$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer File: po7KKdBstMAGEbpK2FJvBJDMbn0.cer (raw, json) Hash identifier: CdbEz1dwvgBPHigpLY9mGDPl2o9gtp8YhtUV4deFThw= Subject key identifier: A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3DE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:30:27 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 2402:d600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15846 (0x3de6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:30:27 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:db:76:5a:6e:df:2a:3f:83:c5:59:ae:a9: 0b:b6:45:11:df:ae:4a:50:9e:6e:00:bf:a6:c6:cf: e7:1b:98:42:f6:59:59:79:7f:92:ba:8e:2b:cf:4b: ae:56:32:10:f8:8c:23:12:31:ad:9b:87:d8:f0:31: ba:33:6b:5e:b2:e9:dd:6a:50:1b:d0:d0:b1:55:c9: 81:94:fe:24:b3:7e:a8:cf:bc:60:32:74:c5:b6:5a: d8:27:28:c3:d9:01:ce:70:e3:d8:3f:ee:e1:8c:20: d8:25:ed:d6:08:eb:90:88:ff:b8:fb:b6:01:a9:f0: e1:ca:42:4a:5a:14:f4:b6:1b:2b:06:82:38:4a:3d: fb:85:9e:9f:3d:0d:9d:68:17:2e:d0:f3:99:93:f9: 5b:aa:d5:31:1c:bb:fb:b5:e7:ef:e0:ff:2c:ab:ef: 44:a0:d3:cb:f5:63:e1:47:c9:36:79:e3:5d:f8:d3: 62:7c:91:76:7d:dc:ff:e4:8f:da:34:2d:8c:25:08: da:d4:24:23:27:65:8d:b9:5a:eb:19:39:44:fd:91: 8f:d5:8d:45:7a:fe:32:74:e6:39:cd:2d:f0:29:ba: fa:d6:19:a4:2c:28:c0:6f:2a:0a:78:fa:99:b0:ce: f0:a4:e3:5d:88:e8:9b:2c:a0:79:e2:94:9a:7e:67: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:d600::/32 Signature Algorithm: sha256WithRSAEncryption 9e:48:c3:57:0b:97:9d:7e:71:2c:33:2c:20:39:c4:ad:c5:fb: 26:93:44:53:b0:ec:ca:a4:14:fc:b6:9d:c6:d2:d2:3f:6f:c4: 30:79:0f:ae:06:4b:01:a7:1c:ae:db:3a:ef:d2:6b:60:0b:74: b2:64:d2:1c:0e:22:f2:94:bd:eb:e8:10:3f:d2:47:47:5c:d1: 1d:e5:c5:ec:cf:bf:b9:03:ce:d2:4b:a2:a3:e4:5e:20:d8:6f: e2:37:86:ea:0e:ba:86:fc:ce:a2:fd:f8:3e:b8:98:59:43:0e: 22:01:08:8b:85:d3:67:12:0d:19:fc:1f:56:75:00:3b:98:64: f4:97:4d:62:2d:c8:dd:74:5b:ac:60:de:71:f7:a8:53:8f:e1: 58:7e:0e:ad:b6:05:e3:b4:3a:80:44:06:20:7c:96:b3:6b:51: 8d:f5:5e:58:97:c1:1a:32:40:a4:40:24:5a:88:aa:8a:7b:92: 45:50:35:f5:f5:36:4e:0c:b9:ae:e5:72:c2:5a:c7:0b:96:54: 2b:d1:fd:f1:a6:49:9a:01:ff:59:01:8f:8c:cc:e3:c5:39:8a: e2:b6:0c:a5:c3:83:d8:17:1b:1f:81:67:33:0b:35:1c:65:4d: 7e:4c:62:a8:cd:31:1d:b8:8c:71:44:9f:48:84:11:95:7f:68: 52:e1:a0:db -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICPeYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzAyN1oXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoQTY4RUNBMjlEMDZDQjRDMDA2MTFCQTRBRDg1MjZGMDQ5MENDNkU3 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALlw23Zabt8qP4PFWa6p C7ZFEd+uSlCebgC/psbP5xuYQvZZWXl/krqOK89LrlYyEPiMIxIxrZuH2PAxujNr XrLp3WpQG9DQsVXJgZT+JLN+qM+8YDJ0xbZa2Ccow9kBznDj2D/u4Ywg2CXt1gjr kIj/uPu2Aanw4cpCSloU9LYbKwaCOEo9+4Wenz0NnWgXLtDzmZP5W6rVMRy7+7Xn 7+D/LKvvRKDTy/Vj4UfJNnnjXfjTYnyRdn3c/+SP2jQtjCUI2tQkIydljbla6xk5 RP2Rj9WNRXr+MnTmOc0t8Cm6+tYZpCwowG8qCnj6mbDO8KTjXYjomyygeeKUmn5n WPcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSmjsop0Gy0wAYRukrYUm8EkMxufTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxNDAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTQwL3Bv N0tLZEJzdE1BR0VicEsyRkp2QkpETWJuMC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAtYAMA0GCSqGSIb3 DQEBCwUAA4IBAQCeSMNXC5edfnEsMywgOcStxfsmk0RTsOzKpBT8tp3G0tI/b8Qw eQ+uBksBpxyu2zrv0mtgC3SyZNIcDiLylL3r6BA/0kdHXNEd5cXsz7+5A87SS6Kj 5F4g2G/iN4bqDrqG/M6i/fg+uJhZQw4iAQiLhdNnEg0Z/B9WdQA7mGT0l01iLcjd dFusYN5x96hTj+FYfg6ttgXjtDqARAYgfJaza1GN9V5Yl8EaMkCkQCRaiKqKe5JF UDX19TZODLmu5XLCWscLllQr0f3xpkmaAf9ZAY+MzOPFOYritgylw4PYFxsfgWcz CzUcZU1+TGKozTEduIxxRJ9IhBGVf2hS4aDb -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:37 2024 by rpki-client on console-fra.rpki-client.org