$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer File: YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer (raw, json) Hash identifier: JjKPdekvZfW9V9LoKkAPPa84/BohFvTByD5YOumtwm8= Subject key identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0F1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Mar 2025 01:36:28 +0000 Certificate not after: Sun 15 Mar 2026 01:30:03 +0000 Subordinate resources: IP: 166.119.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3871 (0xf1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000 Validity Not Before: Mar 15 01:36:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=60D43E3EFDB63A2F244F0E3C388C68D93EC25865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:8e:46:5c:04:6a:fb:78:41:bd:61:66:bf: aa:6c:5a:a4:09:a4:98:63:b6:33:72:ea:0a:3f:6b: 17:0c:38:83:3b:14:ce:2c:a2:57:75:b2:08:25:dd: 10:ec:f0:43:39:b9:8a:9c:e7:86:ef:de:73:32:a2: a4:7f:c5:bd:a5:f2:21:23:48:cd:b8:a9:65:23:92: fa:43:b7:18:b2:ca:b9:71:3d:0c:32:8a:7b:76:cb: f4:7b:d4:de:54:ab:89:2a:f7:f1:3e:17:f0:7f:93: f2:6d:cd:84:8b:a8:eb:e9:4a:e0:8c:fb:ba:61:34: b1:3b:a9:92:75:c4:9c:f8:43:80:26:e3:a6:92:94: d3:04:60:99:8c:96:42:52:a2:d4:b0:14:7a:97:89: f2:c5:21:fd:e1:b9:51:71:94:12:f9:5d:98:e4:b0: 25:7d:f4:ee:de:56:53:9c:1e:f2:07:18:89:6b:1a: 49:47:8e:a8:96:9f:a1:bf:a8:36:78:ee:2c:da:ce: f1:08:36:26:a7:f8:65:e4:7d:fa:fe:b3:eb:3e:53: 14:e9:e7:e0:03:32:5b:10:58:50:f3:be:db:ca:49: f8:03:dc:cd:68:44:a9:9c:33:af:8b:cd:e7:5d:35: f3:10:bc:fd:39:76:35:8e:40:ee:a2:c7:39:bc:2a: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.119.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:dc:39:bf:9e:1c:ec:ec:73:02:95:c5:4d:a9:06:6c:35:04: b0:3a:01:6d:ae:bc:89:58:85:c6:4e:60:0d:4f:b0:62:eb:cb: 7b:f7:de:75:70:5b:74:cc:9a:1b:31:09:a2:ea:11:66:68:25: d0:d6:c3:0c:5a:02:17:69:f2:b0:0b:6d:7c:00:82:5a:68:85: dd:0a:0f:c4:07:57:b0:7f:67:92:a2:a0:62:66:76:fb:39:1d: 3b:ac:7f:75:ff:ab:46:3c:c5:b6:00:66:e3:33:7f:20:2d:b7: 14:00:1c:db:4b:ba:35:3a:66:05:43:3a:39:c0:eb:bf:79:c5: f2:6b:49:56:35:93:57:32:6a:29:3c:e9:ac:25:06:87:22:44: bb:b9:42:35:0a:90:e1:72:a3:d2:77:01:97:db:46:b1:d7:f3: 6e:b0:ef:7d:ac:28:a8:08:72:2b:ab:f4:f1:47:46:4f:e8:d4: 99:a7:d0:f0:b5:84:bc:f9:20:86:1a:d9:f1:29:91:95:b5:23: ef:66:99:b4:bf:7d:ea:6d:34:41:6f:22:98:25:1b:b6:64:a3: 7a:11:4d:9e:f4:4b:e1:11:e9:c2:6f:d5:11:a2:69:15:22:16: c3:67:0b:97:55:f4:c9:56:77:9b:22:1e:de:11:27:c5:73:b3: 61:58:48:6a -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICDx8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDMxNTAxMzYyOFoXDTI2MDMxNTAxMzAwM1owMzEx MC8GA1UEAxMoNjBENDNFM0VGREI2M0EyRjI0NEYwRTNDMzg4QzY4RDkzRUMyNTg2 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFZjkZcBGr7eEG9YWa/ qmxapAmkmGO2M3LqCj9rFww4gzsUziyiV3WyCCXdEOzwQzm5ipznhu/eczKipH/F vaXyISNIzbipZSOS+kO3GLLKuXE9DDKKe3bL9HvU3lSriSr38T4X8H+T8m3NhIuo 6+lK4Iz7umE0sTupknXEnPhDgCbjppKU0wRgmYyWQlKi1LAUepeJ8sUh/eG5UXGU EvldmOSwJX307t5WU5we8gcYiWsaSUeOqJafob+oNnjuLNrO8Qg2Jqf4ZeR9+v6z 6z5TFOnn4AMyWxBYUPO+28pJ+APczWhEqZwzr4vN51018xC8/Tl2NY5A7qLHObwq pj8CAwEAAaOCAoowggKGMB0GA1UdDgQWBBRg1D4+/bY6LyRPDjw4jGjZPsJYZTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxODYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTg2L1lO US1QdjIyT2k4a1R3NDhPSXhvMlQ3Q1dHVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCmdzANBgkqhkiG9w0B AQsFAAOCAQEAA9w5v54c7OxzApXFTakGbDUEsDoBba68iViFxk5gDU+wYuvLe/fe dXBbdMyaGzEJouoRZmgl0NbDDFoCF2nysAttfACCWmiF3QoPxAdXsH9nkqKgYmZ2 +zkdO6x/df+rRjzFtgBm4zN/IC23FAAc20u6NTpmBUM6OcDrv3nF8mtJVjWTVzJq KTzprCUGhyJEu7lCNQqQ4XKj0ncBl9tGsdfzbrDvfawoqAhyK6v08UdGT+jUmafQ 8LWEvPkghhrZ8SmRlbUj72aZtL996m00QW8imCUbtmSjehFNnvRL4RHpwm/VEaJp FSIWw2cLl1X0yVZ3myIe3hEnxXOzYVhIag== -----END CERTIFICATE-----Generated at Sat Apr 5 07:22:39 2025 by rpki-client