$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/8-uYRxzD1rHIIF_DDeMCnwuSmQ4.cer File: 8-uYRxzD1rHIIF_DDeMCnwuSmQ4.cer (raw, json) Hash identifier: gUubYOxlLrawx73FoGnMwU/iwEK0VIb7NLasseI4nCY= Subject key identifier: F3:EB:98:47:1C:C3:D6:B1:C8:20:5F:C3:0D:E3:02:9F:0B:92:99:0E Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1197 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/8-uYRxzD1rHIIF_DDeMCnwuSmQ4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:39:20 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 157.101.0.0/18 IP: 157.101.192.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4503 (0x1197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 15 01:39:20 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=F3EB98471CC3D6B1C8205FC30DE3029F0B92990E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:51:39:a9:5d:67:6f:63:da:7c:32:bb:c2:a3: 36:6b:a6:b6:39:dd:ea:95:a9:ed:f0:3d:ee:ff:48: d8:95:1f:c7:30:8e:9d:43:08:7b:f6:d6:e6:dc:5e: 55:9c:16:b9:ae:d8:d3:f0:db:d6:57:f7:d8:d7:22: ee:bb:bf:6f:62:2e:03:7f:c9:fb:34:8f:d6:cf:fb: 4b:15:b0:7f:38:83:50:86:47:fc:ca:52:5e:c2:ac: 54:32:cc:de:8a:ef:d6:e4:e6:ab:26:5d:d8:85:80: 33:49:ee:8f:fe:24:c6:09:4b:7d:ab:e6:ad:49:b5: a5:ba:05:af:a0:e3:7c:7d:35:bc:7d:ed:3c:28:33: 93:0e:00:5c:8f:7b:6d:47:d7:a5:e7:bf:6f:87:eb: 99:98:87:72:a4:56:0d:31:81:06:54:1c:71:01:94: cd:bd:04:5c:ac:7a:20:01:9a:5a:2f:48:7d:94:c6: 09:37:5b:98:1d:a7:53:a8:e4:54:1c:48:b3:a8:20: 87:e7:a5:49:72:23:4b:f8:c2:7d:8f:c6:51:9b:ed: 7f:70:d1:19:63:52:fe:8a:67:78:72:35:ee:d6:39: 19:a0:b3:c8:74:83:96:7a:b5:8b:d6:11:8a:ab:d1: 52:06:61:0e:6e:1d:66:0e:9c:56:2c:43:ab:f6:10: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EB:98:47:1C:C3:D6:B1:C8:20:5F:C3:0D:E3:02:9F:0B:92:99:0E X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/8-uYRxzD1rHIIF_DDeMCnwuSmQ4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.101.0.0/18 157.101.192.0/19 Signature Algorithm: sha256WithRSAEncryption 6a:4d:e0:13:f9:61:a9:9b:c5:cb:f3:53:e4:ce:52:65:a8:22: aa:86:e5:ea:96:cd:46:83:9d:0f:7b:86:d1:e7:c2:26:d0:be: af:ce:af:24:41:e6:fa:a1:6d:05:3f:da:67:fc:93:5a:6f:bc: ea:a5:0c:c1:c6:da:a4:c2:88:94:53:ca:e4:39:95:21:c7:b2: 54:4f:6d:80:25:1b:e1:26:9a:d9:99:70:50:70:17:61:d2:48: cb:6f:d2:23:02:41:16:15:3b:68:32:98:fc:88:e6:e6:c7:78: 2b:5b:ab:9d:79:ac:b8:38:4c:cb:e8:3d:8c:d2:31:a8:fd:a3: 63:11:c8:85:45:a4:54:78:74:99:1e:98:03:4e:ab:59:a0:02: 06:aa:2b:a7:e0:95:16:29:45:d0:06:8d:36:e9:b9:33:dc:6d: ed:fb:ef:9e:58:8c:8c:7a:ee:34:37:5c:e9:d3:29:c8:04:1c: 64:be:75:18:38:82:0f:aa:9f:24:c1:7f:5b:45:a2:2e:f5:5a: 33:1a:a1:7a:43:23:94:f2:4c:a7:af:5c:3c:b3:4d:e5:8c:ac: a5:f9:af:4c:9b:d8:71:bc:31:84:3c:ff:a3:b2:be:3c:5c:00: 9e:a3:7c:89:58:fb:e6:57:15:e7:33:6b:bf:70:35:d9:97:00: 77:a4:1d:f4 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICEZcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDcxNTAxMzkyMFoXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoRjNFQjk4NDcxQ0MzRDZCMUM4MjA1RkMzMERFMzAyOUYwQjkyOTkw RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMxROaldZ29j2nwyu8Kj Nmumtjnd6pWp7fA97v9I2JUfxzCOnUMIe/bW5txeVZwWua7Y0/Db1lf32Nci7ru/ b2IuA3/J+zSP1s/7SxWwfziDUIZH/MpSXsKsVDLM3orv1uTmqyZd2IWAM0nuj/4k xglLfavmrUm1pboFr6DjfH01vH3tPCgzkw4AXI97bUfXpee/b4frmZiHcqRWDTGB BlQccQGUzb0EXKx6IAGaWi9IfZTGCTdbmB2nU6jkVBxIs6ggh+elSXIjS/jCfY/G UZvtf3DRGWNS/opneHI17tY5GaCzyHSDlnq1i9YRiqvRUgZhDm4dZg6cVixDq/YQ +TcCAwEAAaOCAoowggKGMB0GA1UdDgQWBBTz65hHHMPWscggX8MN4wKfC5KZDjAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MS8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTEvOC11WVJ4ekQx ckhJSUZfRERlTUNud3VTbVE0Lm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBp1lAAMEBZ1lwDANBgkqhkiG9w0B AQsFAAOCAQEAak3gE/lhqZvFy/NT5M5SZagiqobl6pbNRoOdD3uG0efCJtC+r86v JEHm+qFtBT/aZ/yTWm+86qUMwcbapMKIlFPK5DmVIceyVE9tgCUb4Saa2ZlwUHAX YdJIy2/SIwJBFhU7aDKY/Ijm5sd4K1urnXmsuDhMy+g9jNIxqP2jYxHIhUWkVHh0 mR6YA06rWaACBqorp+CVFilF0AaNNum5M9xt7fvvnliMjHruNDdc6dMpyAQcZL51 GDiCD6qfJMF/W0WiLvVaMxqhekMjlPJMp69cPLNN5YyspfmvTJvYcbwxhDz/o7K+ PFwAnqN8iVj75lcV5zNrv3A12ZcAd6Qd9A== -----END CERTIFICATE-----Generated at Mon Jul 21 08:54:19 2025 by rpki-client