$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer File: RsHMLWUoO-OBBxn16hqHkDA6Ink.cer (raw, json) Hash identifier: IdNFkfvBaAg4cWMKs3dEi93DoQnq1FYncKBteSzDJ+Y= Subject key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 11A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:42:06 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 157.15.254.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4521 (0x11a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 15 01:42:06 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:66:05:d5:60:08:60:be:5b:a9:26:b6:89: ef:60:0b:0e:34:af:10:de:a9:e2:78:06:a8:b5:20: 79:d3:ad:0d:6e:b0:25:2c:04:80:8c:a8:e4:49:c2: 9f:33:e9:b4:57:88:e7:aa:1c:40:1f:1b:18:01:20: 6a:a7:f5:e3:eb:a6:af:6d:11:96:b7:4b:9d:a2:ea: 6a:85:1c:f8:46:1a:36:79:66:03:bb:80:39:17:92: a2:b3:29:dc:4a:27:29:c2:14:f8:96:3c:0b:97:4f: 7c:ab:26:17:dc:e5:bb:ac:35:c5:99:96:e3:a1:71: fe:8b:4b:64:8e:d4:2c:f6:84:d9:73:73:ef:73:3c: 57:3c:ed:c2:fc:38:0d:89:13:09:68:ee:7d:e4:94: 59:d2:f8:55:76:f7:87:b6:a7:a2:0b:92:8d:11:d1: 31:ff:29:4d:bd:f0:0c:93:2c:33:1a:cf:c0:3b:ef: 47:23:50:9b:68:14:14:74:89:3f:ba:da:e2:9f:0f: 8d:9a:d1:6e:7b:23:09:40:80:26:0a:cc:8b:15:15: a9:e6:b1:e9:91:33:ca:55:14:85:a6:05:c3:2c:fc: 61:84:02:32:64:0c:8f:78:9a:53:5a:ce:1e:fc:37: 97:d3:4c:ad:a0:4a:d2:43:e6:c5:93:5a:56:14:1f: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.254.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:22:7f:9f:1a:ca:b2:54:e9:da:e4:c6:64:f4:d1:a8:22:bb: b6:84:85:28:3f:b3:45:7b:2f:56:ea:97:62:8d:77:88:a5:7d: 20:a5:05:0b:d9:88:e4:98:11:a4:09:39:a4:63:eb:3a:20:35: 5b:20:39:1a:fe:55:89:9b:d4:cf:95:ad:a6:1b:66:84:c1:2b: 03:51:c1:a0:ba:8f:a4:31:92:49:eb:07:9f:1b:6e:ae:5c:7e: 85:fa:00:7f:6c:c7:7a:96:da:78:5e:6d:9a:51:82:52:3e:d2: 15:87:7b:b4:cf:73:41:43:e1:33:75:e5:68:85:81:10:c4:d2: b3:06:4b:0b:15:6f:1a:4c:29:b1:23:87:9a:b0:53:f0:af:fa: 50:93:2c:88:a1:f0:9c:b0:ea:d3:81:db:86:0c:83:2f:70:61: c0:de:3a:5a:f4:f2:6f:1b:c5:65:a3:9a:01:65:6f:70:1e:49: 33:07:80:2c:89:e9:87:47:02:97:87:4a:ae:20:32:08:e9:6d: 52:4a:bd:a6:6c:77:59:a7:d5:84:54:e8:4a:8b:f7:a9:a8:8f: b1:4f:93:11:7a:90:b8:1b:1c:26:cc:4c:03:0f:67:84:95:e8: 7c:f9:46:4a:91:10:54:74:2c:a2:01:18:0d:f9:52:58:f1:8f: f7:87:d8:8c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEakwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDcxNTAxNDIwNloXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoNDZDMUNDMkQ2NTI4M0JFMzgxMDcxOUY1RUExQTg3OTAzMDNBMjI3 OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN20ZgXVYAhgvlupJraJ 72ALDjSvEN6p4ngGqLUgedOtDW6wJSwEgIyo5EnCnzPptFeI56ocQB8bGAEgaqf1 4+umr20RlrdLnaLqaoUc+EYaNnlmA7uAOReSorMp3EonKcIU+JY8C5dPfKsmF9zl u6w1xZmW46Fx/otLZI7ULPaE2XNz73M8Vzztwvw4DYkTCWjufeSUWdL4VXb3h7an oguSjRHRMf8pTb3wDJMsMxrPwDvvRyNQm2gUFHSJP7ra4p8PjZrRbnsjCUCAJgrM ixUVqeax6ZEzylUUhaYFwyz8YYQCMmQMj3iaU1rOHvw3l9NMraBK0kPmxZNaVhQf 4HUCAwEAAaOCAoswggKHMB0GA1UdDgQWBBRGwcwtZSg744EHGfXqGoeQMDoieTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNTIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjUyL1Jz SE1MV1VvTy1PQkJ4bjE2aHFIa0RBNkluay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdD/4wDQYJKoZIhvcN AQELBQADggEBAH4if58ayrJU6drkxmT00agiu7aEhSg/s0V7L1bql2KNd4ilfSCl BQvZiOSYEaQJOaRj6zogNVsgORr+VYmb1M+VraYbZoTBKwNRwaC6j6QxkknrB58b bq5cfoX6AH9sx3qW2nhebZpRglI+0hWHe7TPc0FD4TN15WiFgRDE0rMGSwsVbxpM KbEjh5qwU/Cv+lCTLIih8Jyw6tOB24YMgy9wYcDeOlr08m8bxWWjmgFlb3AeSTMH gCyJ6YdHApeHSq4gMgjpbVJKvaZsd1mn1YRU6EqL96moj7FPkxF6kLgbHCbMTAMP Z4SV6Hz5RkqREFR0LKIBGA35Uljxj/eH2Iw= -----END CERTIFICATE-----Generated at Mon Jul 21 08:45:18 2025 by rpki-client