$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/p2lw8yrDOJMmIdWHjMtHh9vIAYM.cer File: p2lw8yrDOJMmIdWHjMtHh9vIAYM.cer (raw, json) Hash identifier: vlKf9IOQlM4I3G/URuL3kGdNJbMKXzXQA+MjBv7zbZo= Subject key identifier: A7:69:70:F3:2A:C3:38:93:26:21:D5:87:8C:CB:47:87:DB:C8:01:83 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3EBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10005/p2lw8yrDOJMmIdWHjMtHh9vIAYM.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10005/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:34:50 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 202.45.129.0/24 IP: 203.124.6.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16061 (0x3ebd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:34:50 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=A76970F32AC338932621D5878CCB4787DBC80183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:f5:60:3d:b0:50:48:08:95:c9:8b:57:84: 68:aa:39:dd:fe:7f:82:58:df:48:2f:71:06:43:1f: ad:64:e8:09:48:33:b4:2f:fe:f3:99:0f:65:30:71: df:ec:0a:b0:f6:ca:a4:c1:98:40:e1:7a:54:8a:b5: 67:4d:74:6c:ea:18:3b:05:54:00:f4:a4:37:58:0b: 3e:81:5d:1f:b7:3c:77:c3:77:2b:e6:cf:b5:b6:8c: 69:61:f6:af:8a:05:b7:a8:11:d4:01:20:ee:3a:46: ea:42:82:1c:82:eb:e8:ac:25:82:5e:36:42:96:73: 38:6b:ad:4c:55:89:d7:97:8a:ed:da:9c:9e:54:bf: 97:ce:9a:96:f8:5a:34:8b:15:7a:dd:cf:4a:78:b4: ec:4f:ca:5e:a2:3d:4b:5b:b8:bb:75:85:95:3b:3a: a1:5d:3c:27:91:3d:37:a0:46:f5:45:3e:ff:07:27: f3:15:7f:a0:6c:57:7c:59:34:6f:f5:7e:73:71:87: 89:2d:d2:ab:42:a3:1d:f0:97:3d:39:4c:96:9a:eb: 66:bc:19:ff:bc:01:26:d5:59:25:9c:da:40:fc:30: 8a:2e:fb:5f:36:11:ad:c0:cf:5c:f7:16:1a:5f:f2: 7f:82:23:94:a3:e5:ba:26:20:e2:47:a6:94:c0:d6: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:69:70:F3:2A:C3:38:93:26:21:D5:87:8C:CB:47:87:DB:C8:01:83 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10005/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10005/p2lw8yrDOJMmIdWHjMtHh9vIAYM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.45.129.0/24 203.124.6.0/23 Signature Algorithm: sha256WithRSAEncryption 37:2a:cf:b1:de:d5:75:55:bc:2f:72:fc:a5:be:bd:0b:c8:18: ff:5c:06:94:b2:8b:28:7e:af:20:94:26:6f:59:98:fe:d1:ff: 0a:1d:bb:b1:5d:e9:7e:39:6e:e8:3f:35:dc:61:d0:51:b4:0d: 5b:b0:a8:d7:e9:f2:bb:f9:7c:7b:3a:d1:15:34:f2:cc:54:06: 9a:72:c9:ae:b9:f7:87:9e:8e:88:03:bd:03:a8:ed:38:18:2c: eb:78:a5:13:ab:7e:3d:84:81:1c:af:3f:91:33:04:e8:c0:0e: f0:b9:6a:0e:7f:d2:38:56:15:5d:bd:45:38:a3:bb:10:29:1b: 1e:90:e3:f1:0d:35:61:48:86:3d:58:56:de:c4:09:0d:a8:2e: ba:c9:0d:51:0d:20:ff:ed:46:f3:02:8c:9d:fb:0b:bb:5c:75: f5:14:6b:36:60:4f:87:00:cb:be:d9:d3:cb:54:d0:b1:0a:dc: 6c:4b:39:2f:38:7c:9c:bb:00:ea:44:ab:07:9c:95:fc:72:99: 11:be:a9:82:b3:ac:d6:ef:85:0c:3b:c5:54:b4:01:b8:34:b2: 5c:92:fb:c7:5a:7f:f4:ec:fa:03:1b:d0:b4:d7:fc:d8:8e:93: e4:ec:00:ea:b4:cc:06:41:fd:cd:33:dd:88:83:bc:c1:e1:dd: dc:2f:20:45 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICPr0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzQ1MFoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoQTc2OTcwRjMyQUMzMzg5MzI2MjFENTg3OENDQjQ3ODdEQkM4MDE4 MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM5B9WA9sFBICJXJi1eE aKo53f5/gljfSC9xBkMfrWToCUgztC/+85kPZTBx3+wKsPbKpMGYQOF6VIq1Z010 bOoYOwVUAPSkN1gLPoFdH7c8d8N3K+bPtbaMaWH2r4oFt6gR1AEg7jpG6kKCHILr 6Kwlgl42QpZzOGutTFWJ15eK7dqcnlS/l86alvhaNIsVet3PSni07E/KXqI9S1u4 u3WFlTs6oV08J5E9N6BG9UU+/wcn8xV/oGxXfFk0b/V+c3GHiS3Sq0KjHfCXPTlM lprrZrwZ/7wBJtVZJZzaQPwwii77XzYRrcDPXPcWGl/yf4IjlKPluiYg4kemlMDW 2akCAwEAAaOCApEwggKNMB0GA1UdDgQWBBSnaXDzKsM4kyYh1YeMy0eH28gBgzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTAwMDUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzEwMDA1L3Ay bHc4eXJET0pNbUlkV0hqTXRIaDl2SUFZTS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBADKLYEDBAHLfAYwDQYJ KoZIhvcNAQELBQADggEBADcqz7He1XVVvC9y/KW+vQvIGP9cBpSyiyh+ryCUJm9Z mP7R/wodu7Fd6X45bug/Ndxh0FG0DVuwqNfp8rv5fHs60RU08sxUBppyya6594ee jogDvQOo7TgYLOt4pROrfj2EgRyvP5EzBOjADvC5ag5/0jhWFV29RTijuxApGx6Q 4/ENNWFIhj1YVt7ECQ2oLrrJDVENIP/tRvMCjJ37C7tcdfUUazZgT4cAy77Z08tU 0LEK3GxLOS84fJy7AOpEqweclfxymRG+qYKzrNbvhQw7xVS0Abg0slyS+8daf/Ts +gMb0LTX/NiOk+TsAOq0zAZB/c0z3YiDvMHh3dwvIEU= -----END CERTIFICATE-----Generated at Fri Nov 22 11:46:01 2024 by rpki-client on console-ams.rpki-client.org