$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer File: gcATaiDHNuoCKbzbtbWtDP420oY.cer (raw, json) Hash identifier: hr43omf2hCYY/11LU4wfwS4aYR/PfD8UICP4I6H3C50= Subject key identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 58FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:37:39 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 61.195.44.0/22 IP: 103.173.104.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22783 (0x58ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:37:39 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:62:86:db:87:1a:fa:d4:ce:99:f0:4c:68: 52:64:1a:11:af:da:7c:73:5f:11:5f:3b:db:ca:b8: f0:73:28:3e:b6:13:42:29:6f:7d:3e:1b:4a:45:c5: c6:f7:cf:2c:52:c5:03:66:38:3e:e8:7c:5b:d6:1c: 77:4c:17:02:dd:21:7c:e6:2d:69:60:5c:b4:04:c7: a5:02:26:6e:86:2e:c0:2c:1b:8e:aa:74:9d:b2:2b: 33:f1:9a:f6:f9:7d:c5:6e:01:f6:77:c9:5c:a2:cd: bc:df:75:cd:11:4d:ac:66:c8:df:a1:5d:4e:48:06: ff:19:1a:7f:0b:ef:04:14:4b:af:c6:5e:ce:27:52: 08:92:53:a4:e7:c4:40:6e:49:38:fd:e8:6c:66:d2: 72:c8:27:c7:cc:ca:6b:89:65:4a:d6:ca:3b:3d:7b: 2f:e2:53:65:7a:fa:fb:45:74:7d:11:68:42:88:0f: 3d:6b:f7:a0:73:0d:63:36:25:f5:ab:5b:38:84:c4: a1:1f:47:65:66:29:93:10:7b:da:c4:3c:d8:2c:c7: bb:df:cc:34:a0:ab:72:cf:44:07:fe:dd:53:03:8e: d3:02:d4:5d:9e:8f:85:45:ae:cc:ec:db:9d:1a:75: 28:b5:48:1f:9c:04:19:6e:ee:d0:95:75:2b:69:f5: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.44.0/22 103.173.104.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:c2:37:29:46:c8:63:99:5e:65:fa:64:70:80:b9:65:bc:f3: 1a:54:7f:4d:db:3d:1c:fc:d7:95:e3:15:63:ca:40:bb:2d:8d: 7e:9c:d6:c2:df:0b:f9:75:bb:21:38:5c:5c:8c:d5:28:b2:2d: 29:91:45:d4:3f:8f:2c:1a:da:fa:01:cc:27:55:d7:a7:a8:06: 36:11:6f:cf:5b:67:7a:a9:3b:65:50:23:57:54:96:0e:00:12: 32:a8:6e:1a:a0:2c:9f:76:dd:ba:63:55:5c:3a:86:3b:30:d9: f1:ae:89:86:a5:07:b9:7d:28:48:da:ba:db:05:53:9c:2e:d4: 84:ec:df:b6:5c:83:db:24:48:84:5b:01:e7:42:4c:ab:b8:66: c5:31:f8:2c:6e:2a:5a:9a:53:6b:35:7b:a8:a0:6d:d0:54:23: 63:dd:23:3a:0d:52:6f:be:fb:40:8e:c1:e3:99:eb:cc:cd:92: c1:ed:3d:15:64:24:17:1f:db:75:21:40:03:b4:96:54:ec:be: 41:01:56:46:1b:13:bf:eb:66:33:48:72:54:73:8d:c4:d1:5f: 59:fc:66:af:75:2f:9b:f7:23:15:11:48:a0:44:40:f6:19:f5: 5e:4d:d5:c9:cd:25:89:be:cd:5f:05:a9:91:ac:52:16:00:b0: 82:0d:a2:ff -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICWP8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxMzczOVoXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoODFDMDEzNkEyMEM3MzZFQTAyMjlCQ0RCQjVCNUFEMENGRTM2RDI4 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALL1Yobbhxr61M6Z8Exo UmQaEa/afHNfEV8728q48HMoPrYTQilvfT4bSkXFxvfPLFLFA2Y4Puh8W9Ycd0wX At0hfOYtaWBctATHpQImboYuwCwbjqp0nbIrM/Ga9vl9xW4B9nfJXKLNvN91zRFN rGbI36FdTkgG/xkafwvvBBRLr8ZezidSCJJTpOfEQG5JOP3obGbScsgnx8zKa4ll StbKOz17L+JTZXr6+0V0fRFoQogPPWv3oHMNYzYl9atbOITEoR9HZWYpkxB72sQ8 2CzHu9/MNKCrcs9EB/7dUwOO0wLUXZ6PhUWuzOzbnRp1KLVIH5wEGW7u0JV1K2n1 JxsCAwEAAaOCApEwggKNMB0GA1UdDgQWBBSBwBNqIMc26gIpvNu1ta0M/jbShjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxNjgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTY4L2dj QVRhaURITnVvQ0tiemJ0Yld0RFA0MjBvWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAI9wywDBAFnrWgwDQYJ KoZIhvcNAQELBQADggEBAB/CNylGyGOZXmX6ZHCAuWW88xpUf03bPRz815XjFWPK QLstjX6c1sLfC/l1uyE4XFyM1SiyLSmRRdQ/jywa2voBzCdV16eoBjYRb89bZ3qp O2VQI1dUlg4AEjKobhqgLJ923bpjVVw6hjsw2fGuiYalB7l9KEjautsFU5wu1ITs 37Zcg9skSIRbAedCTKu4ZsUx+CxuKlqaU2s1e6igbdBUI2PdIzoNUm+++0COweOZ 68zNksHtPRVkJBcf23UhQAO0llTsvkEBVkYbE7/rZjNIclRzjcTRX1n8Zq91L5v3 IxURSKBEQPYZ9V5N1cnNJYm+zV8FqZGsUhYAsIINov8= -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:46 2025 by rpki-client