$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer File: RJV2NHCVBo-WRmvzqO-pg-MncRY.cer (raw, json) Hash identifier: 2WUskryKk+TblpUlvWWNBMnjk7TDEkyoBfNV1xilnKc= Subject key identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 47B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Mar 2025 01:36:24 +0000 Certificate not after: Sun 15 Mar 2026 01:30:03 +0000 Subordinate resources: IP: 2401:3600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18361 (0x47b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000 Validity Not Before: Mar 15 01:36:24 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=449576347095068F96466BF3A8EFA983E3277116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:f6:dc:1f:9a:81:39:15:71:51:97:12:fa: 4d:ee:63:25:5f:ce:12:78:97:2a:bd:ca:90:7b:0e: ae:59:ee:77:31:a3:24:cf:86:51:3c:65:ce:d6:f8: 50:bd:95:b5:e0:e9:cb:3f:c3:32:c5:6e:ad:1a:18: e7:fa:77:5f:c1:05:99:c6:63:91:62:b4:af:9d:5b: 70:41:78:9a:29:3c:fd:60:56:be:fa:2c:c5:d2:53: 26:9a:0b:48:ed:3f:7b:b0:46:13:6c:c3:d4:29:ad: 05:c1:d6:55:e7:17:43:ba:3b:50:26:c9:8c:c2:54: a8:b8:a6:e6:ff:a4:99:de:27:2d:95:d6:1f:91:b5: c8:06:f1:8a:f7:e7:b2:30:36:17:3d:76:da:50:84: bc:45:3f:bb:ab:f1:57:ad:8e:12:df:9a:1f:7e:de: 40:77:40:16:d2:2c:82:d3:6f:ea:38:91:5e:95:42: 70:6c:15:ed:6a:af:ae:6f:46:df:76:8c:62:12:63: bb:ab:e7:01:0a:5a:6b:2c:7c:4b:15:1e:85:ce:99: 62:ff:0d:dc:72:32:21:de:89:8a:0d:e4:4e:cb:1b: d1:c2:16:f8:01:08:b6:8e:13:45:ff:52:ab:9d:b7: 52:cd:88:8c:82:06:38:fd:93:8b:88:71:42:9e:44: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:3600::/32 Signature Algorithm: sha256WithRSAEncryption 11:e9:47:d1:81:cf:91:db:72:b5:72:e3:c8:f9:1d:b0:ab:df: 9f:4b:75:be:8c:ad:1f:22:fe:ab:c3:16:87:34:cf:73:cb:2b: 5f:c1:ed:79:bd:b1:02:2a:14:bc:33:b8:89:f3:56:5b:04:d1: 81:bf:d1:af:6d:a5:de:55:3b:37:8b:65:01:00:77:6f:a0:c0: 3f:ac:1b:6a:46:3b:6f:cd:1e:ff:d8:73:b4:46:11:98:92:b5: 94:b0:8a:b7:f9:39:04:d5:4e:51:57:16:03:d5:47:9e:4f:3d: 68:5d:b4:00:3e:0d:9f:32:49:58:58:ae:bf:fa:d0:4e:32:4a: c5:27:60:b6:78:01:16:1e:53:83:7d:51:1b:b8:1c:52:35:9c: 57:03:42:fc:00:92:9a:53:b1:ce:ee:a0:23:ef:77:84:16:63: 89:76:9b:25:c5:02:f7:c4:89:7e:b6:03:49:1f:c1:db:b3:cc: de:d0:7e:99:ad:59:76:9e:26:3d:97:cc:06:8d:e0:58:1e:1b: 14:6c:14:e8:3c:77:73:f0:85:bf:1b:ea:a6:ad:e9:6a:fe:02: 43:bf:11:b7:53:c3:e8:e9:69:1b:36:c4:30:40:6d:7a:91:6b: 98:9d:ce:6e:b7:a1:da:5d:c2:79:8a:24:03:92:b7:29:80:2b: b2:6b:5d:4c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICR7kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDMxNTAxMzYyNFoXDTI2MDMxNTAxMzAwM1owMzEx MC8GA1UEAxMoNDQ5NTc2MzQ3MDk1MDY4Rjk2NDY2QkYzQThFRkE5ODNFMzI3NzEx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrS9twfmoE5FXFRlxL6 Te5jJV/OEniXKr3KkHsOrlnudzGjJM+GUTxlztb4UL2VteDpyz/DMsVurRoY5/p3 X8EFmcZjkWK0r51bcEF4mik8/WBWvvosxdJTJpoLSO0/e7BGE2zD1CmtBcHWVecX Q7o7UCbJjMJUqLim5v+kmd4nLZXWH5G1yAbxivfnsjA2Fz122lCEvEU/u6vxV62O Et+aH37eQHdAFtIsgtNv6jiRXpVCcGwV7Wqvrm9G33aMYhJju6vnAQpaayx8SxUe hc6ZYv8N3HIyId6Jig3kTssb0cIW+AEIto4TRf9Sq523Us2IjIIGOP2Ti4hxQp5E NpUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRElXY0cJUGj5ZGa/Oo76mD4ydxFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTMzL1JK VjJOSENWQm8tV1JtdnpxTy1wZy1NbmNSWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATYAMA0GCSqGSIb3 DQEBCwUAA4IBAQAR6UfRgc+R23K1cuPI+R2wq9+fS3W+jK0fIv6rwxaHNM9zyytf we15vbECKhS8M7iJ81ZbBNGBv9GvbaXeVTs3i2UBAHdvoMA/rBtqRjtvzR7/2HO0 RhGYkrWUsIq3+TkE1U5RVxYD1UeeTz1oXbQAPg2fMklYWK6/+tBOMkrFJ2C2eAEW HlODfVEbuBxSNZxXA0L8AJKaU7HO7qAj73eEFmOJdpslxQL3xIl+tgNJH8Hbs8ze 0H6ZrVl2niY9l8wGjeBYHhsUbBToPHdz8IW/G+qmrelq/gJDvxG3U8Po6WkbNsQw QG16kWuYnc5ut6HaXcJ5iiQDkrcpgCuya11M -----END CERTIFICATE-----Generated at Sat Apr 5 07:22:24 2025 by rpki-client