$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer File: ic9cKvpbV2V3NRxBmQGNRM3C1to.cer (raw, json) Hash identifier: weHg08cPwTMSIUdN4hEllJpnd903EoUytmYGoT6BNqk= Subject key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 482D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Mar 2025 01:38:46 +0000 Certificate not after: Sun 15 Mar 2026 01:30:03 +0000 Subordinate resources: IP: 119.63.112.0/20 IP: 153.125.0.0/17 IP: 182.255.64.0/20 IP: 202.53.112.0/20 IP: 202.129.176.0/21 IP: 202.216.128.0/19 IP: 202.224.112.0/20 IP: 203.141.112.0/20 IP: 210.1.144.0/20 IP: 219.101.96.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18477 (0x482d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000 Validity Not Before: Mar 15 01:38:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:50:d1:dc:ec:2e:37:aa:77:67:a6:1c:49: f2:59:3b:e5:2e:47:23:18:d4:ad:75:85:6f:31:2c: 4a:88:e4:88:21:a2:4e:d1:95:8c:6c:70:3c:7d:8d: 3b:2c:44:40:28:56:59:59:84:82:d8:fb:54:a0:2c: 10:00:b9:ee:5e:07:d6:98:5b:de:85:5e:49:8c:cb: ea:eb:b8:b9:7a:ad:6c:0a:1e:bc:4b:eb:fc:f8:4e: 21:d9:65:08:be:13:73:3b:35:71:90:bf:0d:3b:d2: 51:e7:73:fc:2c:80:08:66:a5:6d:f1:11:99:57:a7: 83:87:06:d0:89:16:e7:f1:29:13:20:0c:6f:ef:9d: 1c:36:be:7a:33:1b:b2:19:43:c7:03:f0:9a:23:79: e0:20:76:b5:bb:9e:23:47:39:f1:72:43:2d:50:2e: d3:5c:d7:a2:10:23:e5:eb:57:83:db:35:6e:e2:79: 4c:bf:56:cc:ae:f9:1f:51:bf:47:5d:a1:fa:ee:fc: c6:36:aa:0b:20:52:56:ea:59:1c:93:b3:23:76:b1: d9:93:a0:eb:1d:17:f1:98:7b:58:95:ac:54:a9:db: 3d:f6:cd:3e:af:14:48:0c:81:44:43:5a:26:ac:1d: c2:50:da:1e:a1:7f:82:97:ae:57:eb:1a:a5:31:4c: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.63.112.0/20 153.125.0.0/17 182.255.64.0/20 202.53.112.0/20 202.129.176.0/21 202.216.128.0/19 202.224.112.0/20 203.141.112.0/20 210.1.144.0/20 219.101.96.0/20 Signature Algorithm: sha256WithRSAEncryption 83:37:71:ae:e4:96:0c:82:a5:a5:fc:2c:b0:80:a2:73:99:c7: 01:14:2b:d5:1a:c7:eb:2b:9c:91:d7:b7:da:ef:dc:80:26:70: 1a:32:78:56:2a:d4:22:79:06:10:70:28:03:f3:b4:20:c6:9a: d5:e6:cf:8d:b0:34:7d:4e:b1:9e:4a:e3:40:18:e1:37:28:88: 22:7a:8e:6a:73:1e:73:71:7d:08:53:f9:74:a2:28:d8:60:97: 35:e9:42:10:83:ef:6a:f9:2e:01:de:81:44:91:2a:00:c2:d9: 5c:c6:60:b1:b3:28:89:50:67:3a:9f:67:45:bc:97:f4:fa:08: 78:ec:e0:15:45:30:9e:6d:47:4f:a5:1d:49:35:e2:85:be:fd: bd:74:e4:85:9f:99:60:6f:1a:00:a0:93:2f:59:db:0a:dd:c9: ad:23:f0:3d:c7:3e:39:e8:1d:44:8a:d6:60:2a:26:9f:08:e5: c8:86:01:fd:da:93:66:1b:60:f7:d3:a6:90:1a:8a:17:55:e9: 2c:64:d9:32:b5:46:2f:48:aa:62:20:e9:f7:1a:1f:5a:05:46: b3:b8:8d:39:72:d1:cf:87:1e:8d:41:0f:2c:e7:03:db:6e:22: 56:58:80:e4:54:23:19:7d:2b:9e:c9:89:df:62:7e:2c:26:e8: 15:c2:35:6f -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICSC0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDMxNTAxMzg0NloXDTI2MDMxNTAxMzAwM1owMzEx MC8GA1UEAxMoODlDRjVDMkFGQTVCNTc2NTc3MzUxQzQxOTkwMThENDRDREMyRDZE QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALiDUNHc7C43qndnphxJ 8lk75S5HIxjUrXWFbzEsSojkiCGiTtGVjGxwPH2NOyxEQChWWVmEgtj7VKAsEAC5 7l4H1phb3oVeSYzL6uu4uXqtbAoevEvr/PhOIdllCL4Tczs1cZC/DTvSUedz/CyA CGalbfERmVeng4cG0IkW5/EpEyAMb++dHDa+ejMbshlDxwPwmiN54CB2tbueI0c5 8XJDLVAu01zXohAj5etXg9s1buJ5TL9WzK75H1G/R12h+u78xjaqCyBSVupZHJOz I3ax2ZOg6x0X8Zh7WJWsVKnbPfbNPq8USAyBRENaJqwdwlDaHqF/gpeuV+sapTFM hlMCAwEAAaOCArwwggK4MB0GA1UdDgQWBBSJz1wq+ltXZXc1HEGZAY1EzcLW2jAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC8zNzMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM3My9pYzljS3Zw YlYyVjNOUnhCbVFHTlJNM0MxdG8ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQEdz9wAwQHmX0AAwQEtv9AAwQE yjVwAwQDyoGwAwQFytiAAwQEyuBwAwQEy41wAwQE0gGQAwQE22VgMA0GCSqGSIb3 DQEBCwUAA4IBAQCDN3Gu5JYMgqWl/CywgKJzmccBFCvVGsfrK5yR17fa79yAJnAa MnhWKtQieQYQcCgD87QgxprV5s+NsDR9TrGeSuNAGOE3KIgieo5qcx5zcX0IU/l0 oijYYJc16UIQg+9q+S4B3oFEkSoAwtlcxmCxsyiJUGc6n2dFvJf0+gh47OAVRTCe bUdPpR1JNeKFvv29dOSFn5lgbxoAoJMvWdsK3cmtI/A9xz456B1EitZgKiafCOXI hgH92pNmG2D306aQGooXVeksZNkytUYvSKpiIOn3Gh9aBUazuI05ctHPhx6NQQ8s 5wPbbiJWWIDkVCMZfSueyYnfYn4sJugVwjVv -----END CERTIFICATE-----Generated at Sat Apr 5 07:22:34 2025 by rpki-client