$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer File: h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer (raw, json) Hash identifier: JU8Jg0x4/+8DCIEjw+838WJx98/vdIa5OWtOFUgD0CU= Subject key identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3EB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:34:44 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 133.3.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16056 (0x3eb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:34:44 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=87CD2FD59C6043CC830969581381D7A2807EF2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:4f:31:ae:59:98:c1:7b:6a:71:6f:9a:40: c7:02:de:fb:83:db:25:88:62:df:1b:eb:7b:c4:18: 55:11:2b:04:23:fc:6f:1a:4e:b0:cc:3e:a7:0c:6a: a2:54:f9:fb:d4:83:85:fc:3f:89:0e:88:55:16:5c: 85:78:55:10:a2:73:26:ad:88:4c:a1:69:2b:98:42: ed:c4:6f:2f:c2:1f:22:f3:ac:fa:7a:ca:c5:49:19: bb:17:fc:0a:99:1d:e0:14:79:42:f2:86:c1:04:1c: 0b:ad:6a:81:03:7a:7f:0f:16:2d:c3:38:9b:69:f3: 68:23:a3:5c:ff:43:87:a9:bd:25:32:01:99:ab:da: 7a:f9:68:91:6c:26:73:13:db:1a:91:c8:54:91:9f: 38:9a:3a:ed:56:01:4c:40:bb:0f:71:5c:91:f2:c2: ee:95:e3:ef:29:52:0d:73:06:e6:93:6d:ec:c9:c3: 0c:57:a6:67:73:9a:9c:8a:53:90:f5:a4:de:6d:c9: 16:c3:15:a5:c9:c0:db:ca:13:34:df:b1:29:ed:2e: c1:68:90:22:2b:73:fb:0d:83:ad:b4:a1:d2:15:ec: 97:f4:d2:60:25:9c:75:9e:61:1e:fb:57:48:93:e8: 61:0c:7f:a6:ba:99:54:a6:7b:82:e6:21:f8:f8:fb: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption a6:49:74:45:62:fb:1c:0e:6a:b8:f2:96:f3:ac:dd:1d:1b:08: a6:e2:eb:68:89:42:42:00:98:35:d4:57:f3:7a:96:e7:9e:17: 81:71:87:bb:9f:05:0d:fe:fd:74:42:43:d0:5e:f2:5d:4a:59: 81:29:82:a2:74:01:77:99:27:66:73:15:1b:89:9a:a4:44:4b: 60:da:06:75:db:0a:f9:28:eb:ae:02:83:2c:13:d5:ab:ef:f3: e1:d1:f6:4d:fd:7a:ae:86:01:52:5b:2d:4b:cf:7d:ef:74:ef: 87:05:1a:10:3d:a7:30:82:54:f7:98:d7:d1:f6:47:21:04:90: b1:93:f9:3f:32:d5:cb:bf:9e:6f:68:53:20:32:b4:a3:09:77: ed:15:44:56:ee:be:3e:56:06:a3:3f:be:60:46:46:e1:99:43: 9d:e7:40:f3:91:d4:f5:64:24:d5:97:57:3b:15:6e:cc:5e:da: 55:d6:d7:67:ae:48:1b:0b:09:9c:16:66:fd:0a:aa:e5:44:0d: bb:64:8a:ac:a5:93:fb:48:aa:fe:7d:16:65:68:11:d5:4e:6e: f7:ca:37:d1:37:5d:25:6a:83:39:0d:65:b0:18:39:9a:2a:a3: c6:53:fb:76:f9:74:3f:8e:39:b2:38:41:22:06:89:17:5f:48: f4:0a:9d:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICPrgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzQ0NFoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoODdDRDJGRDU5QzYwNDNDQzgzMDk2OTU4MTM4MUQ3QTI4MDdFRjJD NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgrTzGuWZjBe2pxb5pA xwLe+4PbJYhi3xvre8QYVRErBCP8bxpOsMw+pwxqolT5+9SDhfw/iQ6IVRZchXhV EKJzJq2ITKFpK5hC7cRvL8IfIvOs+nrKxUkZuxf8Cpkd4BR5QvKGwQQcC61qgQN6 fw8WLcM4m2nzaCOjXP9Dh6m9JTIBmavaevlokWwmcxPbGpHIVJGfOJo67VYBTEC7 D3FckfLC7pXj7ylSDXMG5pNt7MnDDFemZ3OanIpTkPWk3m3JFsMVpcnA28oTNN+x Ke0uwWiQIitz+w2DrbSh0hXsl/TSYCWcdZ5hHvtXSJPoYQx/prqZVKZ7guYh+Pj7 498CAwEAAaOCAogwggKEMB0GA1UdDgQWBBSHzS/VnGBDzIMJaVgTgdeigH7yxzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTk0OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTk0OS9oODB2 MVp4Z1E4eURDV2xZRTRIWG9vQi04c2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhQMwDQYJKoZIhvcNAQEL BQADggEBAKZJdEVi+xwOarjylvOs3R0bCKbi62iJQkIAmDXUV/N6lueeF4Fxh7uf BQ3+/XRCQ9Be8l1KWYEpgqJ0AXeZJ2ZzFRuJmqRES2DaBnXbCvko664CgywT1avv 8+HR9k39eq6GAVJbLUvPfe9074cFGhA9pzCCVPeY19H2RyEEkLGT+T8y1cu/nm9o UyAytKMJd+0VRFbuvj5WBqM/vmBGRuGZQ53nQPOR1PVkJNWXVzsVbsxe2lXW12eu SBsLCZwWZv0KquVEDbtkiqylk/tIqv59FmVoEdVObvfKN9E3XSVqgzkNZbAYOZoq o8ZT+3b5dD+OObI4QSIGiRdfSPQKnfs= -----END CERTIFICATE-----Generated at Fri Nov 22 09:41:08 2024 by rpki-client on console-ams.rpki-client.org