$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer File: 377hQdw06JNkA0On8xKnAu-Rppg.cer (raw, json) Hash identifier: V1NiE673ggIVQOIIdGvhBgJWVM9QuafMhumjIa/F1mo= Subject key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 58E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:36:52 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 133.32.112.0/20 IP: 210.134.192.0/20 IP: 210.156.112.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22754 (0x58e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:36:52 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=DFBEE141DC34E893640343A7F312A702EF91A698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:f1:f3:3b:1f:41:55:02:6e:d6:22:54:8b: de:3f:39:43:4d:65:41:ca:87:1c:88:fc:d2:c9:74: 4c:20:a7:80:2c:6a:12:1c:44:ee:2c:5b:06:d0:31: 42:c5:4d:1c:cd:12:34:60:9d:c1:4e:b6:ae:ec:27: e0:5d:12:42:b9:a1:48:3d:51:11:15:ef:06:80:3e: 66:bd:4a:67:7f:d9:fa:cd:99:95:ea:4f:36:f7:9a: 1f:af:08:b9:5c:9a:d7:a1:04:23:05:43:0d:87:67: 4d:94:97:d0:8f:9e:04:1d:6d:e6:0b:56:e3:ad:43: 4f:e1:99:b5:62:4e:c5:b2:b5:27:04:db:48:3a:51: 02:eb:03:8a:15:43:d9:d1:c7:00:88:41:12:5c:8b: 71:fa:b3:43:6b:09:e0:61:46:76:08:1b:f2:db:b3: cf:4d:65:c8:f3:03:1e:c2:c3:c0:3a:d9:0d:20:b8: 06:6b:4f:65:49:79:40:9f:e7:f7:49:d3:c2:33:06: d7:20:68:e5:52:7f:7d:f1:92:6f:69:98:52:ff:1f: b2:79:a2:08:b5:4d:b8:80:38:17:7b:7c:c0:aa:d2: e4:25:03:cb:d3:10:dd:e8:d1:58:ec:86:d7:70:aa: 1f:a2:dd:95:44:94:fd:07:88:2c:10:fa:c9:a8:a3: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.32.112.0/20 210.134.192.0/20 210.156.112.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:f4:57:af:0a:42:ab:3e:7f:75:88:1e:58:15:ce:d1:33:6e: 54:40:36:af:81:fe:2a:11:20:be:b9:07:74:a9:7e:15:d8:a2: 5d:74:df:57:fb:9f:dc:59:fe:73:8a:2c:39:89:e9:52:ea:7d: 47:cb:8d:73:11:47:dc:e0:18:6a:00:14:34:52:a9:5b:3b:f2: 09:35:51:de:96:8e:ce:ab:5d:4f:e7:7d:03:40:cc:72:7a:41: 6b:cc:23:e8:8d:ed:68:1e:78:d0:6a:04:8a:e5:ab:84:d3:1c: 81:13:42:64:ae:e9:1a:c0:1a:12:43:e9:09:76:e4:8e:ef:24: 92:f9:c9:78:6c:5c:46:de:43:4e:bf:dc:dd:94:48:37:61:42: e1:e9:13:f1:e9:8c:bf:a1:21:52:91:50:89:4d:13:a7:d7:84: 03:da:40:49:9a:c0:21:61:0c:a8:d4:df:15:01:9e:f6:17:74: 5e:8e:e9:1d:a9:cb:bd:74:ef:e6:25:00:dc:1a:11:3b:81:b5: f5:b1:a2:a4:b4:a2:26:93:97:35:d2:12:27:30:8c:3c:22:91: 81:ed:5a:e8:a6:5b:85:5a:33:8f:5c:40:e9:6e:89:3e:25:3e: e4:8f:3d:99:7e:72:5e:14:2a:e7:29:d2:8c:f6:06:43:26:98: 7f:f0:74:c2 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICWOIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxMzY1MloXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoREZCRUUxNDFEQzM0RTg5MzY0MDM0M0E3RjMxMkE3MDJFRjkxQTY5 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ4V8fM7H0FVAm7WIlSL 3j85Q01lQcqHHIj80sl0TCCngCxqEhxE7ixbBtAxQsVNHM0SNGCdwU62ruwn4F0S QrmhSD1RERXvBoA+Zr1KZ3/Z+s2ZlepPNveaH68IuVya16EEIwVDDYdnTZSX0I+e BB1t5gtW461DT+GZtWJOxbK1JwTbSDpRAusDihVD2dHHAIhBElyLcfqzQ2sJ4GFG dggb8tuzz01lyPMDHsLDwDrZDSC4BmtPZUl5QJ/n90nTwjMG1yBo5VJ/ffGSb2mY Uv8fsnmiCLVNuIA4F3t8wKrS5CUDy9MQ3ejRWOyG13CqH6LdlUSU/QeILBD6yaij zCUCAwEAAaOCApIwggKOMB0GA1UdDgQWBBTfvuFB3DTok2QDQ6fzEqcC75GmmDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84MzQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzgzNC8zNzdoUWR3 MDZKTmtBME9uOHhLbkF1LVJwcGcubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEhSBwAwQE0obAAwQE0pxwMA0G CSqGSIb3DQEBCwUAA4IBAQA79FevCkKrPn91iB5YFc7RM25UQDavgf4qESC+uQd0 qX4V2KJddN9X+5/cWf5ziiw5ielS6n1Hy41zEUfc4BhqABQ0UqlbO/IJNVHelo7O q11P530DQMxyekFrzCPoje1oHnjQagSK5auE0xyBE0JkrukawBoSQ+kJduSO7ySS +cl4bFxG3kNOv9zdlEg3YULh6RPx6Yy/oSFSkVCJTROn14QD2kBJmsAhYQyo1N8V AZ72F3Rejukdqcu9dO/mJQDcGhE7gbX1saKktKImk5c10hInMIw8IpGB7VropluF WjOPXEDpbok+JT7kjz2ZfnJeFCrnKdKM9gZDJph/8HTC -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:45 2025 by rpki-client