7d:b7:8d:3c:d4:b3:1d:0e:d7:a2:1f:05:4e:a8:e4: bc:31:9f:42:4f:2b:6b:4d:14:53:c2:e9:ba:a7:49: 3b:aa:85:44:8e:a2:07:87:38:43:71:d8:63:26:da: f1:c2:8e:3a:2b:ab:44:b8:da:5e:f0:9f:63:ed:7b: 1a:43:52:12:f1:bb:cd:06:1e:cf:66:4e:30:30:7d: 74:59:76:48:b2:96:cd:68:d1:16:ff:fb:a8:c5:d0: aa:4a:fe:04:01:a9:5d:d5:b7:f8:04:03:93:57:69: 92:bc:a2:6f:a0:8b:71:08:ed:99:f9:17:61:f2:b5: b1:fc:99:ac:b6:f8:24:c6:f8:1c:61:40:73:e5:5b: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.109.96.0/21 103.154.6.0/23 119.47.96.0/20 180.200.248.0/22 202.70.224.0/19 202.238.16.0/20 218.231.160.0/19 219.111.208.0/20 Signature Algorithm: sha256WithRSAEncryption 03:26:bd:0a:ac:c9:70:ac:e6:cd:14:52:74:c0:63:40:13:42: f1:b9:99:b7:00:c1:f1:96:44:90:ed:9c:2e:12:ae:30:2b:0d: 5f:ce:32:e7:01:11:a0:ea:79:f3:49:36:fb:1e:ae:83:89:f1: d9:95:39:5e:c1:76:be:e0:6b:a3:3f:64:76:60:31:04:aa:77: 48:01:e9:b5:dd:ed:5c:05:68:01:9b:be:ba:25:87:9a:65:bf: 15:e4:5a:33:11:65:48:b7:14:1d:54:01:44:f7:e0:2e:60:d7: 41:67:8e:4d:35:fd:ed:aa:60:af:8a:72:dd:8f:20:8d:0b:ab: e0:30:88:e3:ea:77:cd:fc:4c:bb:6f:5d:49:95:bf:a7:98:ac: 42:0b:ab:a3:86:c6:e1:4a:63:ef:35:ad:59:7e:93:1c:18:60: 82:36:0d:01:e1:cf:66:67:6f:61:c1:f9:15:00:4d:e8:c4:1a: 87:e0:53:0e:72:76:34:e3:08:e1:f2:7a:09:56:40:b7:f6:d9: fe:9b:f4:71:7c:1c:eb:cd:45:e2:be:82:7d:7f:f0:08:a6:57: fd:3f:fb:8b:9e:a0:df:f9:48:fe:85:65:dc:1d:f0:52:b7:b8: bd:f0:94:d9:8c:db:ae:d8:c7:42:d2:63:c8:d0:4b:bb:6f:80: 0e:a3:02:ab -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgICP0MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzczNloXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoN0I0OUE4Nzc1OTk0ODI3OTc1QUIzN0U2REY5NjA2NEM5MjQ3ODNG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZCfE6/EhAPcZaCdnFz yrh2r1FmVjUpoax497ChG+WHIILXKl8s0O9VaQGkcpNPSQY3/nNYYsQSxTd6BoSC Aad7hLplCA750FnRS2otyCJX6r17U7wLjTJ/60jTzjGaVOi2t0+irnY9G73N3sD6 bCye8FxNE2ogfbeNPNSzHQ7Xoh8FTqjkvDGfQk8ra00UU8LpuqdJO6qFRI6iB4c4 Q3HYYyba8cKOOiurRLjaXvCfY+17GkNSEvG7zQYez2ZOMDB9dFl2SLKWzWjRFv/7 qMXQqkr+BAGpXdW3+AQDk1dpkryib6CLcQjtmfkXYfK1sfyZrLb4JMb4HGFAc+Vb W4UCAwEAAaOCArAwggKsMB0GA1UdDgQWBBR7Sah3WZSCeXWrN+bflgZMkkeD8TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC83NTEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzc1MS9lMG1vZDFt VWdubDFxemZtMzVZR1RKSkhnX0UubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDG21gAwQBZ5oGAwQEdy9gAwQC tMj4AwQFykbgAwQEyu4QAwQF2uegAwQE22/QMA0GCSqGSIb3DQEBCwUAA4IBAQAD Jr0KrMlwrObNFFJ0wGNAE0LxuZm3AMHxlkSQ7ZwuEq4wKw1fzjLnARGg6nnzSTb7 Hq6DifHZlTlewXa+4GujP2R2YDEEqndIAem13e1cBWgBm766JYeaZb8V5FozEWVI txQdVAFE9+AuYNdBZ45NNf3tqmCvinLdjyCNC6vgMIjj6nfN/Ey7b11Jlb+nmKxC C6ujhsbhSmPvNa1ZfpMcGGCCNg0B4c9mZ29hwfkVAE3oxBqH4FMOcnY04wjh8noJ VkC39tn+m/RxfBzrzUXivoJ9f/AIplf9P/uLnqDf+Uj+hWXcHfBSt7i98JTZjNuu 2MdC0mPI0Eu7b4AOowKr -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org