$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer File: EwgiqaPTOrq2FTetw3QoZxC6DHc.cer (raw, json) Hash identifier: vg35jcI91Ws0hSxwW9ZYVepEOLHnS3UoztAC48FVYQ4= Subject key identifier: 13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 11BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:47:14 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 144.91.128.0 -- 144.91.175.255 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4543 (0x11bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 15 01:47:14 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=130822A9A3D33ABAB61537ADC374286710BA0C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:c2:b7:ab:33:88:7b:b5:8b:98:ed:e3:98: 16:b5:25:87:2c:72:bc:e0:e8:cd:6d:52:1f:ab:a8: 01:c4:95:36:9e:65:78:fb:a9:f7:e5:85:f6:32:72: 78:fd:d1:6d:8f:31:4c:3e:07:e0:96:ea:a2:0a:ca: 32:44:c3:72:6b:29:e7:72:25:6a:90:b6:48:21:dc: 0c:b0:75:8c:42:0d:3c:46:e5:c8:32:c0:14:96:82: 7d:b1:72:8e:15:c8:46:5a:e4:39:5f:d1:7a:a9:d7: f1:5d:6a:2a:3d:11:45:a7:dc:b4:ad:76:79:12:9d: 87:1d:4c:b4:a0:9e:96:24:dc:ef:04:e9:01:5d:ce: 8f:8c:20:18:df:cf:38:79:43:19:08:24:f0:e9:ea: 5f:3b:4b:d5:96:bb:0c:40:aa:fe:47:f7:ba:2f:c7: 24:a5:d5:23:5e:30:45:7a:bf:27:34:e4:4c:f4:23: 07:9a:0a:51:90:25:2e:7b:33:d2:e2:84:03:ae:a9: 6f:8d:26:d7:46:c5:2c:a1:2b:d7:1a:de:92:ae:20: e1:0b:3c:75:cc:8f:e5:ab:22:59:d0:7e:72:d3:a1: c7:45:9b:57:72:8e:84:30:e8:11:24:90:6c:4f:61: d4:28:cc:d7:96:fc:51:55:d1:13:dd:de:16:51:33: 3d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.91.128.0-144.91.175.255 Signature Algorithm: sha256WithRSAEncryption 47:cc:f4:bb:86:08:50:4d:da:a2:df:fc:15:f7:94:e6:b8:45: ef:24:06:61:c1:4c:e1:35:68:d3:6c:2f:0a:2b:11:9a:bb:f0: e0:64:0f:9f:53:14:43:92:1f:5b:3e:5c:c9:49:d9:25:73:e4: f9:1b:52:bd:b2:dd:09:12:37:c7:a1:e5:27:bf:55:dc:40:c6: 3a:5d:eb:45:9c:9b:ab:fb:1a:ca:10:2b:25:74:01:04:19:25: 1a:3d:d6:af:c5:0c:98:a5:4d:e2:2f:9e:d7:38:c5:a7:15:f6: 8d:a0:c0:0a:53:c6:ba:84:ac:14:92:ef:f3:48:50:b8:b7:ef: 2e:47:06:6c:c0:2c:ea:fd:1e:e5:10:56:74:80:ce:04:ab:c9: f4:be:5f:c7:d7:2c:d1:84:06:10:0f:a6:9b:77:1d:8b:7f:54: a5:33:0f:a5:ed:8c:b2:e4:c0:df:36:6a:af:a3:3e:0b:e8:ac: 92:bc:22:61:1a:bc:bb:59:df:27:61:33:93:28:27:17:e4:3a: ab:1a:5e:ca:5a:32:b8:cf:cf:83:9c:f0:ac:c7:05:98:da:63: c8:a9:0c:ec:ff:20:58:8d:f8:77:8d:32:ef:51:3e:df:6f:bf: ab:2a:8f:4e:ad:28:fa:bb:27:85:ab:2b:7b:f9:c6:a6:ff:01: 4d:3f:af:73 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICEb8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDcxNTAxNDcxNFoXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoMTMwODIyQTlBM0QzM0FCQUI2MTUzN0FEQzM3NDI4NjcxMEJBMEM3 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxPwrerM4h7tYuY7eOY FrUlhyxyvODozW1SH6uoAcSVNp5lePup9+WF9jJyeP3RbY8xTD4H4JbqogrKMkTD cmsp53IlapC2SCHcDLB1jEINPEblyDLAFJaCfbFyjhXIRlrkOV/ReqnX8V1qKj0R RafctK12eRKdhx1MtKCeliTc7wTpAV3Oj4wgGN/POHlDGQgk8OnqXztL1Za7DECq /kf3ui/HJKXVI14wRXq/JzTkTPQjB5oKUZAlLnsz0uKEA66pb40m10bFLKEr1xre kq4g4Qs8dcyP5asiWdB+ctOhx0WbV3KOhDDoESSQbE9h1CjM15b8UVXRE93eFlEz PdsCAwEAAaOCApMwggKPMB0GA1UdDgQWBBQTCCKpo9M6urYVN63DdChnELoMdzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTAyL0V3 Z2lxYVBUT3JxMkZUZXR3M1FvWnhDNkRIYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEB5BbgAMEBJBboDAN BgkqhkiG9w0BAQsFAAOCAQEAR8z0u4YIUE3aot/8FfeU5rhF7yQGYcFM4TVo02wv CisRmrvw4GQPn1MUQ5IfWz5cyUnZJXPk+RtSvbLdCRI3x6HlJ79V3EDGOl3rRZyb q/sayhArJXQBBBklGj3Wr8UMmKVN4i+e1zjFpxX2jaDAClPGuoSsFJLv80hQuLfv LkcGbMAs6v0e5RBWdIDOBKvJ9L5fx9cs0YQGEA+mm3cdi39UpTMPpe2MsuTA3zZq r6M+C+iskrwiYRq8u1nfJ2EzkygnF+Q6qxpeyloyuM/Pg5zwrMcFmNpjyKkM7P8g WI34d40y71E+32+/qyqPTq0o+rsnhasre/nGpv8BTT+vcw== -----END CERTIFICATE-----Generated at Mon Jul 21 08:44:08 2025 by rpki-client