$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer File: 4qCwBJ8aPRI9yspc61tOXp7HlNc.cer (raw, json) Hash identifier: gFTqIFtJbT3NisQ5LorvIBLTPLnqz2vXnvZEiUcQlLA= Subject key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0F37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Mar 2025 01:38:01 +0000 Certificate not after: Sun 15 Mar 2026 01:30:03 +0000 Subordinate resources: IP: 160.27.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3895 (0xf37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000 Validity Not Before: Mar 15 01:38:01 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bc:6a:b6:a9:23:69:f2:e2:1f:16:24:23:bc: 7b:7e:76:cc:7c:31:ff:5a:60:4e:fd:47:55:52:d8: 8c:65:f5:fe:f6:ed:64:f0:a8:bd:80:fe:50:8e:13: 66:e7:08:e9:6e:ea:48:fb:02:75:19:40:81:42:ea: 9a:eb:36:18:97:03:f8:a4:c0:60:a4:10:41:b5:bf: 2f:e5:70:b1:ec:4b:cf:a9:0a:6a:00:47:6f:3b:03: 09:84:b9:dc:4e:f6:f7:90:fc:c5:56:be:88:cb:7b: 68:51:62:d6:36:5c:31:45:f6:29:b1:0a:60:ce:76: 39:cb:fb:ad:49:f2:2d:31:d6:48:91:06:82:d2:27: b5:25:84:32:12:b3:c8:df:8a:33:28:72:d8:4d:6e: d0:c6:4b:ad:bf:ed:3f:a2:37:57:69:d1:ea:95:2e: c4:40:93:11:43:4c:21:80:1b:8d:f7:cd:6a:61:11: 63:9b:02:2b:39:63:6d:e4:9a:42:7a:16:99:25:36: 45:fe:aa:ad:d2:eb:a4:20:a6:10:5d:60:e0:b8:66: af:66:a7:74:0e:82:2b:97:26:33:e1:0e:00:90:f8: 6b:29:53:48:a5:10:a8:e0:c6:91:53:8b:0f:89:af: 58:61:af:2e:6f:3e:31:2d:a3:35:14:3b:26:97:66: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:31:5e:36:10:42:a6:95:9e:82:92:bb:1c:37:b2:fa:eb:ae: f6:4d:18:dc:48:c4:0d:5c:ff:f3:6d:c3:7f:b0:a6:4e:95:64: 2e:84:e7:c6:fc:ef:88:d7:73:c3:2e:76:33:b1:99:03:d9:d4: d0:9d:06:05:ba:20:fe:7f:4e:9b:4e:0c:47:2b:d3:8d:1b:66: 0a:8a:ea:b2:c9:21:13:60:18:f1:03:f7:3a:af:80:9b:d0:f7: 1b:f3:47:ed:56:a1:bd:b1:b0:71:91:74:f8:98:63:e8:f8:18: 4a:0c:72:ed:a5:d7:67:b9:6d:f6:35:12:27:24:0f:1b:2b:fe: dc:0e:bc:76:66:29:ce:64:f9:f6:3e:12:3b:c0:9c:88:d9:74: 4a:e3:0e:49:f9:75:c9:3c:2f:a2:18:53:c0:b6:a1:db:3a:4c: d2:e4:f7:f6:e8:98:9d:21:70:5b:d9:08:b8:12:6f:39:80:b0: 69:7b:c6:a4:dd:9f:26:21:5c:ba:80:51:12:a2:d5:67:89:29: fd:57:fb:0c:59:f4:71:b5:63:0a:27:8e:e4:86:f5:77:de:b8: 72:09:e4:32:77:67:2b:78:52:12:6d:5c:a5:ce:81:aa:19:85: 5f:6b:c4:dc:c7:c8:11:ff:5a:d0:29:73:25:a8:52:23:12:89: 04:0e:30:3e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICDzcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDMxNTAxMzgwMVoXDTI2MDMxNTAxMzAwM1owMzEx MC8GA1UEAxMoRTJBMEIwMDQ5RjFBM0QxMjNEQ0FDQTVDRUI1QjRFNUU5RUM3OTRE NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOy8arapI2ny4h8WJCO8 e352zHwx/1pgTv1HVVLYjGX1/vbtZPCovYD+UI4TZucI6W7qSPsCdRlAgULqmus2 GJcD+KTAYKQQQbW/L+VwsexLz6kKagBHbzsDCYS53E7295D8xVa+iMt7aFFi1jZc MUX2KbEKYM52Ocv7rUnyLTHWSJEGgtIntSWEMhKzyN+KMyhy2E1u0MZLrb/tP6I3 V2nR6pUuxECTEUNMIYAbjffNamERY5sCKzljbeSaQnoWmSU2Rf6qrdLrpCCmEF1g 4Lhmr2andA6CK5cmM+EOAJD4aylTSKUQqODGkVOLD4mvWGGvLm8+MS2jNRQ7Jpdm CtcCAwEAAaOCAoowggKGMB0GA1UdDgQWBBTioLAEnxo9Ej3KylzrW05enseU1zAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTAyNDcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzEwMjQ3LzRx Q3dCSjhhUFJJOXlzcGM2MXRPWHA3SGxOYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCgGzANBgkqhkiG9w0B AQsFAAOCAQEAXjFeNhBCppWegpK7HDey+uuu9k0Y3EjEDVz/823Df7CmTpVkLoTn xvzviNdzwy52M7GZA9nU0J0GBbog/n9Om04MRyvTjRtmCorqsskhE2AY8QP3Oq+A m9D3G/NH7VahvbGwcZF0+Jhj6PgYSgxy7aXXZ7lt9jUSJyQPGyv+3A68dmYpzmT5 9j4SO8CciNl0SuMOSfl1yTwvohhTwLah2zpM0uT39uiYnSFwW9kIuBJvOYCwaXvG pN2fJiFcuoBREqLVZ4kp/Vf7DFn0cbVjCieO5Ib1d964cgnkMndnK3hSEm1cpc6B qhmFX2vE3MfIEf9a0ClzJahSIxKJBA4wPg== -----END CERTIFICATE-----Generated at Sat Apr 5 07:20:43 2025 by rpki-client