$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/8BiJntdGgJUACiAJeIF9JLdVa40.cer File: 8BiJntdGgJUACiAJeIF9JLdVa40.cer (raw, json) Hash identifier: lvruuuxJ7LbUo5a5ufiVF1Mop5HyCl9wIQDl3LtnHUU= Subject key identifier: F0:18:89:9E:D7:46:80:95:00:0A:20:09:78:81:7D:24:B7:55:6B:8D Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5041 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30431/8BiJntdGgJUACiAJeIF9JLdVa40.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30431/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 10:03:49 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 2401:4360::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20545 (0x5041) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 23 10:03:49 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=F018899ED7468095000A200978817D24B7556B8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:77:25:04:8d:59:74:5c:63:1a:bb:f5:cd:52: 9a:ad:84:06:a1:98:96:3a:ed:d9:1a:fe:81:5d:61: 91:f8:5b:ef:40:be:31:97:3a:62:53:43:6e:32:2d: ad:96:a7:12:57:d2:80:43:2c:83:85:e5:f5:47:05: fb:db:ae:56:3d:84:82:92:d0:9c:0a:55:b9:36:4f: 79:5d:ba:ce:a5:7d:37:95:20:75:12:59:07:40:d8: ae:52:ff:31:5a:b7:c2:01:49:db:38:e1:e1:29:dd: 7d:95:ee:87:76:ca:03:9c:fd:c6:60:35:de:02:8c: 2e:1a:f4:9b:07:13:fc:b5:b5:15:58:8c:23:32:c9: b3:c2:6b:3a:0e:7b:05:f0:06:79:f2:7c:e9:fe:04: 97:41:76:93:f9:4d:9c:c7:be:20:d5:12:4c:86:f0: 75:b5:4c:51:e9:9e:39:03:a1:d4:7e:6b:1d:23:a3: 95:54:d6:bc:77:91:88:01:97:6f:00:d7:e5:0b:97: 6f:a9:fd:42:2f:d5:35:cc:88:53:ab:cd:d7:77:0e: 96:c1:6b:3e:e5:2b:bd:1e:80:c3:72:4b:e2:24:94: bc:ec:b3:1a:cb:7e:bf:ef:8d:69:54:45:92:b9:24: 03:4f:bb:36:53:3b:48:5f:7d:55:f2:7e:ed:4b:86: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:18:89:9E:D7:46:80:95:00:0A:20:09:78:81:7D:24:B7:55:6B:8D X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30431/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30431/8BiJntdGgJUACiAJeIF9JLdVa40.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:4360::/32 Signature Algorithm: sha256WithRSAEncryption a7:30:26:d6:51:75:9d:3f:51:35:2e:eb:52:8d:64:50:ec:4e: 38:05:5a:2d:8b:f5:cd:05:2f:e6:d8:18:61:6f:f4:da:7e:39: 46:d4:cc:69:28:15:99:ca:96:ff:c2:f4:18:2f:b8:d7:5d:46: 93:e2:a1:2f:b0:28:6b:d2:8f:f6:16:85:e4:cb:6b:4f:25:18: a2:05:4e:af:1b:15:43:d0:8e:86:f9:25:bd:4e:d2:6f:4d:04: 29:87:db:ba:e9:7a:be:8d:84:e4:b7:b3:52:d1:a9:b7:fe:b3: 40:f6:4b:ce:a4:cd:80:ea:c8:fe:09:f7:9a:1f:c3:c2:c8:12: 7b:7c:f0:c9:6c:2e:9e:38:21:a1:79:cd:6c:3f:83:47:a0:c1: 0f:4f:3b:16:6f:9f:c8:79:fb:dc:2a:b7:7a:c2:56:45:56:0a: 7f:42:b3:62:7a:4d:32:70:07:e9:76:12:7c:90:ea:9b:ac:a2: fc:1c:dd:1d:51:8b:3c:6b:95:1d:7d:e2:6a:ef:61:6b:f4:27: b4:98:9f:41:32:c8:ea:5b:56:6c:af:f3:02:54:35:2c:83:6e: a5:80:25:80:56:ba:86:2f:b4:17:d5:1a:ad:9b:b9:d8:25:26: ce:2c:a2:d0:c3:3f:e0:98:c0:54:2b:4b:ff:df:c5:32:cb:e5: f9:74:1d:d8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICUEEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUyMzEwMDM0OVoXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoRjAxODg5OUVENzQ2ODA5NTAwMEEyMDA5Nzg4MTdEMjRCNzU1NkI4 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPZ3JQSNWXRcYxq79c1S mq2EBqGYljrt2Rr+gV1hkfhb70C+MZc6YlNDbjItrZanElfSgEMsg4Xl9UcF+9uu Vj2EgpLQnApVuTZPeV26zqV9N5UgdRJZB0DYrlL/MVq3wgFJ2zjh4SndfZXuh3bK A5z9xmA13gKMLhr0mwcT/LW1FViMIzLJs8JrOg57BfAGefJ86f4El0F2k/lNnMe+ INUSTIbwdbVMUemeOQOh1H5rHSOjlVTWvHeRiAGXbwDX5QuXb6n9Qi/VNcyIU6vN 13cOlsFrPuUrvR6Aw3JL4iSUvOyzGst+v++NaVRFkrkkA0+7NlM7SF99VfJ+7UuG CMcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTwGIme10aAlQAKIAl4gX0kt1VrjTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0MzEvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDMxLzhC aUpudGRHZ0pVQUNpQUplSUY5SkxkVmE0MC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAUNgMA0GCSqGSIb3 DQEBCwUAA4IBAQCnMCbWUXWdP1E1LutSjWRQ7E44BVoti/XNBS/m2Bhhb/TafjlG 1MxpKBWZypb/wvQYL7jXXUaT4qEvsChr0o/2FoXky2tPJRiiBU6vGxVD0I6G+SW9 TtJvTQQph9u66Xq+jYTkt7NS0am3/rNA9kvOpM2A6sj+CfeaH8PCyBJ7fPDJbC6e OCGhec1sP4NHoMEPTzsWb5/IefvcKrd6wlZFVgp/QrNiek0ycAfpdhJ8kOqbrKL8 HN0dUYs8a5UdfeJq72Fr9Ce0mJ9BMsjqW1Zsr/MCVDUsg26lgCWAVrqGL7QX1Rqt m7nYJSbOLKLQwz/gmMBUK0v/38Uyy+X5dB3Y -----END CERTIFICATE-----Generated at Mon Jun 2 07:21:53 2025 by rpki-client