$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer File: gf7ENcw7DVXepAW2GL1BjhrlZIE.cer (raw, json) Hash identifier: Ww/i4asrQER+yHO8KpSNlBPfcu2Q6KJ+i6sCQDcNsF8= Subject key identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:38:34 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 193.115.32.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: Nov 15 01:38:34 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:bb:55:f2:97:bf:55:05:00:61:1b:33:9b: 95:0c:fb:19:b7:b7:f0:a8:c5:3a:8e:fb:39:c7:73: e4:74:2f:41:7e:af:88:af:c9:e5:3f:93:12:e7:a8: 84:bd:f7:54:41:e5:71:fe:11:a0:0f:b1:34:f6:26: e3:2b:95:c9:99:ac:2f:13:65:ae:68:8b:10:c9:a7: f0:b8:5b:cf:0c:ec:0b:2a:9d:e3:94:86:53:62:ec: fa:db:5a:02:ba:ee:82:71:3a:95:51:ab:dd:f1:da: 2a:c3:6e:36:bb:fb:28:91:0d:a8:bf:ae:bb:3c:fc: c3:97:99:4d:80:63:d9:43:bd:8a:82:63:a0:63:f6: 65:f0:b7:35:33:6e:c7:9a:e9:24:b7:01:00:f0:ef: 71:1d:d4:ec:7c:65:08:25:c2:44:9b:4f:bb:7e:30: 42:ca:18:f6:b4:77:ff:b3:de:ba:94:8e:6e:b4:9d: 13:9f:2a:aa:31:6c:1b:df:52:79:01:65:d3:73:17: 54:b7:1f:02:fa:ae:1c:45:3d:86:94:10:f9:bb:de: d3:63:fe:3d:e5:86:c4:c9:2a:a9:cb:5c:34:a5:7a: 2a:65:e3:57:df:ea:8e:d3:6c:32:2e:ee:92:8c:a4: c5:3c:53:13:c5:e1:8e:8f:51:9a:0c:af:7d:a4:19: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.115.32.0/19 Signature Algorithm: sha256WithRSAEncryption b8:68:ed:2d:c2:84:d9:69:5b:c0:a9:1f:57:c3:37:62:71:4e: 44:5f:f0:3d:72:d9:bf:85:a8:1b:94:70:99:df:87:cd:2e:54: 0b:79:62:b1:d7:43:6a:e5:38:e1:95:f1:f7:a2:b1:2e:13:00: d2:06:55:8b:64:ed:06:b2:3f:2a:60:a0:3e:7e:d9:23:fd:f8: e2:06:b4:61:55:aa:8e:c7:44:d0:c5:41:6e:7f:fd:92:7f:fe: 18:49:8e:1a:f1:7d:97:47:bd:97:b7:2e:55:fd:7a:fa:bf:63: 73:d5:65:99:87:4f:a8:14:fc:0b:51:6e:d1:19:13:85:5c:e6: 71:09:e0:b5:f0:5a:db:f4:28:f9:16:59:b8:5b:b4:b4:50:23: f5:d1:4e:9d:74:c3:e9:a2:a5:c2:f6:7a:aa:c4:72:f8:44:a1: 9c:26:f5:80:38:da:3b:d2:dc:21:5b:8c:bd:16:95:f9:da:92: 8d:c5:cf:99:6a:cf:97:0a:20:d0:47:1f:19:98:32:c4:ba:c4: 26:33:05:09:14:0c:81:bb:ce:97:dd:d6:66:af:92:84:b9:d8: 57:4b:2f:22:aa:94:ff:7c:78:2b:24:03:cd:5c:ee:7b:fd:43: c5:51:e2:a0:1d:97:2c:1d:78:72:8c:e9:13:20:c4:40:4b:56: fa:e4:14:18 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAdowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI0MTExNTAxMzgzNFoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoODFGRUM0MzVDQzNCMEQ1NURFQTQwNUI2MThCRDQxOEUxQUU1NjQ4 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcBu1Xyl79VBQBhGzOb lQz7Gbe38KjFOo77Ocdz5HQvQX6viK/J5T+TEueohL33VEHlcf4RoA+xNPYm4yuV yZmsLxNlrmiLEMmn8LhbzwzsCyqd45SGU2Ls+ttaArrugnE6lVGr3fHaKsNuNrv7 KJENqL+uuzz8w5eZTYBj2UO9ioJjoGP2ZfC3NTNux5rpJLcBAPDvcR3U7HxlCCXC RJtPu34wQsoY9rR3/7PeupSObrSdE58qqjFsG99SeQFl03MXVLcfAvquHEU9hpQQ +bve02P+PeWGxMkqqctcNKV6KmXjV9/qjtNsMi7ukoykxTxTE8Xhjo9RmgyvfaQZ 0A0CAwEAAaOCAoswggKHMB0GA1UdDgQWBBSB/sQ1zDsNVd6kBbYYvUGOGuVkgTAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwODEvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDgxL2dm N0VOY3c3RFZYZXBBVzJHTDFCamhybFpJRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXBcyAwDQYJKoZIhvcN AQELBQADggEBALho7S3ChNlpW8CpH1fDN2JxTkRf8D1y2b+FqBuUcJnfh80uVAt5 YrHXQ2rlOOGV8feisS4TANIGVYtk7QayPypgoD5+2SP9+OIGtGFVqo7HRNDFQW5/ /ZJ//hhJjhrxfZdHvZe3LlX9evq/Y3PVZZmHT6gU/AtRbtEZE4Vc5nEJ4LXwWtv0 KPkWWbhbtLRQI/XRTp10w+mipcL2eqrEcvhEoZwm9YA42jvS3CFbjL0Wlfnako3F z5lqz5cKINBHHxmYMsS6xCYzBQkUDIG7zpfd1mavkoS52FdLLyKqlP98eCskA81c 7nv9Q8VR4qAdlywdeHKM6RMgxEBLVvrkFBg= -----END CERTIFICATE-----Generated at Fri Nov 22 09:41:08 2024 by rpki-client on console-ams.rpki-client.org