$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer File: g3GTlezs0ieqs-JSnnoQSDwPmG8.cer (raw, json) Hash identifier: uFoyG9ZmWL8Dca+6K3HBqL+8OlbilGHW25sHIPK0AMw= Subject key identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0D75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:38:48 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 160.187.26.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3445 (0xd75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Nov 15 01:38:48 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=83719395ECECD227AAB3E2529E7A10483C0F986F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:ad:d6:81:3f:dc:c9:9b:35:7b:d2:47:9e: 55:50:de:6a:31:d0:e6:4f:7a:da:c7:f4:a9:ed:ce: f6:f3:ba:cb:ee:f7:01:3d:99:58:71:1b:20:cd:d5: 3e:41:60:3b:0f:97:c6:88:33:a7:c6:2e:2a:4a:56: c4:48:80:91:f8:c1:c2:5c:90:54:e1:d4:b8:78:f5: 27:06:68:c7:4d:59:c2:d3:64:47:b8:c1:b3:4e:52: a4:f0:70:ef:dc:3c:a0:7d:f7:aa:46:d1:7f:7b:d5: 02:d2:7e:8e:a9:80:86:8b:10:87:e6:cc:63:17:fe: 41:a0:2b:8a:53:38:ac:46:b8:03:25:37:7f:1a:98: c9:1d:7b:35:7c:bc:b5:1f:9c:13:27:c1:d4:c8:7d: cb:b6:9a:8d:d2:e9:f8:04:a1:de:96:ea:5b:ce:06: 14:2d:fa:e1:fd:cf:50:0c:d7:3a:24:4c:14:ea:58: 2c:ed:10:34:dd:ca:b1:f2:ca:a0:cd:bd:c4:11:e2: be:78:f1:86:a0:13:4a:47:bb:ee:01:14:45:0e:ad: 63:e8:c6:08:49:f2:f1:c3:7d:29:61:ea:d4:d7:5c: c3:c9:08:4d:45:7e:09:35:19:d3:52:9a:e6:f1:5c: 32:b6:cc:57:72:53:87:33:35:95:12:dc:16:80:9d: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.26.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:60:57:5b:ef:22:a1:d7:1a:3b:22:d6:85:d1:27:5b:c8:df: 67:af:19:1e:c9:c4:df:f2:e2:3e:2f:dd:b8:d7:03:57:f8:1a: aa:3a:d2:55:73:fc:ea:e1:01:99:81:4e:89:f2:ca:0c:37:fc: 83:13:a9:8d:6d:04:fb:f8:73:b4:eb:aa:32:9d:53:65:8d:67: 19:19:7c:10:a1:49:6e:f7:cc:dd:0f:f3:7e:87:94:5c:c3:3b: 92:6a:1e:5d:78:a1:9a:60:28:69:3b:84:c4:78:29:67:c1:ec: 60:71:c6:ee:cf:0b:ab:59:58:1f:dc:fd:54:4b:4e:4c:2e:a4: 25:3d:ee:ab:f4:6a:97:cb:72:24:47:10:7e:05:51:98:08:62: f8:1b:f8:a3:cb:74:4f:a4:7b:eb:ce:ed:5e:2e:fe:c6:4a:06: 53:1c:39:3f:4b:80:23:38:81:7d:1f:8c:16:28:99:39:ac:80: d7:b4:d6:54:03:b1:75:50:78:d9:96:34:6d:bf:06:00:fa:40: 4e:fd:a0:99:80:f9:24:bf:c8:12:27:3c:2e:9f:4a:c6:7b:d9: 87:b7:fd:61:81:90:87:83:65:76:31:dd:56:4b:0a:e8:cf:9c: f6:92:17:79:7f:45:a4:57:13:b3:1d:9b:b5:ec:c2:32:dc:fd: 3f:2b:26:ab -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDXUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI0MTExNTAxMzg0OFoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoODM3MTkzOTVFQ0VDRDIyN0FBQjNFMjUyOUU3QTEwNDgzQzBGOTg2 RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMXsrdaBP9zJmzV70kee VVDeajHQ5k962sf0qe3O9vO6y+73AT2ZWHEbIM3VPkFgOw+Xxogzp8YuKkpWxEiA kfjBwlyQVOHUuHj1JwZox01ZwtNkR7jBs05SpPBw79w8oH33qkbRf3vVAtJ+jqmA hosQh+bMYxf+QaArilM4rEa4AyU3fxqYyR17NXy8tR+cEyfB1Mh9y7aajdLp+ASh 3pbqW84GFC364f3PUAzXOiRMFOpYLO0QNN3KsfLKoM29xBHivnjxhqATSke77gEU RQ6tY+jGCEny8cN9KWHq1Ndcw8kITUV+CTUZ01Ka5vFcMrbMV3JThzM1lRLcFoCd aicCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSDcZOV7OzSJ6qz4lKeehBIPA+YbzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNzAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjcwL2cz R1RsZXpzMGllcXMtSlNubm9RU0R3UG1HOC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGguxowDQYJKoZIhvcN AQELBQADggEBAApgV1vvIqHXGjsi1oXRJ1vI32evGR7JxN/y4j4v3bjXA1f4Gqo6 0lVz/OrhAZmBTonyygw3/IMTqY1tBPv4c7TrqjKdU2WNZxkZfBChSW73zN0P836H lFzDO5JqHl14oZpgKGk7hMR4KWfB7GBxxu7PC6tZWB/c/VRLTkwupCU97qv0apfL ciRHEH4FUZgIYvgb+KPLdE+ke+vO7V4u/sZKBlMcOT9LgCM4gX0fjBYomTmsgNe0 1lQDsXVQeNmWNG2/BgD6QE79oJmA+SS/yBInPC6fSsZ72Ye3/WGBkIeDZXYx3VZL CujPnPaSF3l/RaRXE7Mdm7XswjLc/T8rJqs= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org