$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer File: tXkneacSiViHFmJnxL2een2EyBY.cer (raw, json) Hash identifier: 2JPvbLF8SKNZdg8KCveyzyjHaTfk+kea2xrLJLbufeE= Subject key identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 529B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:32:49 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 2401:8b00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 17:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21147 (0x529b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:32:49 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=B5792779A712895887166267C4BD9E7A7D84C816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:ce:7f:14:f8:86:35:d3:e8:21:70:df:79: fa:e0:94:34:49:a4:1b:ed:79:f1:6a:54:09:ed:fa: d0:8b:72:c2:98:d9:bd:92:80:8e:f3:43:7f:f5:5f: cb:69:26:0f:35:35:f1:1f:37:bd:37:1d:ec:09:9f: 66:79:25:37:da:d5:1e:a4:14:70:01:e6:c1:21:e7: 9b:af:ca:29:67:25:1a:ab:d1:aa:43:5b:61:54:98: f6:74:ed:cf:47:82:d8:06:50:4c:27:55:8b:6a:7b: 66:9b:06:31:5c:a7:b1:2b:5b:b3:c1:df:57:69:b3: bf:99:91:ae:e6:b7:a7:a3:31:17:28:79:22:b0:16: f8:3f:87:6e:16:c2:3f:e8:0d:99:86:90:5e:4c:54: 24:a9:5e:f2:e6:40:bb:e6:5f:fb:3b:cd:fd:9e:2a: 4c:42:3c:11:72:bc:91:42:f7:7f:a6:b6:4f:49:d7: 3d:24:ab:ee:2b:6c:c0:01:22:bd:9e:a1:80:4b:23: 79:08:27:36:45:6c:f7:2c:5a:a6:2f:73:cf:21:bf: d2:5e:4f:c1:3d:01:c1:6a:7c:bb:77:34:73:46:b5: 90:31:54:44:39:8b:8b:f0:3d:1d:60:80:1f:e5:31: 9f:7c:38:d4:78:0f:08:e4:c4:11:08:ca:6e:2f:ce: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:8b00::/32 Signature Algorithm: sha256WithRSAEncryption 23:04:8b:9d:58:4e:9f:ec:fb:39:2f:c6:a3:8f:be:c7:c7:e6: ca:ea:1a:f6:75:e6:4b:e0:fd:91:b1:7f:ac:5f:e7:32:db:fe: 3c:76:7a:a5:bc:99:80:cd:9a:9b:41:49:85:e2:59:b6:79:bf: 8c:2b:1f:ca:67:d8:7c:71:89:de:49:48:c5:fb:07:5f:d7:88: 72:22:aa:85:29:d1:94:ef:61:46:75:9d:4a:e6:ad:8d:f8:c0: 01:dc:db:83:f4:b6:ec:b1:81:47:04:ea:b0:cf:9f:c5:35:e7: 86:f8:08:20:a6:8a:65:2c:34:32:0b:21:17:ae:c8:71:35:99: 32:a7:53:29:bc:2c:45:3c:8e:f4:24:7a:70:d8:87:0e:3a:04: 0f:3f:f7:eb:7d:fa:a1:86:29:97:75:5b:e8:e1:fc:b2:78:44: 91:b1:12:10:1e:01:0c:af:2b:79:70:0f:cf:8f:50:c5:bf:e5: 26:98:bf:48:49:01:90:f3:b9:29:66:31:c4:9e:f3:df:fa:0e: 86:f7:ea:6b:8e:76:e5:ac:41:b4:50:98:29:ca:c0:03:7f:ea: 25:5f:db:f1:8c:8a:88:d3:06:3a:db:f2:e2:0e:c3:a5:7b:b6: fa:d5:62:e5:b3:cd:74:2f:53:7e:d4:d8:e9:f0:25:85:2c:12: 3b:6d:ef:45 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICUpswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDcxNTAxMzI0OVoXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoQjU3OTI3NzlBNzEyODk1ODg3MTY2MjY3QzRCRDlFN0E3RDg0Qzgx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMC4zn8U+IY10+ghcN95 +uCUNEmkG+158WpUCe360ItywpjZvZKAjvNDf/Vfy2kmDzU18R83vTcd7AmfZnkl N9rVHqQUcAHmwSHnm6/KKWclGqvRqkNbYVSY9nTtz0eC2AZQTCdVi2p7ZpsGMVyn sStbs8HfV2mzv5mRrua3p6MxFyh5IrAW+D+HbhbCP+gNmYaQXkxUJKle8uZAu+Zf +zvN/Z4qTEI8EXK8kUL3f6a2T0nXPSSr7itswAEivZ6hgEsjeQgnNkVs9yxapi9z zyG/0l5PwT0BwWp8u3c0c0a1kDFURDmLi/A9HWCAH+Uxn3w41HgPCOTEEQjKbi/O i9ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBS1eSd5pxKJWIcWYmfEvZ56fYTIFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxOTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTk3L3RY a25lYWNTaVZpSEZtSm54TDJlZW4yRXlCWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAYsAMA0GCSqGSIb3 DQEBCwUAA4IBAQAjBIudWE6f7Ps5L8ajj77Hx+bK6hr2deZL4P2RsX+sX+cy2/48 dnqlvJmAzZqbQUmF4lm2eb+MKx/KZ9h8cYneSUjF+wdf14hyIqqFKdGU72FGdZ1K 5q2N+MAB3NuD9LbssYFHBOqwz5/FNeeG+AggpoplLDQyCyEXrshxNZkyp1MpvCxF PI70JHpw2IcOOgQPP/frffqhhimXdVvo4fyyeESRsRIQHgEMryt5cA/Pj1DFv+Um mL9ISQGQ87kpZjHEnvPf+g6G9+prjnblrEG0UJgpysADf+olX9vxjIqI0wY62/Li DsOle7b61WLls810L1N+1Njp8CWFLBI7be9F -----END CERTIFICATE-----Generated at Mon Jul 21 18:32:31 2025 by rpki-client