$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer File: uOU8UkS3-adtX535-69h5XsuqTs.cer (raw, json) Hash identifier: dqr//ygILKMLfpRM7axpQ20TM8+awpByEBRoMWlJCM4= Subject key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0F63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:33:04 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 160.246.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3939 (0xf63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Apr 15 01:33:04 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:b2:88:91:4b:3c:68:a0:62:f7:fb:39:88: c9:56:2e:66:f5:32:dd:9a:fc:d1:cc:bd:ec:49:8d: ba:6e:04:b5:5e:bf:91:61:8f:ad:24:d5:db:43:88: 33:8a:a5:82:12:e1:72:9e:76:cb:b6:4c:d9:f1:ca: 3e:30:b6:bf:6d:b6:2b:28:fe:61:5e:dc:76:6f:b9: 8f:d3:0c:67:d6:71:cd:a7:df:82:22:5f:60:56:a2: 92:1f:db:b4:01:7e:d1:f7:9f:f4:b3:c1:fe:97:4f: c2:06:c2:2d:4e:4e:3b:77:82:11:a2:6a:e8:f8:90: c2:9a:da:50:73:da:81:e4:cc:1c:dd:24:86:18:50: 94:fd:fb:16:f0:63:c0:5d:43:e8:24:57:3b:dd:d5: 8e:1b:8a:92:97:7d:2d:3b:fd:63:5f:c3:18:76:3e: f4:9c:b0:9f:72:9d:bc:57:09:ea:8c:d9:6f:af:6a: 4a:bc:6b:3b:e6:7a:40:59:48:6c:c2:ca:de:f3:ff: 54:2b:68:81:13:1c:f7:67:43:ec:36:f6:1b:10:9a: 74:41:77:ef:b6:97:62:44:2b:18:e5:b1:70:11:25: 38:17:47:af:0b:b5:57:2a:e1:b2:83:3d:ba:dd:6a: af:f9:80:32:40:d6:fa:c8:bf:6b:62:8c:99:ef:43: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.246.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:2f:37:f1:41:fd:8b:48:c5:5a:50:a4:64:0d:bf:98:a9:15: 7e:cf:74:c3:eb:d1:a9:77:4b:3e:63:f5:35:42:eb:a6:55:c2: 7d:88:8c:28:f8:39:b4:38:f6:00:4a:fe:65:53:58:4d:65:e3: fd:20:94:5a:81:7f:c8:8f:f7:3c:33:6c:d1:d2:8a:8b:46:41: 82:86:fb:00:23:4e:75:68:51:3b:2e:e8:dd:37:86:49:a9:2a: 51:19:51:74:ac:41:03:a6:7a:5d:a3:4f:45:aa:3b:5d:56:0d: 66:22:be:16:21:cd:07:32:a8:39:31:62:93:06:69:e5:3e:61: 7d:ac:15:ae:cf:d7:60:73:06:96:6a:ce:97:69:18:13:84:09: 4b:28:24:12:26:1b:4f:86:37:f4:07:52:cb:84:ac:c9:4f:51: 66:a3:50:82:48:27:7c:67:25:d8:89:94:60:4a:b7:05:1a:07: aa:d7:65:28:c6:0f:d2:56:08:44:36:2f:dc:0e:c6:b1:a7:66: 2a:a1:ca:0e:75:e0:62:50:aa:2b:90:2b:e5:2f:46:fa:6f:dd: b0:a2:eb:69:74:c9:1b:d6:0e:86:a2:76:b1:10:34:52:53:7d: b4:2e:7e:b5:39:cd:ff:dd:bb:72:ab:01:16:c9:9e:8a:48:67: bd:13:88:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDQxNTAxMzMwNFoXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoQjhFNTNDNTI0NEI3RjlBNzZENUY5REY5RkJBRjYxRTU3QjJFQTkz QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNssoiRSzxooGL3+zmI yVYuZvUy3Zr80cy97EmNum4EtV6/kWGPrSTV20OIM4qlghLhcp52y7ZM2fHKPjC2 v222Kyj+YV7cdm+5j9MMZ9ZxzaffgiJfYFaikh/btAF+0fef9LPB/pdPwgbCLU5O O3eCEaJq6PiQwpraUHPageTMHN0khhhQlP37FvBjwF1D6CRXO93VjhuKkpd9LTv9 Y1/DGHY+9Jywn3KdvFcJ6ozZb69qSrxrO+Z6QFlIbMLK3vP/VCtogRMc92dD7Db2 GxCadEF377aXYkQrGOWxcBElOBdHrwu1VyrhsoM9ut1qr/mAMkDW+si/a2KMme9D J3kCAwEAAaOCAogwggKEMB0GA1UdDgQWBBS45TxSRLf5p21fnfn7r2Hley6pOzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjQ5MC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjQ5MC91T1U4 VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoPYwDQYJKoZIhvcNAQEL BQADggEBAFAvN/FB/YtIxVpQpGQNv5ipFX7PdMPr0al3Sz5j9TVC66ZVwn2IjCj4 ObQ49gBK/mVTWE1l4/0glFqBf8iP9zwzbNHSiotGQYKG+wAjTnVoUTsu6N03hkmp KlEZUXSsQQOmel2jT0WqO11WDWYivhYhzQcyqDkxYpMGaeU+YX2sFa7P12BzBpZq zpdpGBOECUsoJBImG0+GN/QHUsuErMlPUWajUIJIJ3xnJdiJlGBKtwUaB6rXZSjG D9JWCEQ2L9wOxrGnZiqhyg514GJQqiuQK+UvRvpv3bCi62l0yRvWDoaidrEQNFJT fbQufrU5zf/du3KrARbJnopIZ70TiAI= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:06 2025 by rpki-client on console.sobornost.net