$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0_4nFVMUwUjdhbciP6DR-P0rJng.cer File: 0_4nFVMUwUjdhbciP6DR-P0rJng.cer (raw, json) Hash identifier: 5iTFni0hIhLaKltqnxqQZ6g8KJu0IGeApvSV/dhh/Ik= Subject key identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5079 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 10:05:31 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 2402:5a00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20601 (0x5079) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 23 10:05:31 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=D3FE27155314C148DD85B7223FA0D1F8FD2B2678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:92:71:ff:81:a2:fa:cf:78:b3:00:06:c9: 57:60:2d:c3:c7:5f:67:ff:e2:7c:51:23:ab:6e:53: f1:93:93:3b:19:7d:3a:93:97:4f:5f:00:9c:c1:73: d8:ef:f1:3f:a3:6a:5b:98:3f:4a:34:40:58:40:b6: 78:90:b3:d2:ee:d7:e8:b5:af:78:f5:0a:d9:17:60: 8f:11:32:b7:19:95:b1:32:00:29:80:de:a3:92:bb: 8c:25:21:de:de:f8:56:d7:a3:80:3f:01:dc:78:de: 51:2b:ff:f3:8c:99:08:eb:cc:30:61:db:94:2d:5c: d7:c0:9d:6e:eb:7b:81:ec:ee:1e:f2:32:99:0a:79: 1e:f1:f1:13:fe:9b:1f:14:76:ea:49:c3:8e:3a:27: bc:9e:99:24:32:44:04:23:86:0b:59:98:a9:09:32: a1:a8:34:f3:a8:a2:fd:c2:f2:b3:6c:7e:92:aa:e0: 7c:0f:d9:93:58:f0:7e:63:7a:f3:4f:05:de:df:d4: d6:c4:fa:ce:a9:89:a6:3d:da:a7:8d:3b:3e:81:da: 5c:33:7b:3d:df:12:a2:42:8b:4b:f0:ce:a8:e7:28: 0a:db:79:56:7e:72:18:dd:45:23:85:0b:34:8a:30: b1:ac:6e:39:04:d4:ec:0d:b2:4d:b0:5d:d8:68:a8: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 1c:41:c8:23:51:d7:cf:6b:f4:60:fc:52:c2:e1:7a:e0:96:8f: 0b:48:4a:63:6c:d6:48:4f:21:fc:da:75:65:07:eb:3c:c1:e7: 00:c6:be:1c:f9:bf:44:8b:e7:ac:81:ff:11:f0:43:9e:ee:f8: 80:79:7f:56:26:51:e2:4b:2d:24:40:9f:84:1e:3b:8f:cd:84: 25:c3:d4:f4:2b:ba:65:69:c4:b0:2c:cb:04:76:36:74:b5:21: c0:1d:6f:20:9f:58:4d:5e:6a:94:9c:e2:28:d3:6f:03:58:84: b6:17:12:80:d4:75:65:97:d6:04:00:a9:f1:5b:06:4c:58:aa: 43:ff:66:96:69:25:51:4b:dd:a9:0d:5c:3f:0d:1d:e9:cb:8d: 95:97:1d:4a:d2:0e:11:3a:53:6d:d8:dc:30:c3:9a:0e:07:58: 51:5a:59:9d:31:f5:b2:ba:c2:5b:0d:24:ce:dd:24:99:94:04: 97:41:da:61:db:db:85:fd:e8:9c:0c:f6:c9:e4:71:34:ca:68: 90:cb:09:39:00:7e:a2:87:33:42:3f:b2:c2:80:60:07:b7:db: 0e:c6:5b:5a:30:63:23:96:a1:ae:a4:cc:69:00:3e:43:e2:df: bc:13:d9:1b:8a:77:16:06:40:7a:83:4d:50:fc:a8:39:ca:99: 0c:97:05:8a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICUHkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUyMzEwMDUzMVoXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoRDNGRTI3MTU1MzE0QzE0OEREODVCNzIyM0ZBMEQxRjhGRDJCMjY3 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjQknH/gaL6z3izAAbJ V2Atw8dfZ//ifFEjq25T8ZOTOxl9OpOXT18AnMFz2O/xP6NqW5g/SjRAWEC2eJCz 0u7X6LWvePUK2RdgjxEytxmVsTIAKYDeo5K7jCUh3t74VtejgD8B3HjeUSv/84yZ COvMMGHblC1c18Cdbut7gezuHvIymQp5HvHxE/6bHxR26knDjjonvJ6ZJDJEBCOG C1mYqQkyoag086ii/cLys2x+kqrgfA/Zk1jwfmN6808F3t/U1sT6zqmJpj3ap407 PoHaXDN7Pd8SokKLS/DOqOcoCtt5Vn5yGN1FI4ULNIowsaxuOQTU7A2yTbBd2Gio oacCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTT/icVUxTBSN2FtyI/oNH4/SsmeDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTM2LzBf NG5GVk1Vd1VqZGhiY2lQNkRSLVAwckpuZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAloAMA0GCSqGSIb3 DQEBCwUAA4IBAQAcQcgjUdfPa/Rg/FLC4Xrglo8LSEpjbNZITyH82nVlB+s8wecA xr4c+b9Ei+esgf8R8EOe7viAeX9WJlHiSy0kQJ+EHjuPzYQlw9T0K7placSwLMsE djZ0tSHAHW8gn1hNXmqUnOIo028DWIS2FxKA1HVll9YEAKnxWwZMWKpD/2aWaSVR S92pDVw/DR3py42Vlx1K0g4ROlNt2Nwww5oOB1hRWlmdMfWyusJbDSTO3SSZlASX Qdph29uF/eicDPbJ5HE0ymiQywk5AH6ihzNCP7LCgGAHt9sOxltaMGMjlqGupMxp AD5D4t+8E9kbincWBkB6g01Q/Kg5ypkMlwWK -----END CERTIFICATE-----Generated at Mon Jun 2 07:22:07 2025 by rpki-client