$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer File: YYky9kHWUNyGDXQRrIrrbDXInQQ.cer (raw, json) Hash identifier: H7vtQ+Gq1lmBuuGyn8kLGBFI9m4MRJ7D46J0aCu4YiI= Subject key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 53E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:42:27 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 2407:d600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 09:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21475 (0x53e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:42:27 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:36:4e:71:f5:6f:02:0e:78:a4:03:a8:43: 00:b4:fe:28:05:32:e4:96:b6:a9:68:37:b1:31:fd: de:ed:f9:7a:6f:d2:a8:ea:d2:bc:d6:ed:31:15:7f: 1e:d9:a5:61:bf:18:db:a5:9f:74:a2:ba:a4:5c:c3: 18:4e:20:80:7c:a3:2c:49:a2:cf:59:2d:38:a0:a5: b8:a1:de:61:90:0b:ba:da:4f:cd:04:d5:f6:6a:16: ed:78:f1:19:18:0a:46:46:9f:80:21:96:8f:4d:a9: d5:da:6f:2b:cc:58:09:50:64:a8:92:fd:27:34:70: 8f:99:a9:a9:ce:71:45:2e:7d:1c:83:7b:ca:4a:a6: 7c:1e:ef:41:79:7c:67:a1:82:9a:98:d5:5a:45:d1: 16:e9:bb:af:92:c3:33:6a:7b:f5:15:4f:27:3a:ae: 6d:0a:38:5b:12:10:d1:7a:82:44:8e:d3:6b:7f:e0: 02:d9:92:08:55:1e:0b:e5:76:68:c7:27:f9:bc:9d: a6:de:8a:1d:20:c2:80:13:d1:00:fa:ea:fe:29:61: e9:3d:e7:05:03:5e:3e:f8:e7:59:22:6b:04:cb:2a: 9c:b1:3c:67:57:e9:66:99:b2:a5:18:39:7b:9f:4d: 2a:b9:7e:db:c0:e3:40:d0:28:f9:89:8d:98:80:8d: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d600::/32 Signature Algorithm: sha256WithRSAEncryption 36:00:73:47:35:6f:e2:61:0e:f1:89:24:b6:92:17:75:f5:7e: be:1a:c0:c9:2c:ae:83:7f:62:b5:cf:97:7a:44:c7:29:0e:c1: a9:dd:e1:d3:e0:9e:fa:46:6f:78:e1:d8:7d:0a:23:8d:e0:5f: ef:c6:f4:4e:a5:f4:96:ac:d4:46:27:cb:bf:2b:c0:ba:af:e0: 9e:ea:4e:9d:32:2d:53:3d:a1:56:e8:be:4b:6a:cd:50:c0:5c: b0:54:0a:9d:3f:d1:7f:cc:71:f3:88:f9:9b:62:30:a4:5e:f7: d2:30:d9:57:d5:44:8f:2e:b9:c3:ae:a9:d8:9c:31:ac:69:30: ea:2c:11:e1:09:6e:c1:33:6b:9a:cd:db:f4:0e:d5:f4:b9:35: 8c:7b:d2:05:35:46:b3:08:4b:1a:6a:49:5e:59:42:17:4e:4d: 18:33:4b:93:dc:b6:3d:57:a0:4a:35:57:96:0c:89:cc:55:ee: 00:19:c6:17:60:6b:7d:07:d7:71:91:c4:90:9c:9b:ca:70:6b: 3e:07:61:90:d0:02:49:d3:b9:ca:a5:9d:13:50:2a:4c:91:f5: 12:31:d4:23:dc:28:50:61:3a:c3:a1:e5:1b:34:be:31:30:aa: f6:c7:5c:42:75:34:dc:53:1c:b0:05:7c:26:0d:a1:cc:53:9e: 23:d6:3b:bd -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICU+MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDcxNTAxNDIyN1oXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoNjE4OTMyRjY0MUQ2NTBEQzg2MEQ3NDExQUM4QUVCNkMzNUM4OUQw NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJWBNk5x9W8CDnikA6hD ALT+KAUy5Ja2qWg3sTH93u35em/SqOrSvNbtMRV/HtmlYb8Y26WfdKK6pFzDGE4g gHyjLEmiz1ktOKCluKHeYZALutpPzQTV9moW7XjxGRgKRkafgCGWj02p1dpvK8xY CVBkqJL9JzRwj5mpqc5xRS59HIN7ykqmfB7vQXl8Z6GCmpjVWkXRFum7r5LDM2p7 9RVPJzqubQo4WxIQ0XqCRI7Ta3/gAtmSCFUeC+V2aMcn+bydpt6KHSDCgBPRAPrq /ilh6T3nBQNePvjnWSJrBMsqnLE8Z1fpZpmypRg5e59NKrl+28DjQNAo+YmNmICN 1/ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRhiTL2QdZQ3IYNdBGsiutsNcidBDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxODAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTgwL1lZ a3k5a0hXVU55R0RYUVJySXJyYkRYSW5RUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB9YAMA0GCSqGSIb3 DQEBCwUAA4IBAQA2AHNHNW/iYQ7xiSS2khd19X6+GsDJLK6Df2K1z5d6RMcpDsGp 3eHT4J76Rm944dh9CiON4F/vxvROpfSWrNRGJ8u/K8C6r+Ce6k6dMi1TPaFW6L5L as1QwFywVAqdP9F/zHHziPmbYjCkXvfSMNlX1USPLrnDrqnYnDGsaTDqLBHhCW7B M2uazdv0DtX0uTWMe9IFNUazCEsaakleWUIXTk0YM0uT3LY9V6BKNVeWDInMVe4A GcYXYGt9B9dxkcSQnJvKcGs+B2GQ0AJJ07nKpZ0TUCpMkfUSMdQj3ChQYTrDoeUb NL4xMKr2x1xCdTTcUxywBXwmDaHMU54j1ju9 -----END CERTIFICATE-----Generated at Fri Jul 25 11:15:06 2025 by rpki-client