$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/eaJ36GACoPb1GDa6CxAZpxqaSaE.cer File: eaJ36GACoPb1GDa6CxAZpxqaSaE.cer (raw, json) Hash identifier: 9KGuNLc3Ut1vwtmhiI6HWWyBYoxg5TZqhJmCBbDw8+A= Subject key identifier: 79:A2:77:E8:60:02:A0:F6:F5:18:36:BA:0B:10:19:A7:1A:9A:49:A1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3045 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1089/eaJ36GACoPb1GDa6CxAZpxqaSaE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1089/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:37:09 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 163.136.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12357 (0x3045) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:37:09 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=79A277E86002A0F6F51836BA0B1019A71A9A49A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:c2:9e:30:6f:a5:1a:c1:6e:7c:e6:15:95: 60:d5:b3:21:3d:e8:7a:e8:51:40:cf:a2:db:f7:2a: 32:4b:29:2b:9f:eb:4f:fb:f7:ab:bb:11:0e:33:7a: 49:2d:65:8b:cb:b1:99:fd:7d:3c:b8:b4:16:fa:3e: ae:f6:be:22:bc:b6:41:92:51:51:b2:e2:70:83:59: c8:5b:30:70:77:0c:7b:f9:a3:d8:8d:fb:86:d6:5c: 5c:31:43:e8:77:f9:ae:dc:cb:ed:e9:2e:b7:f6:9c: f5:57:67:ab:ee:82:7a:b1:1d:e4:18:96:77:1f:b1: b5:ef:7f:78:9a:4f:33:38:5a:58:57:99:04:c9:35: f3:0a:fa:34:b7:3f:17:26:60:0c:1f:4a:f6:15:4f: b7:f6:7a:d5:40:12:a9:85:57:2b:e6:1d:06:04:e9: 9b:60:14:97:0d:3e:2c:95:8b:c6:c9:bc:f5:e5:22: 12:11:80:04:e5:55:75:96:c5:99:ce:26:0c:d5:82: c7:4e:8b:ba:85:02:35:ab:20:fa:19:5b:5a:1a:96: e7:17:a3:6c:7d:37:cd:d4:95:41:21:70:e5:48:3e: 67:15:0b:b8:ca:d6:16:bd:30:82:f8:73:8b:01:ab: f1:fb:c8:5a:f8:f6:68:4b:e1:d7:08:60:39:cc:63: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A2:77:E8:60:02:A0:F6:F5:18:36:BA:0B:10:19:A7:1A:9A:49:A1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1089/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1089/eaJ36GACoPb1GDa6CxAZpxqaSaE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.136.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7c:e9:6b:f7:28:ff:5f:d3:f2:1c:cb:8a:e6:85:a0:9f:45:de: 50:17:fb:6a:11:35:fd:3c:f3:7c:9d:b5:49:20:42:a6:b9:ab: 8a:eb:36:c0:ee:6a:2f:6c:11:3e:eb:ef:eb:37:af:3f:30:dd: 3c:d2:e4:3d:43:28:ac:ee:1c:65:fe:ff:32:37:e8:8c:c9:c8: c6:c7:dd:4f:06:59:43:ba:52:3f:ea:de:7b:67:57:37:a9:1e: d0:09:b8:a1:ea:8d:e8:de:1f:11:14:12:34:b5:dd:9e:17:49: 6b:ad:e5:a4:4e:a8:42:40:b1:76:19:e4:43:15:a3:84:59:e8: 1b:50:aa:f9:fa:02:6d:86:65:00:54:37:ee:cd:42:07:2e:fc: c8:8b:0d:15:69:49:c5:f9:81:85:94:f6:e3:54:22:89:10:4d: 40:e7:0e:82:98:11:41:b2:97:e0:3c:c1:31:51:71:aa:f1:79: 3a:a5:d9:e3:39:1c:e8:ff:9d:f5:16:f5:74:ef:1a:a4:89:68: 24:c8:99:45:1f:67:70:c5:2b:d0:e7:89:83:17:fd:0e:4b:bd: 6a:d3:2d:51:28:e3:65:6f:65:4e:eb:fc:ba:7f:be:8e:b5:7c: 1b:51:8c:5e:f1:4a:d5:b1:d6:18:a6:73:ea:f1:cb:0a:4d:97: 42:85:36:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICMEUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzcwOVoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoNzlBMjc3RTg2MDAyQTBGNkY1MTgzNkJBMEIxMDE5QTcxQTlBNDlB MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALctwp4wb6UawW585hWV YNWzIT3oeuhRQM+i2/cqMkspK5/rT/v3q7sRDjN6SS1li8uxmf19PLi0Fvo+rva+ Iry2QZJRUbLicINZyFswcHcMe/mj2I37htZcXDFD6Hf5rtzL7ekut/ac9Vdnq+6C erEd5BiWdx+xte9/eJpPMzhaWFeZBMk18wr6NLc/FyZgDB9K9hVPt/Z61UASqYVX K+YdBgTpm2AUlw0+LJWLxsm89eUiEhGABOVVdZbFmc4mDNWCx06LuoUCNasg+hlb WhqW5xejbH03zdSVQSFw5Ug+ZxULuMrWFr0wgvhziwGr8fvIWvj2aEvh1whgOcxj +10CAwEAAaOCAogwggKEMB0GA1UdDgQWBBR5onfoYAKg9vUYNroLEBmnGppJoTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTA4OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTA4OS9lYUoz NkdBQ29QYjFHRGE2Q3hBWnB4cWFTYUUubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAo4gwDQYJKoZIhvcNAQEL BQADggEBAHzpa/co/1/T8hzLiuaFoJ9F3lAX+2oRNf0883ydtUkgQqa5q4rrNsDu ai9sET7r7+s3rz8w3TzS5D1DKKzuHGX+/zI36IzJyMbH3U8GWUO6Uj/q3ntnVzep HtAJuKHqjejeHxEUEjS13Z4XSWut5aROqEJAsXYZ5EMVo4RZ6BtQqvn6Am2GZQBU N+7NQgcu/MiLDRVpScX5gYWU9uNUIokQTUDnDoKYEUGyl+A8wTFRcarxeTql2eM5 HOj/nfUW9XTvGqSJaCTImUUfZ3DFK9DniYMX/Q5LvWrTLVEo42VvZU7r/Lp/vo61 fBtRjF7xStWx1himc+rxywpNl0KFNsY= -----END CERTIFICATE-----Generated at Fri May 17 12:06:30 2024 by rpki-client on console-fra.rpki-client.org