$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0_4nFVMUwUjdhbciP6DR-P0rJng.cer File: 0_4nFVMUwUjdhbciP6DR-P0rJng.cer (raw, json) Hash identifier: aoTtaqafVvAA3XDj2NMyZPDwkHBAOj2HrkEDq6lEESg= Subject key identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 540E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:43:35 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 2402:5a00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21518 (0x540e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:43:35 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=D3FE27155314C148DD85B7223FA0D1F8FD2B2678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:92:71:ff:81:a2:fa:cf:78:b3:00:06:c9: 57:60:2d:c3:c7:5f:67:ff:e2:7c:51:23:ab:6e:53: f1:93:93:3b:19:7d:3a:93:97:4f:5f:00:9c:c1:73: d8:ef:f1:3f:a3:6a:5b:98:3f:4a:34:40:58:40:b6: 78:90:b3:d2:ee:d7:e8:b5:af:78:f5:0a:d9:17:60: 8f:11:32:b7:19:95:b1:32:00:29:80:de:a3:92:bb: 8c:25:21:de:de:f8:56:d7:a3:80:3f:01:dc:78:de: 51:2b:ff:f3:8c:99:08:eb:cc:30:61:db:94:2d:5c: d7:c0:9d:6e:eb:7b:81:ec:ee:1e:f2:32:99:0a:79: 1e:f1:f1:13:fe:9b:1f:14:76:ea:49:c3:8e:3a:27: bc:9e:99:24:32:44:04:23:86:0b:59:98:a9:09:32: a1:a8:34:f3:a8:a2:fd:c2:f2:b3:6c:7e:92:aa:e0: 7c:0f:d9:93:58:f0:7e:63:7a:f3:4f:05:de:df:d4: d6:c4:fa:ce:a9:89:a6:3d:da:a7:8d:3b:3e:81:da: 5c:33:7b:3d:df:12:a2:42:8b:4b:f0:ce:a8:e7:28: 0a:db:79:56:7e:72:18:dd:45:23:85:0b:34:8a:30: b1:ac:6e:39:04:d4:ec:0d:b2:4d:b0:5d:d8:68:a8: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 54:d2:ea:23:6d:cb:d7:d2:21:5b:01:ff:36:25:80:ca:32:22: 09:e0:0b:fb:9a:8f:a3:63:39:f9:28:15:97:6d:9f:6d:d6:82: f4:52:98:f7:d5:20:0b:8b:c0:f3:0c:65:a9:6d:b9:60:14:65: 2a:13:00:a7:7c:56:1d:59:28:6f:48:6a:08:58:6d:f6:ab:eb: 97:31:21:4b:9a:8e:e9:fc:cb:f3:b2:03:4b:40:68:81:b4:37: f5:d3:54:c2:be:cf:24:84:20:90:ec:73:fd:f6:9a:9b:6f:ec: 75:69:00:75:c0:81:6d:f2:5a:14:1f:b9:8a:7a:c1:2b:73:d2: 2a:a8:7d:34:e8:81:71:28:ee:27:a9:4b:c9:26:e5:8f:50:2c: fc:f5:d5:92:17:75:ad:cf:62:d8:8c:97:b5:80:b3:05:25:9e: ed:44:08:67:00:5f:e9:ba:ee:97:25:c0:7c:7c:5d:ec:19:16: c6:e2:8c:d3:32:18:75:73:fd:43:d6:c7:45:5b:4c:d5:20:71: 9f:04:9b:3e:65:7c:63:e9:ca:3d:cd:c3:29:8d:56:a7:99:99: c8:4f:97:a2:bb:2c:86:2f:73:94:1b:b0:2d:64:19:51:3b:53: f6:ab:0b:fa:57:d5:40:b8:42:ec:40:7b:fc:42:90:bb:cb:3a: 38:14:bb:2e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICVA4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDcxNTAxNDMzNVoXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoRDNGRTI3MTU1MzE0QzE0OEREODVCNzIyM0ZBMEQxRjhGRDJCMjY3 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjQknH/gaL6z3izAAbJ V2Atw8dfZ//ifFEjq25T8ZOTOxl9OpOXT18AnMFz2O/xP6NqW5g/SjRAWEC2eJCz 0u7X6LWvePUK2RdgjxEytxmVsTIAKYDeo5K7jCUh3t74VtejgD8B3HjeUSv/84yZ COvMMGHblC1c18Cdbut7gezuHvIymQp5HvHxE/6bHxR26knDjjonvJ6ZJDJEBCOG C1mYqQkyoag086ii/cLys2x+kqrgfA/Zk1jwfmN6808F3t/U1sT6zqmJpj3ap407 PoHaXDN7Pd8SokKLS/DOqOcoCtt5Vn5yGN1FI4ULNIowsaxuOQTU7A2yTbBd2Gio oacCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTT/icVUxTBSN2FtyI/oNH4/SsmeDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTM2LzBf NG5GVk1Vd1VqZGhiY2lQNkRSLVAwckpuZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAloAMA0GCSqGSIb3 DQEBCwUAA4IBAQBU0uojbcvX0iFbAf82JYDKMiIJ4Av7mo+jYzn5KBWXbZ9t1oL0 Upj31SALi8DzDGWpbblgFGUqEwCnfFYdWShvSGoIWG32q+uXMSFLmo7p/MvzsgNL QGiBtDf101TCvs8khCCQ7HP99pqbb+x1aQB1wIFt8loUH7mKesErc9IqqH006IFx KO4nqUvJJuWPUCz89dWSF3Wtz2LYjJe1gLMFJZ7tRAhnAF/puu6XJcB8fF3sGRbG 4ozTMhh1c/1D1sdFW0zVIHGfBJs+ZXxj6co9zcMpjVanmZnIT5eiuyyGL3OUG7At ZBlRO1P2qwv6V9VAuELsQHv8QpC7yzo4FLsu -----END CERTIFICATE-----Generated at Mon Jul 21 08:53:13 2025 by rpki-client