$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer File: 4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer (raw, json) Hash identifier: P7zOYOJ3mwQR0Ss+Pce1IyxvNrhj2k2AoYU5waZMDEc= Subject key identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Mar 2025 01:30:56 +0000 Certificate not after: Sun 15 Mar 2026 01:30:03 +0000 Subordinate resources: IP: 193.82.64.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000 Validity Not Before: Mar 15 01:30:56 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E20E6DF43A3F020ADB675A21F3A91AC4D8F35867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:a8:18:8c:c9:cc:6e:78:8d:b7:d7:c7:e7: bd:b6:24:1d:e8:65:40:c5:45:59:80:2f:4c:41:82: 4d:dc:10:7d:00:31:5b:8d:cc:b1:a6:88:30:8e:5d: a2:2a:78:00:d0:f2:66:7f:f7:7e:df:72:d5:b1:ec: bb:70:3c:db:6b:24:7e:f7:23:3c:c1:4c:f0:07:e4: 9b:e4:59:b2:22:7f:f3:70:df:43:6f:b3:48:75:a4: 60:a5:f1:23:52:18:67:e9:49:a9:fa:76:d5:0b:f6: 40:c4:2c:0b:81:1f:99:a4:0d:1b:09:6f:5c:ac:52: 94:a3:6d:64:cf:df:4c:e2:28:87:be:a7:44:58:fb: 5f:38:64:5e:e8:2a:8d:df:ac:b7:d3:21:2d:4b:fc: a5:7f:fc:68:16:72:6a:66:e1:86:e0:f0:50:f4:64: 5b:d8:6f:b4:99:dc:f8:ce:e6:f4:68:21:71:6f:19: 00:c5:38:ec:9e:59:fd:69:d1:2b:17:42:2e:c9:f1: b6:6e:6f:78:d0:cd:24:7b:df:75:77:bd:79:ef:43: 0d:bf:e2:13:ed:14:dc:48:cc:88:46:be:bf:39:42: 2d:74:6a:22:a6:43:0d:ad:ec:8d:30:1f:77:6f:ad: 37:d2:10:23:f4:1e:ab:a8:c2:d8:22:24:38:2b:90: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.82.64.0/19 Signature Algorithm: sha256WithRSAEncryption d9:b8:d2:5d:06:17:d7:8c:0c:ee:28:6c:da:c1:f8:94:81:34: e4:91:0b:ca:b3:1f:79:f2:8e:3a:5f:1b:f0:c7:5c:24:d2:a8: 92:37:f7:26:f7:91:ea:aa:80:35:79:c1:49:62:f7:ca:37:4b: ec:f8:e4:57:51:5d:a6:55:cb:54:c9:db:98:ff:2e:f9:4a:a7: 69:79:ae:6b:95:59:7d:c6:30:09:d2:8f:f0:58:6a:16:bb:25: a7:41:61:2d:6a:c2:ea:2e:6b:fb:14:cb:dc:18:1f:02:13:17: 31:1c:35:4c:9e:cf:ee:31:db:cc:b9:6d:16:d2:7e:04:dc:76: c4:5f:82:5a:aa:56:f6:87:64:67:ce:94:6c:db:0e:e9:58:b7: 24:5b:c8:55:ff:8a:b5:23:24:f2:2b:c2:f6:09:0f:9b:06:ba: df:4a:bd:87:ae:34:82:c1:ec:8e:ba:29:5b:16:57:93:be:f5: 05:66:1f:5f:f1:80:f4:1d:56:22:6d:36:a1:5f:34:fa:4e:ae: 9f:e4:c9:8a:f2:72:bd:a6:0d:74:fe:d8:91:d9:af:2f:5a:a5: db:0f:07:69:34:72:ff:3d:0a:c4:af:d9:33:50:99:90:a7:7d: 57:04:e5:ca:11:90:64:18:05:e0:d2:1b:03:fc:25:7f:76:b7: 06:fa:2c:16 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI1MDMxNTAxMzA1NloXDTI2MDMxNTAxMzAwM1owMzEx MC8GA1UEAxMoRTIwRTZERjQzQTNGMDIwQURCNjc1QTIxRjNBOTFBQzREOEYzNTg2 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5dqBiMycxueI2318fn vbYkHehlQMVFWYAvTEGCTdwQfQAxW43MsaaIMI5doip4ANDyZn/3ft9y1bHsu3A8 22skfvcjPMFM8Afkm+RZsiJ/83DfQ2+zSHWkYKXxI1IYZ+lJqfp21Qv2QMQsC4Ef maQNGwlvXKxSlKNtZM/fTOIoh76nRFj7XzhkXugqjd+st9MhLUv8pX/8aBZyambh huDwUPRkW9hvtJnc+M7m9GghcW8ZAMU47J5Z/WnRKxdCLsnxtm5veNDNJHvfdXe9 ee9DDb/iE+0U3EjMiEa+vzlCLXRqIqZDDa3sjTAfd2+tN9IQI/Qeq6jC2CIkOCuQ vnECAwEAAaOCAoYwggKCMB0GA1UdDgQWBBTiDm30Oj8CCttnWiHzqRrE2PNYZzAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MjQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUyNC80ZzV0OURv X0FncmJaMW9oODZrYXhOanpXR2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwVJAMA0GCSqGSIb3DQEBCwUA A4IBAQDZuNJdBhfXjAzuKGzawfiUgTTkkQvKsx958o46Xxvwx1wk0qiSN/cm95Hq qoA1ecFJYvfKN0vs+ORXUV2mVctUyduY/y75Sqdpea5rlVl9xjAJ0o/wWGoWuyWn QWEtasLqLmv7FMvcGB8CExcxHDVMns/uMdvMuW0W0n4E3HbEX4Jaqlb2h2RnzpRs 2w7pWLckW8hV/4q1IyTyK8L2CQ+bBrrfSr2HrjSCweyOuilbFleTvvUFZh9f8YD0 HVYibTahXzT6Tq6f5MmK8nK9pg10/tiR2a8vWqXbDwdpNHL/PQrEr9kzUJmQp31X BOXKEZBkGAXg0hsD/CV/drcG+iwW -----END CERTIFICATE-----Generated at Sat Apr 5 07:22:19 2025 by rpki-client