$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer File: gcATaiDHNuoCKbzbtbWtDP420oY.cer (raw, json) Hash identifier: 2vfWo1NfEvxC8u/IOciYQlCpscP1aLpJDc9NGiCB/n0= Subject key identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:38:16 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 61.195.44.0/22 IP: 103.173.104.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16228 (0x3f64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:38:16 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:62:86:db:87:1a:fa:d4:ce:99:f0:4c:68: 52:64:1a:11:af:da:7c:73:5f:11:5f:3b:db:ca:b8: f0:73:28:3e:b6:13:42:29:6f:7d:3e:1b:4a:45:c5: c6:f7:cf:2c:52:c5:03:66:38:3e:e8:7c:5b:d6:1c: 77:4c:17:02:dd:21:7c:e6:2d:69:60:5c:b4:04:c7: a5:02:26:6e:86:2e:c0:2c:1b:8e:aa:74:9d:b2:2b: 33:f1:9a:f6:f9:7d:c5:6e:01:f6:77:c9:5c:a2:cd: bc:df:75:cd:11:4d:ac:66:c8:df:a1:5d:4e:48:06: ff:19:1a:7f:0b:ef:04:14:4b:af:c6:5e:ce:27:52: 08:92:53:a4:e7:c4:40:6e:49:38:fd:e8:6c:66:d2: 72:c8:27:c7:cc:ca:6b:89:65:4a:d6:ca:3b:3d:7b: 2f:e2:53:65:7a:fa:fb:45:74:7d:11:68:42:88:0f: 3d:6b:f7:a0:73:0d:63:36:25:f5:ab:5b:38:84:c4: a1:1f:47:65:66:29:93:10:7b:da:c4:3c:d8:2c:c7: bb:df:cc:34:a0:ab:72:cf:44:07:fe:dd:53:03:8e: d3:02:d4:5d:9e:8f:85:45:ae:cc:ec:db:9d:1a:75: 28:b5:48:1f:9c:04:19:6e:ee:d0:95:75:2b:69:f5: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.44.0/22 103.173.104.0/23 Signature Algorithm: sha256WithRSAEncryption 59:52:3c:83:98:17:a0:ec:98:dc:86:e7:44:f8:8c:2e:ab:e4: 29:a3:73:5d:01:5d:87:e5:82:f8:e7:e7:a1:9a:40:b9:27:cb: 4b:96:2f:c4:f0:33:12:59:4b:1f:42:67:67:e0:d9:b7:34:3d: e9:9a:81:60:19:6a:47:5c:3c:66:e3:39:43:91:43:d7:db:7b: 81:89:b1:71:92:34:d8:1e:3f:02:cf:fa:0e:6e:91:0f:52:f2: 1c:75:7b:d5:65:90:fe:81:aa:53:14:7a:43:26:f6:e5:91:34: 35:23:72:ae:b3:1a:3c:69:20:7a:89:09:b7:e6:8b:19:d1:64: a9:db:e6:3f:27:92:cc:bd:16:b1:08:1a:3d:ee:96:c3:31:9e: 5c:13:c1:6d:42:78:88:31:91:9a:67:c9:b1:51:f8:c4:a7:12: 05:9f:fd:aa:69:0b:44:19:4e:6a:c3:1a:df:65:5c:f9:27:26: b3:7d:c1:9a:af:af:16:4b:73:a8:10:bc:0a:52:d8:85:90:3e: f9:e4:f4:91:79:c3:4f:fe:c4:7d:58:3f:c8:8a:90:c9:25:45: be:a7:c9:de:b2:d6:a7:0e:07:a5:a8:8d:10:65:3b:2a:61:e8: 1c:82:8d:2c:a0:f4:23:96:b7:73:fc:3b:b5:79:95:33:e3:a3: cd:01:4a:7a -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICP2QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzgxNloXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoODFDMDEzNkEyMEM3MzZFQTAyMjlCQ0RCQjVCNUFEMENGRTM2RDI4 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALL1Yobbhxr61M6Z8Exo UmQaEa/afHNfEV8728q48HMoPrYTQilvfT4bSkXFxvfPLFLFA2Y4Puh8W9Ycd0wX At0hfOYtaWBctATHpQImboYuwCwbjqp0nbIrM/Ga9vl9xW4B9nfJXKLNvN91zRFN rGbI36FdTkgG/xkafwvvBBRLr8ZezidSCJJTpOfEQG5JOP3obGbScsgnx8zKa4ll StbKOz17L+JTZXr6+0V0fRFoQogPPWv3oHMNYzYl9atbOITEoR9HZWYpkxB72sQ8 2CzHu9/MNKCrcs9EB/7dUwOO0wLUXZ6PhUWuzOzbnRp1KLVIH5wEGW7u0JV1K2n1 JxsCAwEAAaOCApEwggKNMB0GA1UdDgQWBBSBwBNqIMc26gIpvNu1ta0M/jbShjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxNjgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTY4L2dj QVRhaURITnVvQ0tiemJ0Yld0RFA0MjBvWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAI9wywDBAFnrWgwDQYJ KoZIhvcNAQELBQADggEBAFlSPIOYF6DsmNyG50T4jC6r5Cmjc10BXYflgvjn56Ga QLkny0uWL8TwMxJZSx9CZ2fg2bc0PemagWAZakdcPGbjOUORQ9fbe4GJsXGSNNge PwLP+g5ukQ9S8hx1e9VlkP6BqlMUekMm9uWRNDUjcq6zGjxpIHqJCbfmixnRZKnb 5j8nksy9FrEIGj3ulsMxnlwTwW1CeIgxkZpnybFR+MSnEgWf/appC0QZTmrDGt9l XPknJrN9wZqvrxZLc6gQvApS2IWQPvnk9JF5w0/+xH1YP8iKkMklRb6nyd6y1qcO B6WojRBlOyph6ByCjSyg9COWt3P8O7V5lTPjo80BSno= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:36 2024 by rpki-client on console-fra.rpki-client.org