$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/OOA7GOMKX7R-6x8-BJVakKO0pic.cer File: OOA7GOMKX7R-6x8-BJVakKO0pic.cer (raw, json) Hash identifier: 8zVHK9PVjmKP4xTbmiPxgDBQZ/5fpxEhFA92T7X5JBQ= Subject key identifier: 38:E0:3B:18:E3:0A:5F:B4:7E:EB:1F:3E:04:95:5A:90:A3:B4:A6:27 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 53E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:42:35 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 2001:df6:580::/48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21480 (0x53e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:42:35 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=38E03B18E30A5FB47EEB1F3E04955A90A3B4A627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:79:13:5a:dd:b1:54:97:5b:e5:19:3c:f9:ca: 8a:15:e0:7c:d2:47:3a:8c:53:94:ca:29:18:37:91: 95:2b:1f:11:e7:32:02:55:b3:46:b8:e0:d6:bc:60: 00:17:3f:02:54:f2:b2:36:15:8d:76:de:a3:05:ea: c5:91:3a:ef:51:7b:c5:c1:5e:5b:b5:7a:80:ca:6e: 48:64:2e:50:a2:f1:11:5c:32:f6:25:34:30:65:bd: 92:7d:5e:93:a5:6d:2f:16:f9:4c:b6:a7:ef:62:f2: 14:10:f6:35:6a:ba:6e:40:02:89:ba:35:27:bb:68: de:8e:91:0f:89:04:23:e5:4a:9c:d4:d3:9e:b1:69: 37:d6:a6:92:87:37:f8:82:fe:64:e4:dc:d8:ec:d4: 54:d8:fd:50:1c:fc:30:50:4e:04:03:9c:79:3e:3d: 59:95:52:2c:c9:f2:bd:57:31:5f:f8:74:70:98:c7: c2:a0:f9:6d:73:0b:63:74:d2:84:3c:ee:63:8e:85: ed:e1:1f:ac:f3:1b:60:ff:d8:40:10:34:8a:e6:b4: 5a:2d:3d:37:54:29:00:9f:f5:a0:75:cc:81:cc:c1: e4:db:01:d8:f2:ef:c2:1f:12:c0:30:ec:d6:0c:fe: 03:13:20:9d:99:70:79:31:08:cd:ee:30:24:66:4e: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E0:3B:18:E3:0A:5F:B4:7E:EB:1F:3E:04:95:5A:90:A3:B4:A6:27 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39057/OOA7GOMKX7R-6x8-BJVakKO0pic.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:580::/48 Signature Algorithm: sha256WithRSAEncryption 2c:10:c2:46:72:a4:76:a9:27:be:ad:63:eb:f4:71:fd:56:ef: e0:d3:24:7b:78:4d:72:95:b6:2a:bc:6e:82:6d:26:45:4a:73: 9b:38:f9:f0:e7:08:76:0b:2f:6b:d8:fb:30:43:12:5c:ef:7e: ad:68:53:29:f7:22:39:0f:29:d6:3b:7d:f7:64:02:d1:ab:6f: bd:4c:98:56:0d:33:3d:58:f6:46:b8:03:b6:58:34:30:ea:a8: bf:18:4c:be:43:b5:6e:a4:68:d5:ea:cc:84:8c:e8:47:96:03: 6c:dd:f1:e9:6b:7e:c8:6d:a9:4c:85:9b:d5:fe:33:a7:7b:8f: 27:d1:d8:b8:5c:98:25:f1:4c:29:f7:21:79:6c:c2:3b:c3:aa: 10:bb:69:4f:c3:cd:32:ed:9f:74:86:51:04:87:06:a3:22:6d: a1:d0:9a:81:94:6f:2d:9a:f5:68:39:f1:cd:ed:53:c0:bd:50: a4:c7:72:71:65:50:95:86:e9:c4:94:e8:90:a9:2f:e7:dc:67: d7:8c:b5:17:04:23:a5:5a:7a:b8:ce:02:51:e6:d0:3b:4b:9f: 2f:06:a2:eb:36:10:6c:ab:18:1b:a2:8f:e1:28:a8:fd:b2:2e: 7a:31:d7:49:be:5e:5a:9d:00:b0:9b:ef:89:5d:b6:e7:2c:72: 5e:85:cc:68 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICU+gwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDcxNTAxNDIzNVoXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoMzhFMDNCMThFMzBBNUZCNDdFRUIxRjNFMDQ5NTVBOTBBM0I0QTYy NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJZ5E1rdsVSXW+UZPPnK ihXgfNJHOoxTlMopGDeRlSsfEecyAlWzRrjg1rxgABc/AlTysjYVjXbeowXqxZE6 71F7xcFeW7V6gMpuSGQuUKLxEVwy9iU0MGW9kn1ek6VtLxb5TLan72LyFBD2NWq6 bkACibo1J7to3o6RD4kEI+VKnNTTnrFpN9amkoc3+IL+ZOTc2OzUVNj9UBz8MFBO BAOceT49WZVSLMnyvVcxX/h0cJjHwqD5bXMLY3TShDzuY46F7eEfrPMbYP/YQBA0 iua0Wi09N1QpAJ/1oHXMgczB5NsB2PLvwh8SwDDs1gz+AxMgnZlweTEIze4wJGZO MHECAwEAAaOCAo4wggKKMB0GA1UdDgQWBBQ44DsY4wpftH7rHz4ElVqQo7SmJzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzkwNTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM5MDU3L09P QTdHT01LWDdSLTZ4OC1CSlZha0tPMHBpYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ32BYAwDQYJKoZI hvcNAQELBQADggEBACwQwkZypHapJ76tY+v0cf1W7+DTJHt4TXKVtiq8boJtJkVK c5s4+fDnCHYLL2vY+zBDElzvfq1oUyn3IjkPKdY7ffdkAtGrb71MmFYNMz1Y9ka4 A7ZYNDDqqL8YTL5DtW6kaNXqzISM6EeWA2zd8elrfshtqUyFm9X+M6d7jyfR2Lhc mCXxTCn3IXlswjvDqhC7aU/DzTLtn3SGUQSHBqMibaHQmoGUby2a9Wg58c3tU8C9 UKTHcnFlUJWG6cSU6JCpL+fcZ9eMtRcEI6VaerjOAlHm0DtLny8Gous2EGyrGBui j+EoqP2yLnox10m+XlqdALCb74ldtucscl6FzGg= -----END CERTIFICATE-----Generated at Tue Jul 22 21:19:35 2025 by rpki-client