$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer File: xDheE4hxRBXstVQDz2F-FoOrtdY.cer (raw, json) Hash identifier: oBeUOGt6asnXrlYtFemg2laXsbxyqUmfWQtnzjvxnHg= Subject key identifier: C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 11B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Jul 2025 01:44:00 +0000 Certificate not after: Wed 15 Jul 2026 01:30:01 +0000 Subordinate resources: IP: 165.99.146.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4535 (0x11b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 15 01:44:00 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=C4385E1388714415ECB55403CF617E1683ABB5D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1c:5c:40:1b:6c:b1:f5:69:a1:aa:e0:4b:3b: a2:43:ab:08:32:60:92:a7:af:4e:29:59:1d:25:67: bb:42:66:d5:d8:50:a6:2d:7c:59:7f:55:2c:66:0f: e1:55:ae:5b:3e:22:f5:fa:b6:c6:48:b8:7a:b5:08: 31:57:f4:0f:34:50:cf:3c:70:d1:5c:db:ee:61:b0: e9:08:29:28:e8:e9:89:bc:56:2d:da:2d:d0:02:53: 76:fc:fa:f0:25:8c:17:16:c9:9d:5a:ef:98:f0:d6: f7:ac:0a:d4:f4:8c:9e:07:4b:4c:20:57:68:88:c2: 1b:ed:4a:d9:6f:05:33:d7:52:4e:3a:f2:1c:2a:68: ef:c4:41:19:1c:99:bc:04:f8:17:48:1b:65:9e:eb: da:7e:c8:c5:2d:3a:03:32:8c:84:4b:c1:42:e4:b9: 5c:6e:47:be:0d:f5:92:f2:2a:4e:ca:56:13:49:09: 2e:a6:da:bc:22:49:f8:be:a1:6f:5a:83:14:13:37: cc:ae:89:17:47:a0:2d:a7:b6:1a:85:f9:eb:3c:51: 59:f3:9d:0f:6b:2e:09:33:2b:32:48:74:2c:ea:d8: f7:f6:e6:9e:32:b3:b3:08:24:54:78:5f:c9:a6:18: 92:82:8d:93:3f:9e:39:f5:10:06:08:22:3f:5e:23: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.146.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:ef:ee:d7:07:d9:1b:b1:31:39:2e:b0:b1:02:b6:a0:4a:f8: 3d:c3:8b:79:f1:de:89:76:b7:a0:c3:d0:19:2c:0d:d1:40:f2: 56:fd:c0:93:34:7a:7d:a7:51:30:79:02:4b:7e:0e:b1:5e:39: a1:6c:d6:de:03:c5:f6:a5:14:f0:d9:7c:20:ce:45:9a:7e:70: c1:f3:c8:87:a4:9a:05:ff:8e:54:d7:fc:c5:00:18:72:c1:28: 54:48:89:fe:97:cb:5e:da:b5:63:66:54:62:c1:a6:03:77:5b: 0f:64:d6:f2:fd:81:f8:e5:7b:be:22:ca:91:50:9a:a3:6e:13: ef:ac:79:03:cb:dc:fd:53:1f:41:1c:8b:27:a5:95:30:d3:dd: e8:38:f7:d7:53:42:ad:6f:52:06:c3:50:10:44:eb:c7:cd:ca: 2f:75:d7:1f:b5:85:c9:5d:3d:62:ab:1c:bd:8d:96:72:6d:f6: 4b:b5:c1:55:f8:ae:20:cb:5c:ea:4d:67:e2:e8:35:a1:a4:01: fb:82:1a:81:a1:d5:00:2f:d0:e9:b7:60:87:fb:df:ab:39:51: a6:bb:cc:a1:ca:36:70:45:73:49:85:60:05:81:62:07:5d:9c: 0c:3d:83:19:8f:27:ce:65:37:50:b9:15:35:bb:a7:69:54:82: 03:e2:ab:53 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEbcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDcxNTAxNDQwMFoXDTI2MDcxNTAxMzAwMVowMzEx MC8GA1UEAxMoQzQzODVFMTM4ODcxNDQxNUVDQjU1NDAzQ0Y2MTdFMTY4M0FCQjVE NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN4cXEAbbLH1aaGq4Es7 okOrCDJgkqevTilZHSVnu0Jm1dhQpi18WX9VLGYP4VWuWz4i9fq2xki4erUIMVf0 DzRQzzxw0Vzb7mGw6QgpKOjpibxWLdot0AJTdvz68CWMFxbJnVrvmPDW96wK1PSM ngdLTCBXaIjCG+1K2W8FM9dSTjryHCpo78RBGRyZvAT4F0gbZZ7r2n7IxS06AzKM hEvBQuS5XG5Hvg31kvIqTspWE0kJLqbavCJJ+L6hb1qDFBM3zK6JF0egLae2GoX5 6zxRWfOdD2suCTMrMkh0LOrY9/bmnjKzswgkVHhfyaYYkoKNkz+eOfUQBggiP14j oEMCAwEAAaOCAoswggKHMB0GA1UdDgQWBBTEOF4TiHFEFey1VAPPYX4Wg6u11jAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNzQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjc0L3hE aGVFNGh4UkJYc3RWUUR6MkYtRm9PcnRkWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGlY5IwDQYJKoZIhvcN AQELBQADggEBAD3v7tcH2RuxMTkusLECtqBK+D3Di3nx3ol2t6DD0BksDdFA8lb9 wJM0en2nUTB5Akt+DrFeOaFs1t4DxfalFPDZfCDORZp+cMHzyIekmgX/jlTX/MUA GHLBKFRIif6Xy17atWNmVGLBpgN3Ww9k1vL9gfjle74iypFQmqNuE++seQPL3P1T H0EciyellTDT3eg499dTQq1vUgbDUBBE68fNyi911x+1hcldPWKrHL2NlnJt9ku1 wVX4riDLXOpNZ+LoNaGkAfuCGoGh1QAv0Om3YIf736s5Uaa7zKHKNnBFc0mFYAWB YgddnAw9gxmPJ85lN1C5FTW7p2lUggPiq1M= -----END CERTIFICATE-----Generated at Mon Jul 21 08:50:51 2025 by rpki-client