$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/scacq_HPBw3aKACksRkiDloOaAk.cer File: scacq_HPBw3aKACksRkiDloOaAk.cer (raw, json) Hash identifier: MQbT5e8qjW1EpBTlheUpBjFehxCWJQT5GNams3EuL9Q= Subject key identifier: B1:C6:9C:AB:F1:CF:07:0D:DA:28:00:A4:B1:19:22:0E:5A:0E:68:09 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3F61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30388/scacq_HPBw3aKACksRkiDloOaAk.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30388/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:38:12 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 2407:eac0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16225 (0x3f61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:38:12 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=B1C69CABF1CF070DDA2800A4B119220E5A0E6809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:f1:75:a0:98:3d:fb:d3:f4:60:61:d1:3a: 7c:70:1d:84:5e:eb:59:ab:16:b5:9b:48:86:7b:ec: 2f:57:a6:fa:e1:d2:f4:94:12:61:77:46:50:67:e8: 42:4f:26:99:44:ac:84:89:6b:05:4b:ca:23:fb:90: 14:d0:72:8d:99:b4:fa:3b:c4:7f:fa:37:64:63:4a: dd:4d:05:aa:56:8e:17:a8:cf:1b:43:77:07:73:2c: ad:a7:40:1f:f6:43:37:87:50:ec:f3:17:dd:e2:f7: 28:c0:8c:fe:2e:90:c9:7d:7d:2d:3e:23:7b:47:b8: 13:b6:28:9b:22:5f:be:4d:91:68:fb:49:4a:ea:90: 27:96:2d:20:f1:6b:01:38:e6:0b:78:94:24:40:1f: a7:8c:ed:d0:ce:1d:22:67:51:f9:52:48:b5:32:76: d5:eb:8e:44:a1:88:6c:39:99:3d:95:e0:ba:78:59: f5:4c:66:24:a9:18:c7:07:71:07:04:8d:ba:7c:b8: b8:a9:2c:a8:f0:62:16:45:35:f3:3d:51:6a:f9:0d: fc:3d:88:5d:de:1e:e7:65:27:64:3c:47:1e:d6:4f: 53:02:bc:c1:1e:e6:7d:ff:2d:1a:9e:0e:f1:9d:8e: 0f:99:1f:8b:4b:f8:5b:91:99:bf:eb:f2:07:74:fc: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C6:9C:AB:F1:CF:07:0D:DA:28:00:A4:B1:19:22:0E:5A:0E:68:09 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30388/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30388/scacq_HPBw3aKACksRkiDloOaAk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:eac0::/32 Signature Algorithm: sha256WithRSAEncryption 79:62:0b:75:0b:4c:3c:38:56:0e:a8:38:b1:1c:c3:53:bd:f4: cf:1b:7b:68:c7:1a:7b:ed:06:31:8b:44:4b:c0:9c:9b:ea:49: 62:e8:80:19:6d:a9:d3:31:fc:e1:62:dc:fb:39:3d:65:ca:86: b7:13:76:06:43:59:27:ef:d0:2f:24:f8:71:3f:b3:42:d4:ee: c8:8a:07:1c:c0:8a:2e:c3:b2:10:6a:ea:b2:0e:0f:4f:ca:5d: 13:77:8d:15:7f:40:86:d3:70:74:bb:70:86:93:a2:60:30:e0: 15:96:17:ca:a3:c8:7d:b3:1a:e6:dc:8a:c9:58:45:cb:30:24: 02:9c:64:b9:3d:f8:cd:d7:e6:57:6e:ea:72:97:9e:c6:90:6e: 09:64:34:e9:cf:aa:19:b6:a4:86:ad:dd:97:8a:57:5a:c1:89: 61:93:43:96:63:fe:74:53:44:76:d2:6c:80:aa:fe:c3:7a:b3: b4:60:92:95:b1:24:76:09:a1:ac:3e:96:13:fd:ca:a6:dc:57: f8:7f:d5:fb:30:76:b5:a1:80:38:25:e0:20:fc:16:4d:34:33: a5:72:cf:60:2c:56:73:c6:9b:a8:51:e4:4d:2d:31:ed:46:ab: 41:ab:f8:96:70:55:3b:6c:89:8b:c8:b0:13:10:48:55:17:a4: 6d:c1:d4:fe -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICP2EwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzgxMloXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoQjFDNjlDQUJGMUNGMDcwRERBMjgwMEE0QjExOTIyMEU1QTBFNjgw OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALfL8XWgmD370/RgYdE6 fHAdhF7rWasWtZtIhnvsL1em+uHS9JQSYXdGUGfoQk8mmUSshIlrBUvKI/uQFNBy jZm0+jvEf/o3ZGNK3U0FqlaOF6jPG0N3B3MsradAH/ZDN4dQ7PMX3eL3KMCM/i6Q yX19LT4je0e4E7YomyJfvk2RaPtJSuqQJ5YtIPFrATjmC3iUJEAfp4zt0M4dImdR +VJItTJ21euORKGIbDmZPZXgunhZ9UxmJKkYxwdxBwSNuny4uKksqPBiFkU18z1R avkN/D2IXd4e52UnZDxHHtZPUwK8wR7mff8tGp4O8Z2OD5kfi0v4W5GZv+vyB3T8 hd0CAwEAAaOCAowwggKIMB0GA1UdDgQWBBSxxpyr8c8HDdooAKSxGSIOWg5oCTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzODgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzg4L3Nj YWNxX0hQQnczYUtBQ2tzUmtpRGxvT2FBay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB+rAMA0GCSqGSIb3 DQEBCwUAA4IBAQB5Ygt1C0w8OFYOqDixHMNTvfTPG3toxxp77QYxi0RLwJyb6kli 6IAZbanTMfzhYtz7OT1lyoa3E3YGQ1kn79AvJPhxP7NC1O7IigccwIouw7IQauqy Dg9Pyl0Td40Vf0CG03B0u3CGk6JgMOAVlhfKo8h9sxrm3IrJWEXLMCQCnGS5PfjN 1+ZXbupyl57GkG4JZDTpz6oZtqSGrd2XildawYlhk0OWY/50U0R20myAqv7DerO0 YJKVsSR2CaGsPpYT/cqm3Ff4f9X7MHa1oYA4JeAg/BZNNDOlcs9gLFZzxpuoUeRN LTHtRqtBq/iWcFU7bImLyLATEEhVF6RtwdT+ -----END CERTIFICATE-----Generated at Fri Nov 22 11:46:01 2024 by rpki-client on console-ams.rpki-client.org