$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer File: tXkneacSiViHFmJnxL2een2EyBY.cer (raw, json) Hash identifier: ZFw7x7JC/otQ+6ETpUigDUBkyHSuzn7p/nzDbo7G85g= Subject key identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 47B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Mar 2025 01:36:22 +0000 Certificate not after: Sun 15 Mar 2026 01:30:03 +0000 Subordinate resources: IP: 2401:8b00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18359 (0x47b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000 Validity Not Before: Mar 15 01:36:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B5792779A712895887166267C4BD9E7A7D84C816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:ce:7f:14:f8:86:35:d3:e8:21:70:df:79: fa:e0:94:34:49:a4:1b:ed:79:f1:6a:54:09:ed:fa: d0:8b:72:c2:98:d9:bd:92:80:8e:f3:43:7f:f5:5f: cb:69:26:0f:35:35:f1:1f:37:bd:37:1d:ec:09:9f: 66:79:25:37:da:d5:1e:a4:14:70:01:e6:c1:21:e7: 9b:af:ca:29:67:25:1a:ab:d1:aa:43:5b:61:54:98: f6:74:ed:cf:47:82:d8:06:50:4c:27:55:8b:6a:7b: 66:9b:06:31:5c:a7:b1:2b:5b:b3:c1:df:57:69:b3: bf:99:91:ae:e6:b7:a7:a3:31:17:28:79:22:b0:16: f8:3f:87:6e:16:c2:3f:e8:0d:99:86:90:5e:4c:54: 24:a9:5e:f2:e6:40:bb:e6:5f:fb:3b:cd:fd:9e:2a: 4c:42:3c:11:72:bc:91:42:f7:7f:a6:b6:4f:49:d7: 3d:24:ab:ee:2b:6c:c0:01:22:bd:9e:a1:80:4b:23: 79:08:27:36:45:6c:f7:2c:5a:a6:2f:73:cf:21:bf: d2:5e:4f:c1:3d:01:c1:6a:7c:bb:77:34:73:46:b5: 90:31:54:44:39:8b:8b:f0:3d:1d:60:80:1f:e5:31: 9f:7c:38:d4:78:0f:08:e4:c4:11:08:ca:6e:2f:ce: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:8b00::/32 Signature Algorithm: sha256WithRSAEncryption 83:0d:24:d9:12:65:dc:c9:c2:a3:76:ca:60:54:10:7c:b5:dc: 71:42:a7:4b:77:35:c1:3e:c3:7e:02:fd:2a:15:06:f7:6b:ec: 26:85:ed:99:1c:1f:71:7c:1a:ab:48:fe:ba:e1:ff:7d:34:d6: 04:51:69:ab:58:d9:66:6e:48:a0:8e:db:d2:1c:0c:c8:26:0d: 26:b9:74:a7:3f:8b:ac:d7:af:e0:60:d9:48:b8:c5:b0:d3:a0: 10:bf:bc:1a:ef:ae:31:5c:5d:fe:c7:e6:4a:f0:6c:8e:fb:ab: a9:ea:d3:08:63:ad:ba:fd:93:fc:97:5a:8c:5b:8e:26:af:ea: bb:3d:03:14:b5:8f:de:73:41:a1:c5:c7:75:c1:88:f7:0a:c8: 92:5d:24:09:fa:13:9a:43:23:73:23:a8:22:7d:06:99:80:b7: 9a:b0:0f:1c:3d:58:58:50:04:cf:8d:e4:34:02:30:10:30:f8: 35:4d:31:29:b9:7c:16:8a:95:53:f6:51:4b:c7:b4:c1:43:c3: 62:cc:04:1a:b5:05:a9:87:37:0e:e5:ab:e3:37:fa:4c:f9:63: 42:17:f9:03:5b:e7:bd:8c:41:01:69:a0:c8:27:da:ee:16:4e: 82:e7:32:3a:79:fb:fd:4a:8f:dd:6b:35:f5:53:1d:bb:a8:3f: 20:06:6a:7b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICR7cwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDMxNTAxMzYyMloXDTI2MDMxNTAxMzAwM1owMzEx MC8GA1UEAxMoQjU3OTI3NzlBNzEyODk1ODg3MTY2MjY3QzRCRDlFN0E3RDg0Qzgx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMC4zn8U+IY10+ghcN95 +uCUNEmkG+158WpUCe360ItywpjZvZKAjvNDf/Vfy2kmDzU18R83vTcd7AmfZnkl N9rVHqQUcAHmwSHnm6/KKWclGqvRqkNbYVSY9nTtz0eC2AZQTCdVi2p7ZpsGMVyn sStbs8HfV2mzv5mRrua3p6MxFyh5IrAW+D+HbhbCP+gNmYaQXkxUJKle8uZAu+Zf +zvN/Z4qTEI8EXK8kUL3f6a2T0nXPSSr7itswAEivZ6hgEsjeQgnNkVs9yxapi9z zyG/0l5PwT0BwWp8u3c0c0a1kDFURDmLi/A9HWCAH+Uxn3w41HgPCOTEEQjKbi/O i9ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBS1eSd5pxKJWIcWYmfEvZ56fYTIFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxOTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTk3L3RY a25lYWNTaVZpSEZtSm54TDJlZW4yRXlCWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAYsAMA0GCSqGSIb3 DQEBCwUAA4IBAQCDDSTZEmXcycKjdspgVBB8tdxxQqdLdzXBPsN+Av0qFQb3a+wm he2ZHB9xfBqrSP664f99NNYEUWmrWNlmbkigjtvSHAzIJg0muXSnP4us16/gYNlI uMWw06AQv7wa764xXF3+x+ZK8GyO+6up6tMIY626/ZP8l1qMW44mr+q7PQMUtY/e c0Ghxcd1wYj3CsiSXSQJ+hOaQyNzI6gifQaZgLeasA8cPVhYUATPjeQ0AjAQMPg1 TTEpuXwWipVT9lFLx7TBQ8NizAQatQWphzcO5avjN/pM+WNCF/kDW+e9jEEBaaDI J9ruFk6C5zI6efv9So/dazX1Ux27qD8gBmp7 -----END CERTIFICATE-----Generated at Sat Apr 5 04:16:05 2025 by rpki-client