$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer File: xEEZOsVogvn9Y4tspfB4EcYfFuA.cer (raw, json) Hash identifier: vno5WtCrdabf0XRYZukVbd0wYIEhZWtHLYI0RmxsqCU= Subject key identifier: C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 58BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 15 Sep 2025 01:35:45 +0000 Certificate not after: Tue 15 Sep 2026 01:30:02 +0000 Subordinate resources: IP: 2401:5ac0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22715 (0x58bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:35:45 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=C441193AC56882F9FD638B6CA5F07811C61F16E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9c:fb:43:54:97:d6:4d:1b:ed:11:12:e2:c5: 27:ee:0b:76:97:46:8f:aa:2d:aa:fa:dd:bd:ae:90: e9:c9:73:b1:a7:97:4b:95:da:1f:49:ab:a7:c3:05: be:1f:e9:7e:db:a3:73:52:8e:66:27:c5:88:c2:f6: 0d:0d:b2:f4:43:ef:3e:23:af:37:46:2f:bd:00:58: 78:e3:5a:4a:01:59:4c:40:de:a9:b8:19:26:6f:bb: 72:eb:5e:1b:c8:35:c3:88:5a:ee:16:ae:8a:e0:ee: 5f:d1:0d:cf:95:40:a8:25:f2:ba:96:66:fa:fc:c4: d2:b5:84:ca:0c:8e:df:4d:b6:f1:72:9f:ad:f7:dc: 24:d8:a4:4b:5a:c8:13:38:b1:f6:2e:5e:ce:c1:38: f5:b0:c0:61:5b:07:45:6c:5f:3b:c1:18:85:24:17: 4e:4c:5c:5f:64:3b:98:ad:80:58:31:30:ff:9b:74: a3:1b:d7:05:e3:25:b6:ea:f3:31:ec:f4:ec:e0:d0: 79:7d:56:a5:c5:c9:68:ed:87:58:56:c2:aa:2b:b9: 51:96:24:d4:fc:18:ce:6c:66:61:b8:b1:ea:1f:c4: 4f:b0:ab:36:46:28:7d:f9:3c:65:c6:4c:18:51:c2: 35:46:ee:03:00:1a:7a:dd:8e:5f:b6:00:32:71:49: 1a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:5ac0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:5d:83:d3:ee:ae:39:43:1b:8d:34:29:fe:87:3d:24:66:b2: bd:cd:99:00:14:23:49:f7:74:96:ce:50:46:d6:dd:25:7b:1c: 91:38:66:8f:95:51:49:9c:bc:b9:a8:69:23:97:5c:b7:1c:83: 5f:e0:01:8d:55:70:bf:e6:0c:21:ce:db:a3:6c:c0:a1:d0:72: 4f:fd:39:4e:e5:7f:66:03:53:36:a6:2e:ef:4c:74:5a:69:bb: 77:c9:f5:8f:b9:27:55:2a:f3:0b:2a:9b:a7:85:6e:86:d9:97: 22:81:ed:b2:ea:44:64:e5:b6:b4:6e:11:8e:fb:ff:86:b4:79: a2:7a:36:c5:2c:49:93:cf:7e:88:ff:71:4d:9b:6c:5d:e7:5e: 57:cd:16:a5:eb:9a:0a:75:15:ec:e0:0a:3d:7d:b3:27:a3:02: f4:81:e8:5b:c9:56:37:96:51:48:d0:17:ca:49:42:14:51:d1: 6a:24:72:e3:fe:f2:b0:1c:cf:fb:d1:13:9a:10:3c:25:20:e3: 25:c5:43:ba:2e:33:e3:63:40:3a:40:f2:e0:83:ba:21:f2:d0: 5d:22:c6:a6:b7:8d:0b:f2:e3:3a:87:45:2d:e8:ff:70:75:8f: 7a:64:df:e3:aa:db:8a:bd:21:ff:7c:ae:94:18:8d:84:29:6c: ac:49:34:05 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICWLswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDkxNTAxMzU0NVoXDTI2MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoQzQ0MTE5M0FDNTY4ODJGOUZENjM4QjZDQTVGMDc4MTFDNjFGMTZF MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANqc+0NUl9ZNG+0REuLF J+4LdpdGj6otqvrdva6Q6clzsaeXS5XaH0mrp8MFvh/pftujc1KOZifFiML2DQ2y 9EPvPiOvN0YvvQBYeONaSgFZTEDeqbgZJm+7cuteG8g1w4ha7hauiuDuX9ENz5VA qCXyupZm+vzE0rWEygyO30228XKfrffcJNikS1rIEzix9i5ezsE49bDAYVsHRWxf O8EYhSQXTkxcX2Q7mK2AWDEw/5t0oxvXBeMlturzMez07ODQeX1WpcXJaO2HWFbC qiu5UZYk1PwYzmxmYbix6h/ET7CrNkYoffk8ZcZMGFHCNUbuAwAaet2OX7YAMnFJ GmUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTEQRk6xWiC+f1ji2yl8HgRxh8W4DAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyOTkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjk5L3hF RVpPc1ZvZ3ZuOVk0dHNwZkI0RWNZZkZ1QS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAVrAMA0GCSqGSIb3 DQEBCwUAA4IBAQCaXYPT7q45QxuNNCn+hz0kZrK9zZkAFCNJ93SWzlBG1t0lexyR OGaPlVFJnLy5qGkjl1y3HINf4AGNVXC/5gwhztujbMCh0HJP/TlO5X9mA1M2pi7v THRaabt3yfWPuSdVKvMLKpunhW6G2Zcige2y6kRk5ba0bhGO+/+GtHmiejbFLEmT z36I/3FNm2xd515XzRal65oKdRXs4Ao9fbMnowL0gehbyVY3llFI0BfKSUIUUdFq JHLj/vKwHM/70ROaEDwlIOMlxUO6LjPjY0A6QPLgg7oh8tBdIsamt40L8uM6h0Ut 6P9wdY96ZN/jqtuKvSH/fK6UGI2EKWysSTQF -----END CERTIFICATE-----Generated at Wed Oct 8 15:41:41 2025 by rpki-client