$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/pwkf8V8nS6kTDNP1XbbmfMWiasw.cer File: pwkf8V8nS6kTDNP1XbbmfMWiasw.cer (raw, json) Hash identifier: 11quLpopiiWkwlcEzYzUE+9HXJ0b4/f9cp1ocycPBho= Subject key identifier: A7:09:1F:F1:5F:27:4B:A9:13:0C:D3:F5:5D:B6:E6:7C:C5:A2:6A:CC Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3057 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/pwkf8V8nS6kTDNP1XbbmfMWiasw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:37:28 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 103.95.163.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 12:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12375 (0x3057) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:37:28 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=A7091FF15F274BA9130CD3F55DB6E67CC5A26ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:67:57:e4:7f:b7:71:1f:4c:32:2a:db:8f: 0b:87:b6:d1:91:d0:12:b0:16:b4:73:7b:b3:49:27: 44:4b:89:a0:5d:e6:84:00:a7:35:95:7a:66:12:d0: 7a:9f:5d:5d:95:b0:6c:f6:f8:03:75:11:5f:70:2e: f2:04:bd:8e:ce:29:33:45:62:d0:57:e1:ab:36:dd: 1e:08:73:1e:a1:91:cd:e4:49:5f:da:4d:af:45:7c: 4c:dc:c9:0b:4c:83:65:74:0d:c1:fe:d2:bc:89:e2: 88:bf:3f:ee:bb:e3:8d:fa:29:43:4e:1f:d8:48:fe: 63:85:ef:21:b7:ae:0a:28:7f:3d:73:2e:68:cb:5d: be:f2:f9:34:3a:0d:d6:27:c6:9e:a4:30:4c:6b:b7: 38:b4:92:d7:53:ea:4f:8b:b4:f8:ea:55:ac:ea:59: 1e:09:7b:79:b3:e5:7d:d5:da:4d:08:bf:e2:30:c5: 11:50:36:12:58:3e:39:8b:8f:a8:b5:6f:03:b6:79: aa:41:40:17:62:f4:fe:d3:70:a9:9f:a9:fb:7d:a9: 3f:e6:68:5e:5a:94:ac:54:5e:1d:02:39:bb:52:73: df:40:a1:38:0d:e5:3d:67:ea:eb:9c:be:2a:6e:fa: ce:2e:29:70:15:83:0d:d2:e3:4d:8d:88:77:67:11: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:09:1F:F1:5F:27:4B:A9:13:0C:D3:F5:5D:B6:E6:7C:C5:A2:6A:CC X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5585/pwkf8V8nS6kTDNP1XbbmfMWiasw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.95.163.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:01:68:2e:93:e4:bf:ea:56:89:dd:36:95:7f:3a:9f:76:69: 05:70:c8:7a:af:8f:49:25:3d:da:65:8e:c4:80:8f:b3:3a:86: 32:aa:9f:4b:3a:22:de:0d:24:e0:55:70:7b:73:de:42:2b:2e: 36:5b:09:b3:56:21:45:52:ea:50:04:c3:b4:5f:81:85:c3:18: 04:af:5e:76:48:8e:50:40:07:eb:f6:8b:21:e7:df:0f:80:da: 2b:e6:a6:1d:40:da:ea:7b:a0:be:c8:6d:0c:0d:c2:83:05:fc: 92:3e:1d:1a:7a:1b:ae:3d:58:77:57:4f:27:e5:1c:cf:cd:5c: d5:f6:0c:11:68:23:e7:4b:5e:cf:93:cb:e0:32:e2:cd:bd:f9: 6c:fd:f5:ec:f1:81:3f:95:83:53:0d:5d:e6:c1:ad:51:8e:aa: 37:e4:e4:ae:c9:ea:26:51:93:77:d6:ca:78:cb:ca:7c:48:bc: 30:16:df:b5:d5:54:7f:4a:5f:0f:1b:b6:98:5d:1c:91:03:d4: 08:86:97:32:73:0f:38:12:f9:65:bb:e1:8f:93:7f:08:06:3b: d0:dc:08:21:6d:ef:3c:9f:9e:72:e9:26:ff:6c:06:87:12:b9: 44:2a:d9:88:ee:66:ef:01:2c:2f:24:19:c5:96:6d:84:10:71: 0e:02:f3:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMFcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzcyOFoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoQTcwOTFGRjE1RjI3NEJBOTEzMENEM0Y1NURCNkU2N0NDNUEyNkFD QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ9WZ1fkf7dxH0wyKtuP C4e20ZHQErAWtHN7s0knREuJoF3mhACnNZV6ZhLQep9dXZWwbPb4A3URX3Au8gS9 js4pM0Vi0FfhqzbdHghzHqGRzeRJX9pNr0V8TNzJC0yDZXQNwf7SvIniiL8/7rvj jfopQ04f2Ej+Y4XvIbeuCih/PXMuaMtdvvL5NDoN1ifGnqQwTGu3OLSS11PqT4u0 +OpVrOpZHgl7ebPlfdXaTQi/4jDFEVA2Elg+OYuPqLVvA7Z5qkFAF2L0/tNwqZ+p +32pP+ZoXlqUrFReHQI5u1Jz30ChOA3lPWfq65y+Km76zi4pcBWDDdLjTY2Id2cR e2cCAwEAAaOCAokwggKFMB0GA1UdDgQWBBSnCR/xXydLqRMM0/VdtuZ8xaJqzDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvNTU4NS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTU4NS9wd2tm OFY4blM2a1RETlAxWGJibWZNV2lhc3cubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1+jMA0GCSqGSIb3DQEB CwUAA4IBAQCbAWguk+S/6laJ3TaVfzqfdmkFcMh6r49JJT3aZY7EgI+zOoYyqp9L OiLeDSTgVXB7c95CKy42WwmzViFFUupQBMO0X4GFwxgEr152SI5QQAfr9osh598P gNor5qYdQNrqe6C+yG0MDcKDBfySPh0aehuuPVh3V08n5RzPzVzV9gwRaCPnS17P k8vgMuLNvfls/fXs8YE/lYNTDV3mwa1Rjqo35OSuyeomUZN31sp4y8p8SLwwFt+1 1VR/Sl8PG7aYXRyRA9QIhpcycw84Evllu+GPk38IBjvQ3Aghbe88n55y6Sb/bAaH ErlEKtmI7mbvASwvJBnFlm2EEHEOAvN5 -----END CERTIFICATE-----Generated at Fri May 17 13:12:25 2024 by rpki-client on console-ams.rpki-client.org