$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer File: g3GTlezs0ieqs-JSnnoQSDwPmG8.cer (raw, json) Hash identifier: LpOJt/IRsOWwBEgZkCcyXGmI4hLOhlKVL2faVLtJY1I= Subject key identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0F5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:32:30 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 160.187.26.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3933 (0xf5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Apr 15 01:32:30 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=83719395ECECD227AAB3E2529E7A10483C0F986F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:ad:d6:81:3f:dc:c9:9b:35:7b:d2:47:9e: 55:50:de:6a:31:d0:e6:4f:7a:da:c7:f4:a9:ed:ce: f6:f3:ba:cb:ee:f7:01:3d:99:58:71:1b:20:cd:d5: 3e:41:60:3b:0f:97:c6:88:33:a7:c6:2e:2a:4a:56: c4:48:80:91:f8:c1:c2:5c:90:54:e1:d4:b8:78:f5: 27:06:68:c7:4d:59:c2:d3:64:47:b8:c1:b3:4e:52: a4:f0:70:ef:dc:3c:a0:7d:f7:aa:46:d1:7f:7b:d5: 02:d2:7e:8e:a9:80:86:8b:10:87:e6:cc:63:17:fe: 41:a0:2b:8a:53:38:ac:46:b8:03:25:37:7f:1a:98: c9:1d:7b:35:7c:bc:b5:1f:9c:13:27:c1:d4:c8:7d: cb:b6:9a:8d:d2:e9:f8:04:a1:de:96:ea:5b:ce:06: 14:2d:fa:e1:fd:cf:50:0c:d7:3a:24:4c:14:ea:58: 2c:ed:10:34:dd:ca:b1:f2:ca:a0:cd:bd:c4:11:e2: be:78:f1:86:a0:13:4a:47:bb:ee:01:14:45:0e:ad: 63:e8:c6:08:49:f2:f1:c3:7d:29:61:ea:d4:d7:5c: c3:c9:08:4d:45:7e:09:35:19:d3:52:9a:e6:f1:5c: 32:b6:cc:57:72:53:87:33:35:95:12:dc:16:80:9d: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.26.0/23 Signature Algorithm: sha256WithRSAEncryption 66:8c:de:50:c7:22:1f:be:6e:b3:d7:d8:fb:75:79:4a:12:f0: 61:af:e3:83:20:13:da:b2:7b:52:08:c4:14:f7:60:69:80:60: ac:96:c2:4b:d1:21:80:3c:71:91:1e:c6:70:b8:d2:4b:1d:9e: 81:6e:a5:a2:f0:ff:d3:43:db:7e:f3:9e:a6:ec:e8:b1:23:08: d3:3e:1e:ef:d1:25:9c:a9:c3:0d:83:90:88:ee:a8:aa:74:ad: fc:33:ff:99:3e:1d:ad:79:3c:f2:85:5e:64:ee:0c:c3:17:03: 9a:31:09:de:92:fc:17:7a:31:6d:d0:4c:66:ff:d1:11:8e:8a: 5b:fa:cf:e4:93:bd:e3:1f:72:46:ae:cd:c5:6d:a0:24:20:f4: 26:c4:86:a7:fa:68:bc:7a:95:68:69:c5:e7:dd:5f:44:10:bb: b8:d1:d6:90:e6:41:4e:f6:5f:21:93:76:f9:8b:6b:44:01:db: 9c:02:78:73:95:c1:26:84:ca:c4:28:a0:f7:53:2f:da:24:4f: 51:b6:67:b2:37:27:ff:25:ed:5e:34:b7:9e:7e:98:80:5b:db: bf:54:66:23:0d:24:52:6e:fe:bb:ed:79:e9:ae:82:e3:17:45: d6:cf:f1:b6:bb:3f:a7:a7:d3:ec:02:41:28:b7:8c:43:d4:4b: db:63:1f:89 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICD10wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDQxNTAxMzIzMFoXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoODM3MTkzOTVFQ0VDRDIyN0FBQjNFMjUyOUU3QTEwNDgzQzBGOTg2 RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMXsrdaBP9zJmzV70kee VVDeajHQ5k962sf0qe3O9vO6y+73AT2ZWHEbIM3VPkFgOw+Xxogzp8YuKkpWxEiA kfjBwlyQVOHUuHj1JwZox01ZwtNkR7jBs05SpPBw79w8oH33qkbRf3vVAtJ+jqmA hosQh+bMYxf+QaArilM4rEa4AyU3fxqYyR17NXy8tR+cEyfB1Mh9y7aajdLp+ASh 3pbqW84GFC364f3PUAzXOiRMFOpYLO0QNN3KsfLKoM29xBHivnjxhqATSke77gEU RQ6tY+jGCEny8cN9KWHq1Ndcw8kITUV+CTUZ01Ka5vFcMrbMV3JThzM1lRLcFoCd aicCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSDcZOV7OzSJ6qz4lKeehBIPA+YbzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNzAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjcwL2cz R1RsZXpzMGllcXMtSlNubm9RU0R3UG1HOC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGguxowDQYJKoZIhvcN AQELBQADggEBAGaM3lDHIh++brPX2Pt1eUoS8GGv44MgE9qye1IIxBT3YGmAYKyW wkvRIYA8cZEexnC40ksdnoFupaLw/9ND237znqbs6LEjCNM+Hu/RJZypww2DkIju qKp0rfwz/5k+Ha15PPKFXmTuDMMXA5oxCd6S/Bd6MW3QTGb/0RGOilv6z+STveMf ckauzcVtoCQg9CbEhqf6aLx6lWhpxefdX0QQu7jR1pDmQU72XyGTdvmLa0QB25wC eHOVwSaEysQooPdTL9okT1G2Z7I3J/8l7V40t55+mIBb279UZiMNJFJu/rvteemu guMXRdbP8ba7P6en0+wCQSi3jEPUS9tjH4k= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:04 2025 by rpki-client on console.sobornost.net