$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer File: F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer (raw, json) Hash identifier: 55wwgfRgXcENoN47A4X4jcyPYaS8hoFyog/G0NBnd+g= Subject key identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 52A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:33:06 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 2001:278::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 16:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21157 (0x52a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:33:06 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=1778E6B176325C05F3A17CD7DAA127F602CE5A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:a1:58:52:a9:f6:1a:20:f8:51:d9:69:a6: 8b:36:c4:2d:4d:f8:82:cb:2d:c3:4d:d0:ba:3e:86: db:aa:26:d1:d4:09:37:f0:04:ed:a0:7b:17:c2:0f: 5b:e2:a3:b4:9c:85:39:c5:d2:07:96:be:c3:6b:6a: 2b:7a:55:d8:ed:ee:cd:3b:56:14:42:71:c9:5b:5c: 78:44:c9:24:c9:20:b7:99:0e:39:35:da:9a:cd:41: c8:20:2b:7b:94:8f:ad:f9:f7:fd:dc:5b:de:ce:f3: 75:7f:dc:3c:d7:bd:79:48:6f:df:9c:6c:40:b7:8b: c7:dc:58:55:2c:1b:5b:31:bf:f4:d7:20:fc:47:be: 3a:3d:2b:d1:8e:10:ca:3f:ae:7d:36:cf:eb:8a:0b: 66:19:c8:bd:0e:9a:fd:75:e2:54:63:d6:09:53:02: b3:67:5e:ce:d9:9d:c8:bf:63:bc:28:4e:c6:28:fb: eb:b8:0a:df:a7:75:83:96:cd:bd:e0:ef:5d:29:2c: b9:65:6d:3c:b9:55:de:69:8b:7d:b3:e0:06:f1:0d: cf:45:1c:e4:c2:46:be:72:00:cf:ee:9c:a8:c7:fa: 9f:e4:0b:41:f0:50:38:05:21:3f:96:53:ff:bf:01: b5:9b:e9:71:70:9b:89:58:cc:a1:bc:3b:26:ab:d5: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:278::/32 Signature Algorithm: sha256WithRSAEncryption 24:8c:06:b6:20:2c:2a:a2:54:5e:ce:29:55:a9:89:5f:2a:c3: 9d:7c:92:28:e3:43:88:6d:55:9d:d6:3a:95:39:16:7b:13:42: c1:57:d5:21:c6:a4:c6:bc:9b:f3:6b:1c:18:04:de:8d:66:24: 99:d9:7f:16:f1:22:33:22:16:21:1a:b5:ad:b9:68:1c:52:69: d5:98:c2:7c:db:3e:32:89:05:14:f9:53:14:82:a6:cf:03:bd: 26:36:b9:c5:cb:70:c9:c6:59:b7:86:bf:2f:17:b6:b0:8a:20: aa:86:d3:33:c8:be:56:fd:b7:a6:a5:81:26:c4:40:1d:6c:75: af:88:52:c8:c8:fa:b3:53:ee:df:0c:4d:6d:45:da:bc:06:cb: ab:db:2b:8f:04:09:58:0d:73:a2:1a:62:77:d8:f9:dd:79:38: de:dc:09:a6:a4:47:3b:90:15:7f:e4:69:f1:f9:bf:b5:ef:28: 5a:55:92:cd:f3:fa:69:fb:31:7c:11:40:ff:9f:75:78:77:4e: 0a:e6:f2:1e:5d:7d:fd:a1:d0:c8:74:d8:e8:36:7c:2e:09:fa: 48:4f:bf:32:44:9a:4a:ba:0c:d0:0d:fe:f1:db:0b:fd:ee:70: 3e:0d:44:ea:06:c7:c2:72:3f:a5:cc:ea:e5:11:0f:da:00:9c: 4d:c3:01:5d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICUqUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDcxNTAxMzMwNloXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoMTc3OEU2QjE3NjMyNUMwNUYzQTE3Q0Q3REFBMTI3RjYwMkNFNUEw MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3XoVhSqfYaIPhR2Wmm izbELU34gsstw03Quj6G26om0dQJN/AE7aB7F8IPW+KjtJyFOcXSB5a+w2tqK3pV 2O3uzTtWFEJxyVtceETJJMkgt5kOOTXams1ByCAre5SPrfn3/dxb3s7zdX/cPNe9 eUhv35xsQLeLx9xYVSwbWzG/9Ncg/Ee+Oj0r0Y4Qyj+ufTbP64oLZhnIvQ6a/XXi VGPWCVMCs2deztmdyL9jvChOxij767gK36d1g5bNveDvXSksuWVtPLlV3mmLfbPg BvENz0Uc5MJGvnIAz+6cqMf6n+QLQfBQOAUhP5ZT/78BtZvpcXCbiVjMobw7JqvV W/cCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQXeOaxdjJcBfOhfNfaoSf2As5aATAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwMjIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDIyL0Yz am1zWFl5WEFYem9YelgycUVuOWdMT1dnRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQJ4MA0GCSqGSIb3 DQEBCwUAA4IBAQAkjAa2ICwqolRezilVqYlfKsOdfJIo40OIbVWd1jqVORZ7E0LB V9UhxqTGvJvzaxwYBN6NZiSZ2X8W8SIzIhYhGrWtuWgcUmnVmMJ82z4yiQUU+VMU gqbPA70mNrnFy3DJxlm3hr8vF7awiiCqhtMzyL5W/bempYEmxEAdbHWviFLIyPqz U+7fDE1tRdq8Bsur2yuPBAlYDXOiGmJ32PndeTje3AmmpEc7kBV/5Gnx+b+17yha VZLN8/pp+zF8EUD/n3V4d04K5vIeXX39odDIdNjoNnwuCfpIT78yRJpKugzQDf7x 2wv97nA+DUTqBsfCcj+lzOrlEQ/aAJxNwwFd -----END CERTIFICATE-----Generated at Mon Jul 21 18:54:10 2025 by rpki-client