$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer File: XssWWq18PBQ8wvhOR3XlnZ19lPk.cer (raw, json) Hash identifier: tDkIBsuiE8aqwVUQCykQppKRw3luuQJmMxwUstbPNfk= Subject key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5307 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:35:55 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 103.96.112.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21255 (0x5307) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:35:55 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:91:1d:1e:b5:54:45:e3:97:c4:58:a0:3a: 6d:c6:f7:7a:21:29:bf:f2:38:25:31:7d:a4:f5:bf: c0:14:e2:31:96:ba:8c:b5:2c:8e:a0:29:b7:3e:a3: ba:69:86:cf:05:2a:18:b5:51:0b:1c:ea:77:35:86: 6d:ff:ac:71:76:fc:90:ff:03:48:ae:a2:b0:9c:58: 08:e3:ff:f9:9c:84:31:e8:b2:c1:6f:13:38:8b:fe: 77:a7:8d:ab:f2:06:f0:27:36:86:d8:bd:df:27:1d: e8:3b:2e:25:ae:20:10:e2:4b:fe:1a:3b:ce:ba:f4: ea:3b:94:f2:a3:f1:40:ff:b4:8e:c3:17:05:03:fd: 45:33:30:86:00:f6:8d:19:d3:4c:82:7f:83:1e:52: ef:ef:63:38:85:fb:ec:76:a3:dd:9c:4b:ad:c5:85: da:e6:f5:7c:fc:31:8b:a0:59:44:15:d9:8c:c9:bd: 30:16:f7:c6:59:06:57:a4:7b:cb:69:35:13:a2:71: cd:90:9a:4c:5b:a2:ef:03:71:d4:e9:d5:c9:ae:f3: d0:df:30:79:69:95:e3:c5:d0:96:13:79:dd:56:a6: f2:ab:97:56:a4:35:e9:48:92:69:83:3d:9e:3d:c1: 79:83:13:2f:d0:94:1d:9a:29:71:80:44:45:72:07: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.112.0/22 Signature Algorithm: sha256WithRSAEncryption 38:f7:f7:97:d2:88:ad:e0:44:46:c6:c0:9f:5e:99:a7:5b:79: 20:3e:fb:18:86:0e:35:6c:78:33:45:73:00:fa:cf:cb:22:6a: 6f:02:fd:e1:ca:dd:cf:dc:95:00:31:30:a7:8e:96:cd:f0:d7: c8:7f:93:1d:55:a5:48:ce:c8:53:e8:4d:c5:42:29:0c:e9:86: 61:bc:46:1c:1e:0a:72:de:8d:e9:8f:ec:52:1d:57:0d:c8:b6: 31:7c:b6:ed:23:32:04:e3:12:1e:0d:6c:15:65:b1:f2:ab:28: 16:43:1e:6e:eb:0c:cd:ac:c8:79:78:2e:d8:33:f8:30:8f:2a: 10:9b:24:fa:74:41:5c:a6:90:e2:03:20:d7:71:c6:8e:04:96: d9:4f:ae:67:35:90:3c:c5:ee:36:bc:47:c3:85:1a:c4:a3:9b: b6:2e:6f:e0:34:34:8a:00:7b:38:3b:7d:e7:95:9f:53:99:2a: cc:69:ee:f9:d6:83:45:3f:af:7c:b5:8c:7e:c8:5f:de:4f:c2: 2e:4a:80:52:c1:5e:0e:e6:ba:dc:42:b0:e8:e7:59:5a:b6:2c: 64:79:ad:9a:6f:02:64:64:f7:bd:d0:36:1e:a6:0b:cb:d2:c4: 1c:9e:15:ea:0a:7d:e8:64:3b:9f:47:0f:bc:ab:27:05:e6:8b: ce:56:70:dd -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICUwcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDcxNTAxMzU1NVoXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoNUVDQjE2NUFBRDdDM0MxNDNDQzJGODRFNDc3NUU1OUQ5RDdEOTRG OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALmckR0etVRF45fEWKA6 bcb3eiEpv/I4JTF9pPW/wBTiMZa6jLUsjqAptz6jummGzwUqGLVRCxzqdzWGbf+s cXb8kP8DSK6isJxYCOP/+ZyEMeiywW8TOIv+d6eNq/IG8Cc2hti93ycd6DsuJa4g EOJL/ho7zrr06juU8qPxQP+0jsMXBQP9RTMwhgD2jRnTTIJ/gx5S7+9jOIX77Haj 3ZxLrcWF2ub1fPwxi6BZRBXZjMm9MBb3xlkGV6R7y2k1E6JxzZCaTFui7wNx1OnV ya7z0N8weWmV48XQlhN53Vam8quXVqQ16UiSaYM9nj3BeYMTL9CUHZopcYBERXIH AgcCAwEAAaOCAoswggKHMB0GA1UdDgQWBBReyxZarXw8FDzC+E5HdeWdnX2U+TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwNDAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDQwL1hz c1dXcTE4UEJROHd2aE9SM1hsbloxOWxQay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnYHAwDQYJKoZIhvcN AQELBQADggEBADj395fSiK3gREbGwJ9emadbeSA++xiGDjVseDNFcwD6z8siam8C /eHK3c/clQAxMKeOls3w18h/kx1VpUjOyFPoTcVCKQzphmG8RhweCnLejemP7FId Vw3ItjF8tu0jMgTjEh4NbBVlsfKrKBZDHm7rDM2syHl4Ltgz+DCPKhCbJPp0QVym kOIDINdxxo4EltlPrmc1kDzF7ja8R8OFGsSjm7Yub+A0NIoAezg7feeVn1OZKsxp 7vnWg0U/r3y1jH7IX95Pwi5KgFLBXg7mutxCsOjnWVq2LGR5rZpvAmRk973QNh6m C8vSxByeFeoKfehkO59HD7yrJwXmi85WcN0= -----END CERTIFICATE-----Generated at Mon Jul 21 09:21:54 2025 by rpki-client