$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer File: uOU8UkS3-adtX535-69h5XsuqTs.cer (raw, json) Hash identifier: 06u40Fpp0tUatXwrWDqjEbm1rsKBvFVMDQE1t5Jtex0= Subject key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0D39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:33:37 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 160.246.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3385 (0xd39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Nov 15 01:33:37 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:b2:88:91:4b:3c:68:a0:62:f7:fb:39:88: c9:56:2e:66:f5:32:dd:9a:fc:d1:cc:bd:ec:49:8d: ba:6e:04:b5:5e:bf:91:61:8f:ad:24:d5:db:43:88: 33:8a:a5:82:12:e1:72:9e:76:cb:b6:4c:d9:f1:ca: 3e:30:b6:bf:6d:b6:2b:28:fe:61:5e:dc:76:6f:b9: 8f:d3:0c:67:d6:71:cd:a7:df:82:22:5f:60:56:a2: 92:1f:db:b4:01:7e:d1:f7:9f:f4:b3:c1:fe:97:4f: c2:06:c2:2d:4e:4e:3b:77:82:11:a2:6a:e8:f8:90: c2:9a:da:50:73:da:81:e4:cc:1c:dd:24:86:18:50: 94:fd:fb:16:f0:63:c0:5d:43:e8:24:57:3b:dd:d5: 8e:1b:8a:92:97:7d:2d:3b:fd:63:5f:c3:18:76:3e: f4:9c:b0:9f:72:9d:bc:57:09:ea:8c:d9:6f:af:6a: 4a:bc:6b:3b:e6:7a:40:59:48:6c:c2:ca:de:f3:ff: 54:2b:68:81:13:1c:f7:67:43:ec:36:f6:1b:10:9a: 74:41:77:ef:b6:97:62:44:2b:18:e5:b1:70:11:25: 38:17:47:af:0b:b5:57:2a:e1:b2:83:3d:ba:dd:6a: af:f9:80:32:40:d6:fa:c8:bf:6b:62:8c:99:ef:43: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.246.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:ba:d0:cc:50:d8:04:f5:9e:16:d5:fc:88:64:46:50:78:37: ea:91:a2:8a:0f:2d:bc:f8:05:e2:89:56:ae:8e:bf:03:83:80: ba:fb:fd:5b:31:ff:1e:9f:7c:8f:f0:15:a4:bd:c6:38:c4:c7: f9:d5:b4:63:bb:b7:4c:46:96:31:e1:6f:62:bd:ff:61:f3:0c: be:ef:15:5a:e0:eb:58:14:ae:a7:40:11:00:83:05:41:9c:de: 51:db:c4:11:43:96:dd:84:20:15:55:a4:96:6f:ad:3f:84:28: dd:fd:de:cf:84:10:26:15:67:ef:b0:41:31:fe:18:c5:4b:bf: 2c:22:b4:6c:1b:62:13:71:e9:c6:10:a8:b3:7f:75:94:99:28: 44:63:59:ac:bb:df:d6:a0:42:3a:40:4c:c9:fd:ca:c0:0a:15: 39:2e:b0:59:42:d1:0a:b9:78:a8:25:c7:a6:04:77:72:8a:e3: 93:57:58:32:b9:e9:00:28:a7:b8:2a:16:5a:e7:f3:96:5e:af: 36:9b:01:18:08:ee:87:82:bb:c9:b0:ae:ae:8c:d7:07:f2:a3: 7c:fe:35:df:69:9d:15:98:ea:94:27:20:e4:f4:28:cf:8e:7c: 82:3a:f8:a3:84:35:22:27:1e:c7:56:f0:71:14:58:0c:e6:99: d5:1d:8c:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI0MTExNTAxMzMzN1oXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoQjhFNTNDNTI0NEI3RjlBNzZENUY5REY5RkJBRjYxRTU3QjJFQTkz QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNssoiRSzxooGL3+zmI yVYuZvUy3Zr80cy97EmNum4EtV6/kWGPrSTV20OIM4qlghLhcp52y7ZM2fHKPjC2 v222Kyj+YV7cdm+5j9MMZ9ZxzaffgiJfYFaikh/btAF+0fef9LPB/pdPwgbCLU5O O3eCEaJq6PiQwpraUHPageTMHN0khhhQlP37FvBjwF1D6CRXO93VjhuKkpd9LTv9 Y1/DGHY+9Jywn3KdvFcJ6ozZb69qSrxrO+Z6QFlIbMLK3vP/VCtogRMc92dD7Db2 GxCadEF377aXYkQrGOWxcBElOBdHrwu1VyrhsoM9ut1qr/mAMkDW+si/a2KMme9D J3kCAwEAAaOCAogwggKEMB0GA1UdDgQWBBS45TxSRLf5p21fnfn7r2Hley6pOzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjQ5MC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjQ5MC91T1U4 VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoPYwDQYJKoZIhvcNAQEL BQADggEBAIC60MxQ2AT1nhbV/IhkRlB4N+qRoooPLbz4BeKJVq6OvwODgLr7/Vsx /x6ffI/wFaS9xjjEx/nVtGO7t0xGljHhb2K9/2HzDL7vFVrg61gUrqdAEQCDBUGc 3lHbxBFDlt2EIBVVpJZvrT+EKN393s+EECYVZ++wQTH+GMVLvywitGwbYhNx6cYQ qLN/dZSZKERjWay739agQjpATMn9ysAKFTkusFlC0Qq5eKglx6YEd3KK45NXWDK5 6QAop7gqFlrn85ZerzabARgI7oeCu8mwrq6M1wfyo3z+Nd9pnRWY6pQnIOT0KM+O fII6+KOENSInHsdW8HEUWAzmmdUdjFk= -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:37 2024 by rpki-client on console-fra.rpki-client.org