$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer File: qd58EzgSN8W4mNWiTyyabLPBlxs.cer (raw, json) Hash identifier: I/9D6621lgD3MO/7v/gQ4xW/rmlqylMWiO2RSBxT4yg= Subject key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5959 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:40:22 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 49.128.24.0/21 IP: 49.128.96.0/22 IP: 203.201.52.0/22 IP: 211.15.112.0/20 IP: 211.19.224.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22873 (0x5959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:40:22 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f4:ee:dc:28:65:f0:e1:9f:86:cd:9f:f1:32: 34:37:97:d6:7b:9f:7b:02:ed:d3:42:c6:72:28:fa: 7a:68:c9:85:6c:f4:00:62:17:42:06:76:39:42:0d: 25:0a:d2:d3:a9:72:e0:10:87:59:a5:03:86:18:60: 79:4c:e3:78:89:6c:05:5e:82:f4:69:9f:46:d0:62: 03:23:9c:6d:48:40:02:f9:fe:c6:cd:c0:be:20:45: a5:3a:3a:58:6c:41:f3:e1:54:5a:00:f6:8d:88:35: 78:e3:75:af:33:d9:e0:a2:ad:1c:24:52:f8:99:f4: 31:9f:d2:d5:1a:33:a1:c8:eb:5f:bc:f5:45:1d:47: 95:65:80:5f:b4:48:9f:34:87:97:5c:af:d8:15:17: 39:2b:71:61:79:ea:fe:2c:34:18:29:f0:1d:66:fd: 42:20:67:c4:a4:d7:02:c2:10:6d:4b:3c:9e:e8:ff: bd:5d:27:db:42:f2:83:67:21:70:37:f9:71:8d:2a: 2f:d9:26:80:87:78:21:f3:e3:44:9f:ed:f8:14:a2: 12:83:3d:58:95:2a:a0:6a:0c:d6:ad:62:96:b4:aa: 49:17:1e:49:37:d1:e9:2e:d5:b0:30:a4:8c:da:6f: 86:70:74:d4:ac:c8:b8:4c:29:6f:52:92:bb:a3:18: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.24.0/21 49.128.96.0/22 203.201.52.0/22 211.15.112.0/20 211.19.224.0/19 Signature Algorithm: sha256WithRSAEncryption a3:6e:6f:e7:05:70:8d:55:2e:ca:39:78:1f:5e:64:67:58:0e: c8:79:a5:90:32:43:08:29:32:5d:1e:62:e8:b0:c2:58:a0:82: f4:c0:71:b1:4c:ff:13:d5:19:d1:45:0a:42:4f:d3:78:dd:90: f5:aa:bd:3c:dd:0b:bd:90:a7:54:05:61:26:2f:6d:6b:78:33: 40:e3:fc:fb:24:47:35:12:1f:45:2a:66:b1:59:13:f3:3d:79: c0:4d:ef:8c:e8:e2:3f:b9:af:71:aa:56:70:91:02:ba:e7:d6: 94:4c:44:0a:e1:84:e0:00:25:c0:90:9b:12:64:8d:90:af:dd: 02:2b:78:e0:5b:14:ae:c4:bf:47:c8:cb:b7:05:d4:80:b5:17: b8:14:1f:33:3f:09:e4:bf:bf:55:4d:ff:eb:14:41:6b:5b:a6: 79:c7:9d:b8:6f:9d:72:4f:77:8f:18:00:0c:ab:9c:81:c4:aa: 93:e4:cc:0e:cf:70:f8:32:27:91:69:86:20:71:d4:1d:03:72: 94:81:39:bd:fa:f2:df:1b:a6:28:ee:28:d1:ee:aa:aa:d9:71: 97:c3:21:85:90:9b:94:00:72:69:88:e3:94:14:10:10:51:c7: 5b:42:30:42:5e:e4:64:3b:18:b9:5c:4b:1b:4a:c4:74:86:35: 66:b4:15:99 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICWVkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxNDAyMloXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoQTlERTdDMTMzODEyMzdDNUI4OThENUEyNEYyQzlBNkNCM0MxOTcx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO307twoZfDhn4bNn/Ey NDeX1nufewLt00LGcij6emjJhWz0AGIXQgZ2OUINJQrS06ly4BCHWaUDhhhgeUzj eIlsBV6C9GmfRtBiAyOcbUhAAvn+xs3AviBFpTo6WGxB8+FUWgD2jYg1eON1rzPZ 4KKtHCRS+Jn0MZ/S1RozocjrX7z1RR1HlWWAX7RInzSHl1yv2BUXOStxYXnq/iw0 GCnwHWb9QiBnxKTXAsIQbUs8nuj/vV0n20Lyg2chcDf5cY0qL9kmgId4IfPjRJ/t +BSiEoM9WJUqoGoM1q1ilrSqSRceSTfR6S7VsDCkjNpvhnB01KzIuEwpb1KSu6MY Y1MCAwEAAaOCAp4wggKaMB0GA1UdDgQWBBSp3nwTOBI3xbiY1aJPLJpss8GXGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NTcvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg1Ny9xZDU4RXpn U044VzRtTldpVHl5YWJMUEJseHMubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDMYAYAwQCMYBgAwQCy8k0AwQE 0w9wAwQF0xPgMA0GCSqGSIb3DQEBCwUAA4IBAQCjbm/nBXCNVS7KOXgfXmRnWA7I eaWQMkMIKTJdHmLosMJYoIL0wHGxTP8T1RnRRQpCT9N43ZD1qr083Qu9kKdUBWEm L21reDNA4/z7JEc1Eh9FKmaxWRPzPXnATe+M6OI/ua9xqlZwkQK659aUTEQK4YTg ACXAkJsSZI2Qr90CK3jgWxSuxL9HyMu3BdSAtRe4FB8zPwnkv79VTf/rFEFrW6Z5 x524b51yT3ePGAAMq5yBxKqT5MwOz3D4MieRaYYgcdQdA3KUgTm9+vLfG6Yo7ijR 7qqq2XGXwyGFkJuUAHJpiOOUFBAQUcdbQjBCXuRkOxi5XEsbSsR0hjVmtBWZ -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:39 2025 by rpki-client