$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer File: Tz5jlsnXbL307S1d56KnYCFMmDc.cer (raw, json) Hash identifier: Jr2RT4OPNQ4PK0CP+QIPztIwEzxOTG3+X2dMa8qBHrI= Subject key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 479E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Mar 2025 01:35:56 +0000 Certificate not after: Sun 15 Mar 2026 01:30:03 +0000 Subordinate resources: IP: 14.102.192.0/19 IP: 14.128.16.0/20 IP: 101.203.192.0/18 IP: 103.140.200.0/23 IP: 112.137.184.0/21 IP: 112.140.32.0/19 IP: 112.140.128.0/20 IP: 180.211.72.0/21 IP: 180.214.0.0/18 IP: 202.226.52.0/22 IP: 203.140.224.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18334 (0x479e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000 Validity Not Before: Mar 15 01:35:56 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:dc:c8:bb:c9:ca:57:39:a8:2e:2f:3b:c4: 2d:0f:52:f0:68:87:e0:6f:53:4c:63:e2:3f:cb:50: ac:76:10:6f:75:26:3f:25:78:9e:c5:ee:3b:2c:fc: d3:6e:63:d1:3e:ec:8e:38:45:38:78:b3:3b:fd:f5: 34:3d:71:07:56:ed:53:e3:9c:f0:99:00:a8:91:88: c7:0c:20:92:c4:f7:22:39:5a:b5:dd:99:17:7d:69: 57:15:0f:0d:b9:92:33:00:ad:f1:09:ca:b6:0a:f8: 6d:fe:9c:63:d4:a5:8e:9d:37:97:d9:6b:dc:66:58: e4:76:f4:5e:2c:ac:c9:c6:8f:d0:e6:70:d6:34:73: e1:91:dc:da:ec:46:90:a4:eb:d5:36:bf:ca:f6:ec: 13:76:2a:ef:c7:e4:30:01:a7:6d:29:d5:06:8a:f9: 26:9d:64:97:48:42:4f:5b:93:29:23:a3:e1:1b:e1: 8b:01:b3:c4:08:29:3b:6e:0c:a5:96:4d:63:18:ad: f9:2f:75:3d:0d:a3:4d:aa:b7:03:99:b1:91:a6:a8: fb:0c:e2:ea:62:e7:24:3d:18:82:bf:51:85:f0:bf: 6b:4c:fb:fc:ab:9b:02:c4:c9:87:05:6b:8b:15:cd: e8:ae:eb:be:ee:f6:c2:bd:49:d5:7c:1c:55:73:50: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.102.192.0/19 14.128.16.0/20 101.203.192.0/18 103.140.200.0/23 112.137.184.0/21 112.140.32.0/19 112.140.128.0/20 180.211.72.0/21 180.214.0.0/18 202.226.52.0/22 203.140.224.0/20 Signature Algorithm: sha256WithRSAEncryption 25:5c:52:2c:d8:46:fb:07:fc:7f:c8:8a:c6:0f:8b:54:2d:52: 0b:86:ce:46:f4:ee:8c:fa:b3:75:7d:3a:52:1b:37:50:21:c1: 07:f3:43:ec:92:9b:ea:4f:16:58:e9:ba:88:0e:4b:6f:ef:13: 3e:1e:41:78:46:fb:8c:96:e3:31:0c:bc:be:90:62:6b:1e:77: fc:8b:c7:9e:7f:ae:50:ee:dc:ea:bf:36:6c:23:f9:3e:0b:14: 8c:5b:50:08:ab:b4:05:b0:76:9a:01:56:ab:90:f9:7d:93:1b: d3:fa:80:bf:d9:66:13:ed:bb:87:26:5f:e6:4b:d6:94:c3:74: 44:3f:1f:d1:8b:93:de:ba:56:94:54:f8:97:bd:d3:e6:60:da: 67:07:d0:67:8a:d7:01:18:e8:01:59:9c:fd:44:22:8b:ed:0c: fe:ea:8d:62:d8:b2:da:bf:60:07:eb:c2:fc:43:0e:bf:79:07: 82:a2:fa:6a:2a:b2:54:e5:e5:5a:86:c7:c0:25:35:48:88:b4: 39:3b:af:c9:33:d4:ec:b2:06:46:ad:13:7b:9c:20:da:f0:89: 6c:9b:d8:ac:73:b0:31:06:52:ff:1f:88:fe:ab:60:50:34:95: 33:9d:89:ad:55:ba:fb:f1:90:06:d9:4c:1b:4f:6a:9f:3e:88: 35:ad:1c:dc -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgICR54wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDMxNTAxMzU1NloXDTI2MDMxNTAxMzAwM1owMzEx MC8GA1UEAxMoNEYzRTYzOTZDOUQ3NkNCREY0RUQyRDVERTdBMkE3NjAyMTRDOTgz NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALKm3Mi7ycpXOaguLzvE LQ9S8GiH4G9TTGPiP8tQrHYQb3UmPyV4nsXuOyz8025j0T7sjjhFOHizO/31ND1x B1btU+Oc8JkAqJGIxwwgksT3Ijlatd2ZF31pVxUPDbmSMwCt8QnKtgr4bf6cY9Sl jp03l9lr3GZY5Hb0XiysycaP0OZw1jRz4ZHc2uxGkKTr1Ta/yvbsE3Yq78fkMAGn bSnVBor5Jp1kl0hCT1uTKSOj4RvhiwGzxAgpO24MpZZNYxit+S91PQ2jTaq3A5mx kaao+wzi6mLnJD0Ygr9RhfC/a0z7/KubAsTJhwVrixXN6K7rvu72wr1J1XwcVXNQ VysCAwEAAaOCAscwggLDMB0GA1UdDgQWBBRPPmOWyddsvfTtLV3noqdgIUyYNzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjEwNDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIxMDQyL1R6 NWpsc25YYkwzMDdTMWQ1NktuWUNGTW1EYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwWwYIKwYBBQUHAQcBAf8ETDBKMEgEAgABMEIDBAUOZsADBAQOgBADBAZl y8ADBAFnjMgDBANwibgDBAVwjCADBARwjIADBAO000gDBAa01gADBALK4jQDBATL jOAwDQYJKoZIhvcNAQELBQADggEBACVcUizYRvsH/H/IisYPi1QtUguGzkb07oz6 s3V9OlIbN1AhwQfzQ+ySm+pPFljpuogOS2/vEz4eQXhG+4yW4zEMvL6QYmsed/yL x55/rlDu3Oq/Nmwj+T4LFIxbUAirtAWwdpoBVquQ+X2TG9P6gL/ZZhPtu4cmX+ZL 1pTDdEQ/H9GLk966VpRU+Je90+Zg2mcH0GeK1wEY6AFZnP1EIovtDP7qjWLYstq/ YAfrwvxDDr95B4Ki+moqslTl5VqGx8AlNUiItDk7r8kz1OyyBkatE3ucINrwiWyb 2KxzsDEGUv8fiP6rYFA0lTOdia1VuvvxkAbZTBtPap8+iDWtHNw= -----END CERTIFICATE-----Generated at Sat Apr 5 07:22:40 2025 by rpki-client