$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer File: wv35CplvCjDTHpCccr4FbdRKBuQ.cer (raw, json) Hash identifier: 9K1xoWKBKzBCDLScuTH3qGcJ2xE3bTGQrEG2WsOfYWU= Subject key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3E89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Nov 2024 01:33:48 +0000 Certificate not after: Sat 15 Nov 2025 01:30:03 +0000 Subordinate resources: IP: 103.48.31.0/24 IP: 103.202.216.0/23 IP: 103.247.181.0/24 IP: 202.226.4.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16009 (0x3e89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:33:48 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:39:f6:17:e7:9e:0a:b7:2f:55:4a:66:b6: fd:55:21:85:96:9f:c3:82:ce:64:67:23:65:18:53: b3:82:76:c3:ab:36:7d:fa:3f:33:12:41:20:b3:45: c2:40:78:10:72:cc:37:e0:3d:83:d1:f3:eb:2a:66: a3:89:45:23:63:4b:64:e7:aa:e5:9b:9f:46:59:83: 7a:5d:d4:d2:5f:34:57:d1:cb:cc:cd:95:32:ff:ab: 4d:65:11:68:43:9f:39:0a:45:54:a4:fe:e7:ee:81: 45:3c:b7:31:38:13:9a:a9:f8:32:58:1f:1f:3f:80: 07:55:ff:03:1d:a6:b1:40:7d:3f:01:b4:0c:43:62: 4e:85:3c:c8:58:2d:43:f6:c9:d9:c2:61:5a:11:32: 48:81:2f:85:b4:d4:75:aa:98:5c:54:e3:05:41:00: 9f:c8:1c:10:0e:af:9f:8f:f1:90:e6:1f:af:8e:01: 2a:ca:0a:80:68:46:d0:3f:c7:87:ec:82:d9:19:32: 42:09:ae:78:56:52:ef:57:10:dd:2d:bb:90:a6:e8: 10:bc:88:23:8b:a4:10:29:3f:9c:9e:c0:45:04:7b: bd:39:f7:56:1f:fb:74:85:59:a1:82:2c:81:2c:26: 5d:f6:aa:91:c2:13:8e:98:97:35:ed:a5:f8:f1:6d: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.31.0/24 103.202.216.0/23 103.247.181.0/24 202.226.4.0/22 Signature Algorithm: sha256WithRSAEncryption 81:90:43:85:ca:3f:87:de:90:c1:ed:fb:bc:eb:c9:f6:00:c8: f3:4d:e1:8d:02:1f:4f:d4:3a:73:d0:c8:02:43:70:0f:3e:17: 39:a3:15:96:43:11:3c:b2:2f:40:79:86:69:bf:c5:04:5d:a6: e7:71:0d:84:af:d2:c7:7e:a0:14:d2:5f:9d:4c:ae:a7:a6:38: 1d:cd:b0:14:b9:57:c8:78:26:50:70:49:eb:e3:7a:80:08:41: f0:ea:b9:4c:7e:5c:85:d0:7e:63:8d:9b:0b:40:90:78:09:d2: 9b:75:19:f3:f7:cb:2d:ed:f8:9d:dd:cd:e0:6c:0b:0d:8e:8b: 8a:d8:66:be:da:2f:e5:73:77:50:c9:a2:41:90:5f:ff:f1:09: eb:12:4d:0a:5c:2e:81:42:07:e1:24:51:8e:70:d9:78:39:fc: 4d:34:b8:91:1b:0f:c2:06:55:16:3e:52:67:27:f6:3b:62:69: 35:19:b6:88:76:4a:51:cd:71:38:bf:e1:27:0c:9f:8b:99:1d: a8:41:e4:a6:52:29:9c:05:8f:e6:22:6a:86:7a:d4:c9:c1:1a: 9b:cc:3b:ee:7c:2e:7b:4c:b2:ef:bd:f8:9b:88:4d:ae:65:ca: b3:4f:ce:58:ac:3f:ed:74:30:96:a4:ce:70:84:71:1f:35:dd: 82:d9:d3:74 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICPokwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MTExNTAxMzM0OFoXDTI1MTExNTAxMzAwM1owMzEx MC8GA1UEAxMoQzJGREY5MEE5OTZGMEEzMEQzMUU5MDlDNzJCRTA1NkRENDRBMDZF NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZnOfYX554Kty9VSma2 /VUhhZafw4LOZGcjZRhTs4J2w6s2ffo/MxJBILNFwkB4EHLMN+A9g9Hz6ypmo4lF I2NLZOeq5ZufRlmDel3U0l80V9HLzM2VMv+rTWURaEOfOQpFVKT+5+6BRTy3MTgT mqn4MlgfHz+AB1X/Ax2msUB9PwG0DENiToU8yFgtQ/bJ2cJhWhEySIEvhbTUdaqY XFTjBUEAn8gcEA6vn4/xkOYfr44BKsoKgGhG0D/Hh+yC2RkyQgmueFZS71cQ3S27 kKboELyII4ukECk/nJ7ARQR7vTn3Vh/7dIVZoYIsgSwmXfaqkcITjpiXNe2l+PFt QeUCAwEAAaOCApgwggKUMB0GA1UdDgQWBBTC/fkKmW8KMNMekJxyvgVt1EoG5DAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81OTgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzU5OC93djM1Q3Bs dkNqRFRIcENjY3I0RmJkUktCdVEubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAZzAfAwQBZ8rYAwQAZ/e1AwQC yuIEMA0GCSqGSIb3DQEBCwUAA4IBAQCBkEOFyj+H3pDB7fu868n2AMjzTeGNAh9P 1Dpz0MgCQ3APPhc5oxWWQxE8si9AeYZpv8UEXabncQ2Er9LHfqAU0l+dTK6npjgd zbAUuVfIeCZQcEnr43qACEHw6rlMflyF0H5jjZsLQJB4CdKbdRnz98st7fid3c3g bAsNjouK2Ga+2i/lc3dQyaJBkF//8QnrEk0KXC6BQgfhJFGOcNl4OfxNNLiRGw/C BlUWPlJnJ/Y7Ymk1GbaIdkpRzXE4v+EnDJ+LmR2oQeSmUimcBY/mImqGetTJwRqb zDvufC57TLLvvfibiE2uZcqzT85YrD/tdDCWpM5whHEfNd2C2dN0 -----END CERTIFICATE-----Generated at Fri Nov 22 09:41:09 2024 by rpki-client on console-ams.rpki-client.org