$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer File: 4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer (raw, json) Hash identifier: uu+yRimAwFe3PdGXrBcJR5g81oQmv5kT9SiUI28GOl0= Subject key identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:41:47 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 193.82.64.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: Jul 15 01:41:47 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=E20E6DF43A3F020ADB675A21F3A91AC4D8F35867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:a8:18:8c:c9:cc:6e:78:8d:b7:d7:c7:e7: bd:b6:24:1d:e8:65:40:c5:45:59:80:2f:4c:41:82: 4d:dc:10:7d:00:31:5b:8d:cc:b1:a6:88:30:8e:5d: a2:2a:78:00:d0:f2:66:7f:f7:7e:df:72:d5:b1:ec: bb:70:3c:db:6b:24:7e:f7:23:3c:c1:4c:f0:07:e4: 9b:e4:59:b2:22:7f:f3:70:df:43:6f:b3:48:75:a4: 60:a5:f1:23:52:18:67:e9:49:a9:fa:76:d5:0b:f6: 40:c4:2c:0b:81:1f:99:a4:0d:1b:09:6f:5c:ac:52: 94:a3:6d:64:cf:df:4c:e2:28:87:be:a7:44:58:fb: 5f:38:64:5e:e8:2a:8d:df:ac:b7:d3:21:2d:4b:fc: a5:7f:fc:68:16:72:6a:66:e1:86:e0:f0:50:f4:64: 5b:d8:6f:b4:99:dc:f8:ce:e6:f4:68:21:71:6f:19: 00:c5:38:ec:9e:59:fd:69:d1:2b:17:42:2e:c9:f1: b6:6e:6f:78:d0:cd:24:7b:df:75:77:bd:79:ef:43: 0d:bf:e2:13:ed:14:dc:48:cc:88:46:be:bf:39:42: 2d:74:6a:22:a6:43:0d:ad:ec:8d:30:1f:77:6f:ad: 37:d2:10:23:f4:1e:ab:a8:c2:d8:22:24:38:2b:90: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.82.64.0/19 Signature Algorithm: sha256WithRSAEncryption 2c:dc:c6:bc:4a:72:08:d5:18:cf:cd:54:90:9c:9a:8c:ce:24: 47:27:b1:ff:60:fb:05:09:cf:05:a0:51:c0:72:44:ff:2f:b5: ca:e7:04:8c:eb:fa:16:1f:48:9b:c8:6c:74:d2:b4:7f:00:94: 64:5b:96:eb:9d:1c:6a:2e:79:06:cb:54:e6:8a:5c:1d:34:bc: 52:71:9e:a9:36:d2:6c:16:a3:2d:e1:39:e8:26:ac:72:40:5d: 8f:3a:9b:d4:2a:b7:a6:b9:09:21:1f:54:68:57:6d:05:08:9b: 88:5c:12:4f:14:ba:b0:0a:72:59:7d:85:d2:5d:8c:de:f6:d1: 49:41:ba:b8:25:c4:f0:08:e1:89:00:f1:26:cd:42:bd:e1:d1: 86:1a:cc:3d:9e:6a:72:e2:e3:4d:60:42:b4:49:07:c5:a2:f1: 93:64:ac:f4:90:cc:9e:41:e6:5f:b8:e3:8b:d3:9d:b8:af:5d: a3:2e:76:8f:ac:28:d4:30:4d:77:94:48:7c:94:3b:20:eb:6a: 96:fc:d1:1e:ea:39:96:e5:30:c1:b2:88:ec:4b:31:8d:47:bf: 59:92:ef:dd:de:cf:e8:d1:78:75:c9:18:67:00:cb:b0:08:d1: 65:bf:3a:e2:8f:de:2f:f8:08:af:49:c4:5e:40:76:4a:a5:e6: ab:0d:ff:a0 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI1MDcxNTAxNDE0N1oXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoRTIwRTZERjQzQTNGMDIwQURCNjc1QTIxRjNBOTFBQzREOEYzNTg2 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5dqBiMycxueI2318fn vbYkHehlQMVFWYAvTEGCTdwQfQAxW43MsaaIMI5doip4ANDyZn/3ft9y1bHsu3A8 22skfvcjPMFM8Afkm+RZsiJ/83DfQ2+zSHWkYKXxI1IYZ+lJqfp21Qv2QMQsC4Ef maQNGwlvXKxSlKNtZM/fTOIoh76nRFj7XzhkXugqjd+st9MhLUv8pX/8aBZyambh huDwUPRkW9hvtJnc+M7m9GghcW8ZAMU47J5Z/WnRKxdCLsnxtm5veNDNJHvfdXe9 ee9DDb/iE+0U3EjMiEa+vzlCLXRqIqZDDa3sjTAfd2+tN9IQI/Qeq6jC2CIkOCuQ vnECAwEAAaOCAoYwggKCMB0GA1UdDgQWBBTiDm30Oj8CCttnWiHzqRrE2PNYZzAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MjQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUyNC80ZzV0OURv X0FncmJaMW9oODZrYXhOanpXR2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwVJAMA0GCSqGSIb3DQEBCwUA A4IBAQAs3Ma8SnII1RjPzVSQnJqMziRHJ7H/YPsFCc8FoFHAckT/L7XK5wSM6/oW H0ibyGx00rR/AJRkW5brnRxqLnkGy1TmilwdNLxScZ6pNtJsFqMt4TnoJqxyQF2P OpvUKremuQkhH1RoV20FCJuIXBJPFLqwCnJZfYXSXYze9tFJQbq4JcTwCOGJAPEm zUK94dGGGsw9nmpy4uNNYEK0SQfFovGTZKz0kMyeQeZfuOOL0524r12jLnaPrCjU ME13lEh8lDsg62qW/NEe6jmW5TDBsojsSzGNR79Zku/d3s/o0Xh1yRhnAMuwCNFl vzrij94v+AivScReQHZKpearDf+g -----END CERTIFICATE-----Generated at Sun Jul 20 19:15:54 2025 by rpki-client