$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer File: h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer (raw, json) Hash identifier: ocCSdzSWxxtKjfxhArPcd3Ztv9E/vScxsXvYoDkX/JY= Subject key identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 2F7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:33:00 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 133.3.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12156 (0x2f7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:33:00 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=87CD2FD59C6043CC830969581381D7A2807EF2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:4f:31:ae:59:98:c1:7b:6a:71:6f:9a:40: c7:02:de:fb:83:db:25:88:62:df:1b:eb:7b:c4:18: 55:11:2b:04:23:fc:6f:1a:4e:b0:cc:3e:a7:0c:6a: a2:54:f9:fb:d4:83:85:fc:3f:89:0e:88:55:16:5c: 85:78:55:10:a2:73:26:ad:88:4c:a1:69:2b:98:42: ed:c4:6f:2f:c2:1f:22:f3:ac:fa:7a:ca:c5:49:19: bb:17:fc:0a:99:1d:e0:14:79:42:f2:86:c1:04:1c: 0b:ad:6a:81:03:7a:7f:0f:16:2d:c3:38:9b:69:f3: 68:23:a3:5c:ff:43:87:a9:bd:25:32:01:99:ab:da: 7a:f9:68:91:6c:26:73:13:db:1a:91:c8:54:91:9f: 38:9a:3a:ed:56:01:4c:40:bb:0f:71:5c:91:f2:c2: ee:95:e3:ef:29:52:0d:73:06:e6:93:6d:ec:c9:c3: 0c:57:a6:67:73:9a:9c:8a:53:90:f5:a4:de:6d:c9: 16:c3:15:a5:c9:c0:db:ca:13:34:df:b1:29:ed:2e: c1:68:90:22:2b:73:fb:0d:83:ad:b4:a1:d2:15:ec: 97:f4:d2:60:25:9c:75:9e:61:1e:fb:57:48:93:e8: 61:0c:7f:a6:ba:99:54:a6:7b:82:e6:21:f8:f8:fb: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 12:42:d9:0f:31:92:2d:97:0f:70:d1:8b:0c:d3:4b:5a:e0:ff: 3e:6d:05:e4:1b:2d:ba:57:1f:2e:05:99:61:50:f1:17:80:58: b8:16:68:99:57:0a:43:28:64:a6:d7:e5:e7:b6:05:ba:68:ea: 85:1d:06:c8:ed:ff:9f:24:24:15:ba:cf:33:b8:10:41:49:f8: 4c:61:20:ad:32:fa:61:1c:ba:30:41:6a:7d:5a:e0:58:81:47: 2d:87:76:e5:49:8a:5e:81:0e:d3:e0:44:e0:aa:17:8b:ef:61: 19:fa:55:a5:63:92:52:72:06:14:dc:ec:1f:c2:5a:7a:7a:4a: 90:ae:00:bd:c2:fb:2a:48:b0:6d:7a:9f:c6:53:03:b0:5a:f4: 19:01:1f:5c:d2:8e:29:c5:7e:de:33:36:02:d1:c0:8c:64:cf: aa:fb:7c:f1:0e:f9:cb:50:40:aa:6f:57:06:71:8e:78:da:2c: 84:a9:12:62:49:c1:37:5e:12:24:0b:8a:fd:0f:77:78:4b:c2: 9b:f6:df:c5:68:44:48:f1:48:40:3d:68:9e:70:48:1a:7c:ac: 77:3c:15:86:3d:59:92:dc:be:68:4a:27:99:b8:16:e7:97:58: bd:84:ca:d5:c2:5a:7d:d2:e8:4c:5e:95:70:65:13:7a:16:d7: 42:df:15:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICL3wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzMwMFoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoODdDRDJGRDU5QzYwNDNDQzgzMDk2OTU4MTM4MUQ3QTI4MDdFRjJD NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgrTzGuWZjBe2pxb5pA xwLe+4PbJYhi3xvre8QYVRErBCP8bxpOsMw+pwxqolT5+9SDhfw/iQ6IVRZchXhV EKJzJq2ITKFpK5hC7cRvL8IfIvOs+nrKxUkZuxf8Cpkd4BR5QvKGwQQcC61qgQN6 fw8WLcM4m2nzaCOjXP9Dh6m9JTIBmavaevlokWwmcxPbGpHIVJGfOJo67VYBTEC7 D3FckfLC7pXj7ylSDXMG5pNt7MnDDFemZ3OanIpTkPWk3m3JFsMVpcnA28oTNN+x Ke0uwWiQIitz+w2DrbSh0hXsl/TSYCWcdZ5hHvtXSJPoYQx/prqZVKZ7guYh+Pj7 498CAwEAAaOCAogwggKEMB0GA1UdDgQWBBSHzS/VnGBDzIMJaVgTgdeigH7yxzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTk0OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTk0OS9oODB2 MVp4Z1E4eURDV2xZRTRIWG9vQi04c2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhQMwDQYJKoZIhvcNAQEL BQADggEBABJC2Q8xki2XD3DRiwzTS1rg/z5tBeQbLbpXHy4FmWFQ8ReAWLgWaJlX CkMoZKbX5ee2Bbpo6oUdBsjt/58kJBW6zzO4EEFJ+ExhIK0y+mEcujBBan1a4FiB Ry2HduVJil6BDtPgROCqF4vvYRn6VaVjklJyBhTc7B/CWnp6SpCuAL3C+ypIsG16 n8ZTA7Ba9BkBH1zSjinFft4zNgLRwIxkz6r7fPEO+ctQQKpvVwZxjnjaLISpEmJJ wTdeEiQLiv0Pd3hLwpv238VoREjxSEA9aJ5wSBp8rHc8FYY9WZLcvmhKJ5m4FueX WL2EytXCWn3S6ExelXBlE3oW10LfFe0= -----END CERTIFICATE-----Generated at Fri May 17 12:06:30 2024 by rpki-client on console-fra.rpki-client.org