$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer File: 9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer (raw, json) Hash identifier: jluCaEs4ohqrRuGy6luGKZEzNqhgH0eLm0RQNeK1QGA= Subject key identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 11B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:43:37 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 157.66.72.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4531 (0x11b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 15 01:43:37 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=F7FCBB98375357213F81D24BE1E19A8C64EBDD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:d5:b4:5e:1e:a5:ac:77:60:c3:c1:d6:b2: a0:27:36:f9:c7:8a:10:fd:7e:44:d4:4d:7a:8a:5f: b7:89:8f:41:3b:0d:1b:34:72:d3:51:a1:26:4f:01: 0c:f4:95:b7:73:8a:86:be:27:c5:84:62:2d:05:3b: 1a:67:e4:9b:5f:de:e4:8d:7e:d3:bf:96:ee:7b:ed: e3:7d:44:35:8d:60:00:dc:1c:3c:65:c5:e6:60:78: 07:6b:ba:1d:81:92:2a:92:44:79:10:5f:68:73:84: fd:d2:06:9c:f0:d8:9f:d9:d6:b4:5e:f2:80:42:76: 58:79:84:d0:25:0a:4f:ce:8a:4f:c6:b3:d3:40:be: 45:ae:e8:b0:b9:cd:1e:bd:b6:73:a4:52:ee:59:6e: 91:8d:e5:1e:bf:f9:ca:97:8a:14:45:40:d1:49:fe: 43:0c:7a:db:59:41:cb:d7:25:27:14:db:f3:fe:dd: 07:5c:34:cd:0d:c5:44:af:53:a5:14:e6:e7:f9:c5: a3:07:14:ea:79:34:d0:92:fd:19:2e:18:dc:5f:c8: 8c:cd:7f:ee:9d:b6:38:1c:b7:10:30:31:81:a7:a9: b8:0c:7d:47:d4:1e:15:0e:6f:fa:95:d3:18:aa:bc: 4f:8e:bf:e7:4e:3a:46:90:c3:65:ff:3b:d2:3c:2c: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.72.0/23 Signature Algorithm: sha256WithRSAEncryption 01:f1:97:72:02:41:0d:0a:bc:81:ed:95:66:d0:96:a5:6f:15: 83:86:0a:69:a9:8a:3c:f6:de:aa:01:14:04:a0:a6:09:be:e5: 76:f2:b2:bc:10:8c:a8:f4:a5:b3:ff:cf:07:0e:e0:5d:df:55: 5d:ac:18:f0:18:28:d5:c4:de:df:e3:1d:36:d8:01:91:4c:1f: ac:06:3a:d7:a8:f9:39:40:b6:5d:48:00:36:23:26:f3:a3:39: 81:6e:e5:c7:d2:f7:70:2f:60:67:04:fb:6b:08:c4:e5:33:d9: 66:4c:42:34:a0:a8:0f:ec:bf:90:4a:10:10:f0:cb:a6:0c:ed: 2a:70:9b:fa:02:08:08:6b:e8:04:2e:69:7e:a0:55:11:0a:02: db:c1:cc:c5:23:6a:40:47:4e:2c:41:df:bc:28:57:78:e3:30: a2:28:96:48:9c:10:0c:76:61:ee:71:2b:2f:4a:d2:78:d2:8d: 26:f9:1f:84:02:73:ea:ca:17:e6:ce:72:79:e6:6a:22:89:45: 68:ba:a6:53:3b:2c:44:5b:50:80:7c:49:bd:3e:ea:a8:b8:12: 6a:7e:64:63:bf:92:bd:c1:6e:66:e3:64:63:d0:05:9d:54:f3: 42:f1:fa:65:ff:6e:76:e7:b7:79:65:c7:8e:0e:04:98:4d:77: ac:44:a8:d8 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEbMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDcxNTAxNDMzN1oXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoRjdGQ0JCOTgzNzUzNTcyMTNGODFEMjRCRTFFMTlBOEM2NEVCREQw QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANG91bReHqWsd2DDwday oCc2+ceKEP1+RNRNeopft4mPQTsNGzRy01GhJk8BDPSVt3OKhr4nxYRiLQU7Gmfk m1/e5I1+07+W7nvt431ENY1gANwcPGXF5mB4B2u6HYGSKpJEeRBfaHOE/dIGnPDY n9nWtF7ygEJ2WHmE0CUKT86KT8az00C+Ra7osLnNHr22c6RS7llukY3lHr/5ypeK FEVA0Un+Qwx621lBy9clJxTb8/7dB1w0zQ3FRK9TpRTm5/nFowcU6nk00JL9GS4Y 3F/IjM1/7p22OBy3EDAxgaepuAx9R9QeFQ5v+pXTGKq8T46/5046RpDDZf870jws JfsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBT3/LuYN1NXIT+B0kvh4ZqMZOvdCzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjU3Lzlf eTdtRGRUVnlFX2dkSkw0ZUdhakdUcjNRcy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQkgwDQYJKoZIhvcN AQELBQADggEBAAHxl3ICQQ0KvIHtlWbQlqVvFYOGCmmpijz23qoBFASgpgm+5Xby srwQjKj0pbP/zwcO4F3fVV2sGPAYKNXE3t/jHTbYAZFMH6wGOteo+TlAtl1IADYj JvOjOYFu5cfS93AvYGcE+2sIxOUz2WZMQjSgqA/sv5BKEBDwy6YM7Spwm/oCCAhr 6AQuaX6gVREKAtvBzMUjakBHTixB37woV3jjMKIolkicEAx2Ye5xKy9K0njSjSb5 H4QCc+rKF+bOcnnmaiKJRWi6plM7LERbUIB8Sb0+6qi4Emp+ZGO/kr3BbmbjZGPQ BZ1U80Lx+mX/bnbnt3llx44OBJhNd6xEqNg= -----END CERTIFICATE-----Generated at Mon Jul 21 08:54:14 2025 by rpki-client