$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/apWCSYAD-L9tk8FR84y0iWpLLVw.cer File: apWCSYAD-L9tk8FR84y0iWpLLVw.cer (raw, json) Hash identifier: dV2DQahEQAG6KxtZQLhGLngz+RoXmC91M51CWYygW9c= Subject key identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 584D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:32:14 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 202.253.252.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22605 (0x584d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:32:14 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=6A9582498003F8BF6D93C151F38CB4896A4B2D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:18:b3:bf:9b:21:ed:7e:d1:13:6b:dd:5b: 69:7d:30:a7:a7:c1:ac:84:da:9d:60:9b:76:fc:5d: c5:14:ad:ed:66:f2:43:42:34:cb:bf:c2:98:51:89: 81:2b:c0:cf:88:f9:ef:c8:86:8d:1e:4c:16:45:d9: ec:28:dd:66:19:ea:d0:f9:19:d9:57:db:95:7a:a1: 8a:b1:8f:fc:93:4b:b4:ff:56:7a:85:69:34:e1:05: c9:d9:a8:21:09:d5:e0:5a:78:9f:05:3f:0e:aa:65: 95:28:de:2c:5c:d0:f7:4c:53:2a:f1:49:76:12:63: ae:a4:17:46:bd:bc:f0:9b:51:7f:31:51:20:c3:b7: 16:d7:da:07:b2:67:60:f2:d5:78:fb:c3:0c:05:8f: 99:9c:c3:b7:28:14:94:63:ed:18:2c:ed:28:9b:6f: 4c:14:81:43:f9:f2:34:a3:65:54:01:61:2e:ae:f7: 56:c4:46:b9:46:99:5a:63:6a:27:4c:9f:62:97:c5: 56:ab:4b:cb:a5:69:eb:3d:e4:0d:f9:c2:6e:32:a0: fd:5d:b8:4f:58:ab:11:0e:99:f9:b6:f7:91:21:50: a2:f7:fa:7a:91:2a:d2:0f:3b:12:c8:09:56:d4:ec: 7a:3f:b2:90:3f:20:c6:9b:86:24:ad:8b:53:9e:37: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.253.252.0/23 Signature Algorithm: sha256WithRSAEncryption 45:be:1a:30:73:e9:86:bf:82:2f:28:8e:dd:17:4a:6e:48:f4: 12:33:23:55:32:88:c8:4c:9e:29:f3:d8:99:1b:ae:4f:c1:b8: ee:18:d6:8d:cf:27:1d:08:91:ff:c3:1b:22:3b:a9:b9:b0:82: cf:08:4d:33:21:95:4e:c3:c8:fe:fc:59:55:57:2c:f6:04:57: f5:a1:54:8c:e8:03:75:40:6d:76:37:56:bf:12:5d:5d:b5:36: df:09:3c:b7:ac:18:be:40:ea:6e:15:c9:99:5f:1b:42:36:ad: 32:c5:92:8d:dd:f2:a0:13:18:96:52:e4:f9:ec:d9:7e:f4:05: 95:e1:90:93:4a:53:b2:18:0f:47:4d:1e:4e:4a:8e:7b:10:7a: eb:cc:23:3c:45:d4:5e:fe:75:38:fb:4a:7f:3f:e3:82:26:16: ad:6d:6a:93:3c:c9:61:e3:a7:6c:47:2e:62:4c:99:24:41:1b: ac:78:ae:72:22:e5:a8:96:ad:1f:19:ff:40:1f:8c:04:1e:29: 14:b3:b9:13:63:55:5c:3a:84:aa:13:23:85:30:bf:d4:ff:43: 0f:b6:d8:f5:62:0e:3e:97:06:2c:c2:78:e3:e2:c4:2c:85:e0: 6d:50:1f:d6:6b:fb:aa:00:99:1c:23:b0:b9:74:fe:98:ac:24: 69:30:1b:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICWE0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxMzIxNFoXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoNkE5NTgyNDk4MDAzRjhCRjZEOTNDMTUxRjM4Q0I0ODk2QTRCMkQ1 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6KGLO/myHtftETa91b aX0wp6fBrITanWCbdvxdxRSt7WbyQ0I0y7/CmFGJgSvAz4j578iGjR5MFkXZ7Cjd Zhnq0PkZ2VfblXqhirGP/JNLtP9WeoVpNOEFydmoIQnV4Fp4nwU/DqpllSjeLFzQ 90xTKvFJdhJjrqQXRr288JtRfzFRIMO3FtfaB7JnYPLVePvDDAWPmZzDtygUlGPt GCztKJtvTBSBQ/nyNKNlVAFhLq73VsRGuUaZWmNqJ0yfYpfFVqtLy6Vp6z3kDfnC bjKg/V24T1irEQ6Z+bb3kSFQovf6epEq0g87EsgJVtTsej+ykD8gxpuGJK2LU543 Ut8CAwEAAaOCAokwggKFMB0GA1UdDgQWBBRqlYJJgAP4v22TwVHzjLSJakstXDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi9hcFdD U1lBRC1MOXRrOEZSODR5MGlXcExMVncubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByv38MA0GCSqGSIb3DQEB CwUAA4IBAQBFvhowc+mGv4IvKI7dF0puSPQSMyNVMojITJ4p89iZG65PwbjuGNaN zycdCJH/wxsiO6m5sILPCE0zIZVOw8j+/FlVVyz2BFf1oVSM6AN1QG12N1a/El1d tTbfCTy3rBi+QOpuFcmZXxtCNq0yxZKN3fKgExiWUuT57Nl+9AWV4ZCTSlOyGA9H TR5OSo57EHrrzCM8RdRe/nU4+0p/P+OCJhatbWqTPMlh46dsRy5iTJkkQRuseK5y IuWolq0fGf9AH4wEHikUs7kTY1VcOoSqEyOFML/U/0MPttj1Yg4+lwYswnjj4sQs heBtUB/Wa/uqAJkcI7C5dP6YrCRpMBt6 -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:41 2025 by rpki-client