$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer File: ffVKoQDp9LZlNekg64ni4UvKzbA.cer (raw, json) Hash identifier: t6O0DHG1vF6Po2Ba9K8Z5eJI3q0F1ctu8L2lKzpYP1c= Subject key identifier: 7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0A60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:32:31 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 147.92.128.0/17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2656 (0xa60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: May 15 01:32:31 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:64:a6:c8:a4:df:99:d0:1d:87:cb:a5:08:d5: 93:92:59:92:ab:71:24:e6:30:55:ce:ba:2b:0b:2a: e0:9c:18:75:ab:d0:48:4f:06:89:58:29:58:e2:86: ab:d8:0a:bc:2a:5e:d9:79:0a:cd:85:32:6b:ae:4e: de:78:36:d0:5f:1c:8a:d7:99:85:19:53:e6:b5:15: 0b:c3:50:3a:0e:3b:6f:00:c3:1d:e4:9d:52:1f:e9: a9:9f:94:f1:ee:09:bd:d6:a1:c9:ba:5a:64:fc:59: 79:2e:4f:73:e8:df:42:58:14:7d:26:fd:78:19:a0: f1:e7:03:76:01:4c:32:ad:58:1c:4f:e0:56:8f:57: 73:e0:68:6c:1e:d3:f0:48:6a:de:4b:da:d2:6b:20: 0e:f9:6a:99:c2:fc:ba:f7:3f:62:7b:81:32:2c:ab: 7c:b0:d4:68:2e:72:9e:e3:fe:7c:13:e5:ca:16:3d: 96:a3:62:22:42:52:7b:f5:67:da:46:f1:69:2b:4a: af:92:e2:00:a6:ad:fa:38:c6:c6:b0:4f:9f:17:de: db:c9:5e:29:23:64:0e:b3:bb:73:a5:9d:74:72:84: 97:36:de:1d:a5:ec:68:b3:02:f6:2c:20:59:f5:0d: fc:ea:7c:da:9f:01:ab:09:76:cb:2a:81:3d:5f:65: 60:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.92.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1f:cc:78:35:70:9b:65:8e:9d:ba:1e:6f:d5:28:b0:b9:72:e1: 18:f7:4a:ea:a9:71:86:47:fe:fe:14:c1:fd:78:66:01:48:6a: ef:6b:cd:6b:a3:71:33:17:4b:89:b7:17:cd:04:42:f3:e6:0c: 81:ec:f3:d4:02:21:c0:8c:a5:54:c8:a0:3a:b1:8a:2f:e1:c8: 40:4f:9c:88:6e:f2:93:30:54:c3:9a:6c:cd:70:a7:6c:b2:66: 59:e3:ec:05:35:66:6a:09:18:f8:d6:16:21:69:ab:50:b9:da: c2:43:e9:5d:5a:eb:bd:8d:2e:70:07:7c:16:fa:09:45:f8:37: 91:9c:32:a1:e0:ce:9a:44:a0:1b:03:ba:9a:c5:06:dd:15:ab: ba:3e:8d:9a:46:10:7e:d6:49:63:70:f0:f1:fd:d2:22:19:3e: 17:3d:66:5d:88:6f:1e:c9:65:02:03:6a:b6:1d:a0:d1:90:91: ac:52:22:3d:89:29:fa:fd:14:c5:79:7f:f4:c2:16:08:8e:c9: d7:09:3c:2c:c6:f3:02:ac:9c:71:02:50:8c:e4:f2:a5:c5:9b: 57:19:fd:ed:62:c8:a5:1e:fd:85:42:71:10:25:69:14:28:dd: e2:6b:64:33:15:2b:9f:36:f7:63:a3:6c:73:a1:19:1d:1d:7b: d5:52:54:e3 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICCmAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI0MDUxNTAxMzIzMVoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoN0RGNTRBQTEwMEU5RjRCNjY1MzVFOTIwRUI4OUUyRTE0QkNBQ0RC MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO5kpsik35nQHYfLpQjV k5JZkqtxJOYwVc66Kwsq4JwYdavQSE8GiVgpWOKGq9gKvCpe2XkKzYUya65O3ng2 0F8citeZhRlT5rUVC8NQOg47bwDDHeSdUh/pqZ+U8e4JvdahybpaZPxZeS5Pc+jf QlgUfSb9eBmg8ecDdgFMMq1YHE/gVo9Xc+BobB7T8Ehq3kva0msgDvlqmcL8uvc/ YnuBMiyrfLDUaC5ynuP+fBPlyhY9lqNiIkJSe/Vn2kbxaStKr5LiAKat+jjGxrBP nxfe28leKSNkDrO7c6WddHKElzbeHaXsaLMC9iwgWfUN/Op82p8Bqwl2yyqBPV9l YFkCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBR99UqhAOn0tmU16SDrieLhS8rNsDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC85NTgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzk1OC9mZlZLb1FE cDlMWmxOZWtnNjRuaTRVdkt6YkEubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHk1yAMA0GCSqGSIb3DQEBCwUA A4IBAQAfzHg1cJtljp26Hm/VKLC5cuEY90rqqXGGR/7+FMH9eGYBSGrva81ro3Ez F0uJtxfNBELz5gyB7PPUAiHAjKVUyKA6sYov4chAT5yIbvKTMFTDmmzNcKdssmZZ 4+wFNWZqCRj41hYhaatQudrCQ+ldWuu9jS5wB3wW+glF+DeRnDKh4M6aRKAbA7qa xQbdFau6Po2aRhB+1kljcPDx/dIiGT4XPWZdiG8eyWUCA2q2HaDRkJGsUiI9iSn6 /RTFeX/0whYIjsnXCTwsxvMCrJxxAlCM5PKlxZtXGf3tYsilHv2FQnEQJWkUKN3i a2QzFSufNvdjo2xzoRkdHXvVUlTj -----END CERTIFICATE-----Generated at Fri May 17 08:12:56 2024 by rpki-client on console-fra.rpki-client.org