$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer File: 4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer (raw, json) Hash identifier: oBK+tJqCYuCHi15gmDpIvPBQ8mm1jOGWBu2I6seuGDY= Subject key identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 10:00:24 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 193.82.64.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: May 23 10:00:24 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E20E6DF43A3F020ADB675A21F3A91AC4D8F35867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:a8:18:8c:c9:cc:6e:78:8d:b7:d7:c7:e7: bd:b6:24:1d:e8:65:40:c5:45:59:80:2f:4c:41:82: 4d:dc:10:7d:00:31:5b:8d:cc:b1:a6:88:30:8e:5d: a2:2a:78:00:d0:f2:66:7f:f7:7e:df:72:d5:b1:ec: bb:70:3c:db:6b:24:7e:f7:23:3c:c1:4c:f0:07:e4: 9b:e4:59:b2:22:7f:f3:70:df:43:6f:b3:48:75:a4: 60:a5:f1:23:52:18:67:e9:49:a9:fa:76:d5:0b:f6: 40:c4:2c:0b:81:1f:99:a4:0d:1b:09:6f:5c:ac:52: 94:a3:6d:64:cf:df:4c:e2:28:87:be:a7:44:58:fb: 5f:38:64:5e:e8:2a:8d:df:ac:b7:d3:21:2d:4b:fc: a5:7f:fc:68:16:72:6a:66:e1:86:e0:f0:50:f4:64: 5b:d8:6f:b4:99:dc:f8:ce:e6:f4:68:21:71:6f:19: 00:c5:38:ec:9e:59:fd:69:d1:2b:17:42:2e:c9:f1: b6:6e:6f:78:d0:cd:24:7b:df:75:77:bd:79:ef:43: 0d:bf:e2:13:ed:14:dc:48:cc:88:46:be:bf:39:42: 2d:74:6a:22:a6:43:0d:ad:ec:8d:30:1f:77:6f:ad: 37:d2:10:23:f4:1e:ab:a8:c2:d8:22:24:38:2b:90: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.82.64.0/19 Signature Algorithm: sha256WithRSAEncryption 23:23:16:a3:9d:75:e8:b0:d4:b4:ff:80:05:23:1a:64:17:91: dc:d2:4f:bf:f7:81:68:36:c0:67:a8:55:70:dd:4e:11:ce:33: 55:24:11:06:8f:32:71:49:11:06:03:59:39:59:3b:23:99:9c: b2:59:11:e8:ec:38:ea:7d:26:db:bc:b9:69:c7:47:f7:b3:7e: 88:18:e9:ff:f5:27:cb:34:22:b1:56:e5:9c:e4:b3:fe:44:b5: 27:3a:31:11:79:42:20:e0:eb:c7:29:30:a1:53:ba:7d:59:90: 94:d6:3a:0e:01:2a:56:dd:30:fc:37:b6:9b:42:1c:69:ad:b4: bd:6a:4f:85:3b:16:c2:d1:93:d5:3a:c5:1d:d9:d0:03:75:49: 50:74:81:65:51:3e:3b:23:2b:5c:6e:a6:e1:bd:05:cf:26:ce: 0b:b7:9f:b9:79:24:7e:f6:6e:01:f5:2c:75:63:61:5e:70:78: f4:1b:cb:4f:96:9e:46:f2:15:39:22:ce:75:37:36:6d:13:11: 05:2c:ee:52:d1:9d:f7:04:65:27:39:19:23:d4:08:77:7d:c7: 0c:98:71:54:88:a4:29:95:92:56:4c:db:a2:ea:f9:ee:b8:b9: 44:76:84:8d:e0:22:62:08:42:03:68:34:16:6e:c3:89:02:a0: 71:2c:43:3b -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI1MDUyMzEwMDAyNFoXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoRTIwRTZERjQzQTNGMDIwQURCNjc1QTIxRjNBOTFBQzREOEYzNTg2 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5dqBiMycxueI2318fn vbYkHehlQMVFWYAvTEGCTdwQfQAxW43MsaaIMI5doip4ANDyZn/3ft9y1bHsu3A8 22skfvcjPMFM8Afkm+RZsiJ/83DfQ2+zSHWkYKXxI1IYZ+lJqfp21Qv2QMQsC4Ef maQNGwlvXKxSlKNtZM/fTOIoh76nRFj7XzhkXugqjd+st9MhLUv8pX/8aBZyambh huDwUPRkW9hvtJnc+M7m9GghcW8ZAMU47J5Z/WnRKxdCLsnxtm5veNDNJHvfdXe9 ee9DDb/iE+0U3EjMiEa+vzlCLXRqIqZDDa3sjTAfd2+tN9IQI/Qeq6jC2CIkOCuQ vnECAwEAAaOCAoYwggKCMB0GA1UdDgQWBBTiDm30Oj8CCttnWiHzqRrE2PNYZzAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MjQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUyNC80ZzV0OURv X0FncmJaMW9oODZrYXhOanpXR2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwVJAMA0GCSqGSIb3DQEBCwUA A4IBAQAjIxajnXXosNS0/4AFIxpkF5Hc0k+/94FoNsBnqFVw3U4RzjNVJBEGjzJx SREGA1k5WTsjmZyyWRHo7DjqfSbbvLlpx0f3s36IGOn/9SfLNCKxVuWc5LP+RLUn OjEReUIg4OvHKTChU7p9WZCU1joOASpW3TD8N7abQhxprbS9ak+FOxbC0ZPVOsUd 2dADdUlQdIFlUT47IytcbqbhvQXPJs4Lt5+5eSR+9m4B9Sx1Y2FecHj0G8tPlp5G 8hU5Is51NzZtExEFLO5S0Z33BGUnORkj1Ah3fccMmHFUiKQplZJWTNui6vnuuLlE doSN4CJiCEIDaDQWbsOJAqBxLEM7 -----END CERTIFICATE-----Generated at Mon Jun 2 07:22:11 2025 by rpki-client