$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer File: 3_Eil0wafYnRaLu1NFv_G780FiY.cer (raw, json) Hash identifier: mkrz96VA5a/JrIXaaDusRE0C/D/e27OqCm3qjHXFRwg= Subject key identifier: DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 595B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:40:24 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 2401:f100::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22875 (0x595b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:40:24 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:29:eb:fb:1c:4d:42:44:e7:24:94:39:7d: 5b:81:6e:ca:1e:d5:df:83:8c:1a:23:2a:26:a2:49: 6e:e7:e5:37:80:c5:d2:94:02:2e:5f:5b:a5:e3:6c: ca:f9:16:af:2e:20:1a:c8:a5:dc:84:03:e1:5e:70: 4d:5b:33:74:ca:6c:98:12:bb:c5:c4:7f:73:46:dc: a8:a8:10:8e:04:78:fe:e0:76:ff:c2:75:83:e1:6a: 66:5d:c7:40:c0:28:cc:b8:eb:1d:29:a8:9a:c7:ac: 21:26:62:7a:82:e5:a2:7b:50:84:e5:51:dc:6e:24: dc:38:42:d2:49:54:1e:54:05:c8:cd:b4:c2:23:1e: 70:ee:a6:1c:6d:3a:d4:ce:40:8d:a8:d6:6a:57:c5: 5e:23:e5:c6:00:de:13:ea:c4:d4:9b:36:fe:12:62: 5e:36:07:79:cb:75:9e:32:8e:81:7d:fe:0f:8c:c5: 34:25:40:42:10:df:d6:09:c8:70:d8:77:4a:5f:fd: 46:71:98:b4:11:36:d4:3f:3a:ab:fe:dd:d5:dd:5b: df:1a:9d:92:3c:06:14:60:a2:8b:8e:83:68:cc:95: 0a:a2:27:f7:51:fc:d5:cd:c1:b6:53:7a:12:53:30: 7d:35:e9:fa:4c:61:f9:2f:48:54:5a:17:c2:31:b0: 9b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:f100::/32 Signature Algorithm: sha256WithRSAEncryption 00:99:b2:18:02:f9:6e:79:09:5b:ec:fd:9d:c3:6c:18:9c:ab: a2:ce:22:e6:a4:2c:07:08:16:c3:ed:2c:a1:62:b9:b3:cf:91: c8:d6:82:e8:96:84:8b:d1:8b:94:ee:ce:f5:23:a5:20:1b:35: 80:c3:18:88:39:36:f0:70:e1:27:81:fd:8c:13:32:3f:80:2d: c6:c7:30:ff:00:d7:f3:6f:f4:13:11:f9:65:61:e9:12:1a:56: 99:6e:e5:c8:dd:53:ae:a3:82:71:6c:78:58:43:49:20:4d:20: 1a:3a:20:d9:c5:63:12:e5:7a:4f:76:ea:79:a6:fc:b3:81:8a: d4:31:c6:46:67:d9:61:3e:d5:30:bf:df:aa:04:8c:cb:d9:78: 44:c8:37:c2:65:33:cc:75:60:be:61:0b:89:ce:29:bd:dc:88: 5a:e5:a3:bb:bd:c5:46:d4:2c:85:79:6c:28:25:b3:76:a9:3e: 5a:f1:c0:70:e0:5b:e8:7f:16:c3:2c:4a:d8:f7:ef:8c:03:e2: 37:0c:ae:e2:05:45:d1:26:58:fe:78:31:42:0f:f7:cc:03:50: b9:39:3b:17:39:d1:26:69:37:26:e9:1e:9a:3b:88:aa:ab:40: 9b:54:db:87:04:ca:25:54:31:ad:9a:9a:90:1b:2a:88:ed:74: 01:e1:0d:96 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICWVswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxNDAyNFoXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoREZGMTIyOTc0QzFBN0Q4OUQxNjhCQkI1MzQ1QkZGMUJCRjM0MTYy NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMnKev7HE1CROcklDl9 W4Fuyh7V34OMGiMqJqJJbuflN4DF0pQCLl9bpeNsyvkWry4gGsil3IQD4V5wTVsz dMpsmBK7xcR/c0bcqKgQjgR4/uB2/8J1g+FqZl3HQMAozLjrHSmomsesISZieoLl ontQhOVR3G4k3DhC0klUHlQFyM20wiMecO6mHG061M5AjajWalfFXiPlxgDeE+rE 1Js2/hJiXjYHect1njKOgX3+D4zFNCVAQhDf1gnIcNh3Sl/9RnGYtBE21D86q/7d 1d1b3xqdkjwGFGCii46DaMyVCqIn91H81c3BtlN6ElMwfTXp+kxh+S9IVFoXwjGw mzsCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTf8SKXTBp9idFou7U0W/8bvzQWJjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyMDgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjA4LzNf RWlsMHdhZlluUmFMdTFORnZfRzc4MEZpWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAfEAMA0GCSqGSIb3 DQEBCwUAA4IBAQAAmbIYAvlueQlb7P2dw2wYnKuiziLmpCwHCBbD7SyhYrmzz5HI 1oLoloSL0YuU7s71I6UgGzWAwxiIOTbwcOEngf2MEzI/gC3GxzD/ANfzb/QTEfll YekSGlaZbuXI3VOuo4JxbHhYQ0kgTSAaOiDZxWMS5XpPdup5pvyzgYrUMcZGZ9lh PtUwv9+qBIzL2XhEyDfCZTPMdWC+YQuJzim93Iha5aO7vcVG1CyFeWwoJbN2qT5a 8cBw4FvofxbDLErY9++MA+I3DK7iBUXRJlj+eDFCD/fMA1C5OTsXOdEmaTcm6R6a O4iqq0CbVNuHBMolVDGtmpqQGyqI7XQB4Q2W -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:37 2025 by rpki-client