$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer File: 9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer (raw, json) Hash identifier: muCmP3H4Suvtczs2ucFZMy/ujJuT5vrwkCIpdajJXEc= Subject key identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 10F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 10:05:33 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 157.66.72.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4337 (0x10f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: May 23 10:05:33 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=F7FCBB98375357213F81D24BE1E19A8C64EBDD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:d5:b4:5e:1e:a5:ac:77:60:c3:c1:d6:b2: a0:27:36:f9:c7:8a:10:fd:7e:44:d4:4d:7a:8a:5f: b7:89:8f:41:3b:0d:1b:34:72:d3:51:a1:26:4f:01: 0c:f4:95:b7:73:8a:86:be:27:c5:84:62:2d:05:3b: 1a:67:e4:9b:5f:de:e4:8d:7e:d3:bf:96:ee:7b:ed: e3:7d:44:35:8d:60:00:dc:1c:3c:65:c5:e6:60:78: 07:6b:ba:1d:81:92:2a:92:44:79:10:5f:68:73:84: fd:d2:06:9c:f0:d8:9f:d9:d6:b4:5e:f2:80:42:76: 58:79:84:d0:25:0a:4f:ce:8a:4f:c6:b3:d3:40:be: 45:ae:e8:b0:b9:cd:1e:bd:b6:73:a4:52:ee:59:6e: 91:8d:e5:1e:bf:f9:ca:97:8a:14:45:40:d1:49:fe: 43:0c:7a:db:59:41:cb:d7:25:27:14:db:f3:fe:dd: 07:5c:34:cd:0d:c5:44:af:53:a5:14:e6:e7:f9:c5: a3:07:14:ea:79:34:d0:92:fd:19:2e:18:dc:5f:c8: 8c:cd:7f:ee:9d:b6:38:1c:b7:10:30:31:81:a7:a9: b8:0c:7d:47:d4:1e:15:0e:6f:fa:95:d3:18:aa:bc: 4f:8e:bf:e7:4e:3a:46:90:c3:65:ff:3b:d2:3c:2c: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.72.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:be:21:75:aa:d1:78:4f:fa:ab:46:94:24:a2:65:63:36:aa: 01:d9:39:c0:a0:0d:79:83:11:a2:5c:91:99:ed:86:21:65:9f: 3d:7c:8c:ad:83:22:84:19:7f:0b:3c:c5:45:1f:77:65:93:de: 63:81:4c:80:e2:74:f3:e9:97:70:a6:56:78:68:df:7c:11:4b: 94:10:dd:ce:17:b8:05:5e:af:08:6e:83:04:6a:c0:1b:8e:a7: 96:58:6d:27:07:c4:95:ff:fe:30:a8:1c:70:5b:73:9d:29:5c: eb:f6:44:04:bc:cc:3b:2a:2c:9b:8e:3a:54:2c:34:d0:cc:e2: 46:ce:99:fa:51:4c:a5:2f:16:a6:d1:06:9e:a0:97:b5:24:f0: 96:51:40:ad:9b:db:9a:f1:ef:72:cf:ce:d6:54:79:bd:4b:b0: 1a:97:50:43:e5:95:28:cd:7f:39:dc:e7:2b:36:90:bd:57:36: fb:bb:4d:c9:d1:81:f1:a5:be:c8:d5:ba:40:f8:60:5d:80:b8: 53:cf:49:dd:5e:65:c8:ae:40:67:e7:2e:63:86:22:95:e4:f6: d1:12:f6:37:12:78:c5:72:d6:e8:e8:17:ca:25:dd:66:e7:2a: fc:4a:e6:82:cf:ad:2c:20:07:4f:f9:6a:50:7e:0b:e2:f4:9b: 99:91:f3:cd -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEPEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDUyMzEwMDUzM1oXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoRjdGQ0JCOTgzNzUzNTcyMTNGODFEMjRCRTFFMTlBOEM2NEVCREQw QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANG91bReHqWsd2DDwday oCc2+ceKEP1+RNRNeopft4mPQTsNGzRy01GhJk8BDPSVt3OKhr4nxYRiLQU7Gmfk m1/e5I1+07+W7nvt431ENY1gANwcPGXF5mB4B2u6HYGSKpJEeRBfaHOE/dIGnPDY n9nWtF7ygEJ2WHmE0CUKT86KT8az00C+Ra7osLnNHr22c6RS7llukY3lHr/5ypeK FEVA0Un+Qwx621lBy9clJxTb8/7dB1w0zQ3FRK9TpRTm5/nFowcU6nk00JL9GS4Y 3F/IjM1/7p22OBy3EDAxgaepuAx9R9QeFQ5v+pXTGKq8T46/5046RpDDZf870jws JfsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBT3/LuYN1NXIT+B0kvh4ZqMZOvdCzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjU3Lzlf eTdtRGRUVnlFX2dkSkw0ZUdhakdUcjNRcy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQkgwDQYJKoZIhvcN AQELBQADggEBADq+IXWq0XhP+qtGlCSiZWM2qgHZOcCgDXmDEaJckZnthiFlnz18 jK2DIoQZfws8xUUfd2WT3mOBTIDidPPpl3CmVnho33wRS5QQ3c4XuAVerwhugwRq wBuOp5ZYbScHxJX//jCoHHBbc50pXOv2RAS8zDsqLJuOOlQsNNDM4kbOmfpRTKUv FqbRBp6gl7Uk8JZRQK2b25rx73LPztZUeb1LsBqXUEPllSjNfznc5ys2kL1XNvu7 TcnRgfGlvsjVukD4YF2AuFPPSd1eZciuQGfnLmOGIpXk9tES9jcSeMVy1ujoF8ol 3WbnKvxK5oLPrSwgB0/5alB+C+L0m5mR880= -----END CERTIFICATE-----Generated at Mon Jun 2 07:24:51 2025 by rpki-client