$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer File: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer (raw, json) Hash identifier: ic/KgCd4Ym/caY1r7uQ6eLcXXC+b5E54PfmoAq2l6Do= Subject key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 582F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:31:16 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 202.213.72.0/21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22575 (0x582f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:31:16 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:8b:53:16:a5:a7:f2:07:b0:e5:f6:60:f6: 47:31:3c:44:47:38:11:5c:09:13:34:99:93:c4:94: 48:cd:64:49:d7:0e:74:6a:ae:43:a3:0f:74:dc:8c: 42:45:6a:3f:1f:69:63:44:1f:4d:4a:37:63:e5:c9: 42:57:b1:5b:61:64:57:aa:94:0f:ca:9e:8e:6d:98: 4b:ca:38:6f:9f:d6:7e:b5:e1:95:69:13:62:f4:76: 34:53:1f:bb:e4:9e:84:d4:4c:7b:33:21:15:2e:43: 4b:52:86:66:2d:95:6e:a9:40:7d:04:f9:4d:24:cf: 92:a3:b6:9b:da:38:cd:44:05:35:2b:1a:2f:63:ec: a6:78:77:14:92:ed:4c:40:cc:81:e2:60:94:cf:3b: ae:04:12:5b:ca:b7:7f:ca:68:46:1d:97:21:02:6a: b2:3b:4c:3d:ca:cd:5d:72:e6:19:53:9d:cd:af:76: d0:2c:47:66:5f:fc:d3:f9:55:8b:2b:12:52:c8:73: c1:a6:3a:76:2c:1e:58:04:87:eb:78:90:63:7c:ed: f7:5e:c2:6c:8b:71:07:a9:75:41:36:3b:8d:cb:4e: 37:46:c6:2f:3b:4e:23:bd:8f:62:7d:c1:2c:ad:0a: 80:16:0a:25:e4:53:71:80:e8:fb:31:3e:87:45:8d: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.213.72.0/21 Signature Algorithm: sha256WithRSAEncryption 61:09:c1:54:58:7e:19:81:0e:ba:71:ac:73:d6:79:c4:40:df: 35:29:ca:d1:9a:66:b7:41:83:fe:4f:7d:47:4c:6b:d0:c4:a7: d1:c6:aa:87:45:b4:c2:4a:d1:02:dc:96:b3:b9:c5:f1:26:9d: ec:15:79:72:c7:26:31:d1:29:ef:2c:4e:de:ec:8c:53:3f:9b: 80:ce:f3:a3:b5:f9:a8:7d:7e:cd:8b:f7:be:d8:87:29:7d:a3: f9:b1:17:06:b5:dd:8b:5f:26:66:f5:06:81:cb:12:7c:53:77: 65:a3:59:d5:8c:82:9c:47:15:1b:dc:1b:a7:bd:7a:3d:6a:8e: 8b:54:73:ba:d8:43:c4:55:55:30:23:0f:f7:15:bb:d6:d6:44: 03:9f:d4:29:80:ff:b3:b1:3d:63:cd:0c:4c:1c:31:5c:c0:57: c9:14:1b:dc:9e:84:7b:df:53:70:bc:f5:97:79:f9:10:8a:a4: d7:0e:0e:ec:25:66:40:ef:3f:7f:c4:88:6a:26:93:42:0a:bf: fa:92:74:a0:ee:98:c1:ec:b8:ae:9c:a7:f8:de:5e:88:2e:da: 58:15:0d:10:66:74:af:71:b3:00:d0:3c:18:81:e4:43:00:d0: ca:9c:cf:59:d3:d6:04:34:3c:19:5a:d1:da:33:a9:3d:7f:f1: 53:40:15:79 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICWC8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxMzExNloXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoRTU0RDBBNzMyQ0UxQzY1MTRBMzRBM0QwNkU5MTZCMUM0RkI4QUEw QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMW4i1MWpafyB7Dl9mD2 RzE8REc4EVwJEzSZk8SUSM1kSdcOdGquQ6MPdNyMQkVqPx9pY0QfTUo3Y+XJQlex W2FkV6qUD8qejm2YS8o4b5/WfrXhlWkTYvR2NFMfu+SehNRMezMhFS5DS1KGZi2V bqlAfQT5TSTPkqO2m9o4zUQFNSsaL2Pspnh3FJLtTEDMgeJglM87rgQSW8q3f8po Rh2XIQJqsjtMPcrNXXLmGVOdza920CxHZl/80/lViysSUshzwaY6diweWASH63iQ Y3zt917CbItxB6l1QTY7jctON0bGLztOI72PYn3BLK0KgBYKJeRTcYDo+zE+h0WN 1tECAwEAAaOCAoQwggKAMB0GA1UdDgQWBBTlTQpzLOHGUUo0o9BukWscT7iqCjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC85Ni8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOTYvNVUwS2N5emh4 bEZLTktQUWJwRnJIRS00cWdvLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8rVSDANBgkqhkiG9w0BAQsFAAOC AQEAYQnBVFh+GYEOunGsc9Z5xEDfNSnK0Zpmt0GD/k99R0xr0MSn0caqh0W0wkrR AtyWs7nF8Sad7BV5cscmMdEp7yxO3uyMUz+bgM7zo7X5qH1+zYv3vtiHKX2j+bEX BrXdi18mZvUGgcsSfFN3ZaNZ1YyCnEcVG9wbp716PWqOi1RzuthDxFVVMCMP9xW7 1tZEA5/UKYD/s7E9Y80MTBwxXMBXyRQb3J6Ee99TcLz1l3n5EIqk1w4O7CVmQO8/ f8SIaiaTQgq/+pJ0oO6Ywey4rpyn+N5eiC7aWBUNEGZ0r3GzANA8GIHkQwDQypzP WdPWBDQ8GVrR2jOpPX/xU0AVeQ== -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:37 2025 by rpki-client