$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/UsysQFVmtOUpwikkOy1F90k_qIU.cer File: UsysQFVmtOUpwikkOy1F90k_qIU.cer (raw, json) Hash identifier: QVpYjMi/Hxq4/MMb57HXDbsmqRr8RGWrkIMR9TI5fNU= Subject key identifier: 52:CC:AC:40:55:66:B4:E5:29:C2:29:24:3B:2D:45:F7:49:3F:A8:85 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4FD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30056/UsysQFVmtOUpwikkOy1F90k_qIU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30056/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 10:01:13 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 2001:358::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 21:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20441 (0x4fd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 23 10:01:13 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=52CCAC405566B4E529C229243B2D45F7493FA885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:a4:d4:a1:68:a4:d9:ac:a5:b0:16:4b:23: 90:f8:00:77:1e:e4:8f:a7:a2:75:ee:50:0b:61:3f: 53:5f:b2:7b:fc:45:40:b0:92:de:d3:d9:d7:2c:78: f6:b2:7c:82:18:13:e3:13:27:18:f0:39:85:85:97: 85:4f:09:7e:a3:86:3d:ca:9f:e5:ff:be:09:d5:c3: e6:f1:ad:3b:1d:81:f9:3b:e7:1f:62:ca:32:03:f2: 49:4c:c4:eb:58:6e:8d:d3:8d:f0:19:72:dd:88:75: a5:f4:1c:0c:06:aa:81:40:d0:04:80:cf:08:3b:37: 2d:94:f7:76:d8:ff:70:f9:a1:ad:66:56:04:74:32: fa:ca:66:6c:3c:7c:7c:46:05:b1:6b:5a:7c:20:08: 59:35:b1:f1:0a:92:eb:a5:08:dc:83:31:c9:2f:17: c1:63:0c:06:6f:3c:01:a2:8f:e0:c9:f3:de:ea:2f: 4b:db:09:98:47:ff:50:df:ed:90:78:bc:9b:16:06: 0a:b4:a7:81:d2:48:7e:30:bd:e6:8b:37:ed:8b:30: 8d:af:b7:d6:92:57:d7:f0:b7:c5:0b:e2:6a:22:4a: 5b:4a:67:f9:59:cb:f8:55:30:5f:34:9f:6f:2e:ac: 7e:51:7e:1a:63:15:65:f3:97:4b:f6:6a:3f:b6:12: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CC:AC:40:55:66:B4:E5:29:C2:29:24:3B:2D:45:F7:49:3F:A8:85 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30056/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30056/UsysQFVmtOUpwikkOy1F90k_qIU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:358::/32 Signature Algorithm: sha256WithRSAEncryption 9d:be:af:c9:83:e8:ce:cf:dd:b3:d8:80:dd:c8:cf:b0:82:c6: b3:5a:08:3d:b4:82:4d:05:46:3f:5a:08:2d:6f:0e:d4:fb:a4: c3:65:62:e2:5e:2c:0e:26:81:7d:9b:b3:d0:56:17:4b:89:59: 79:dc:83:2b:15:ee:09:d5:e7:b9:1a:9f:52:2a:51:b2:da:99: 8e:d6:70:56:5b:2b:6a:56:4c:21:90:63:8a:6d:12:33:7b:5b: 06:ae:aa:77:01:ce:c8:f5:ca:b5:d2:9a:72:fe:20:c8:3b:af: 43:01:a2:c9:a0:0d:74:67:5d:d8:26:68:80:2c:f2:04:51:d6: 60:b2:b7:61:df:2e:05:c1:d1:f1:ef:cf:e3:07:4b:69:c5:59: c0:62:2a:5d:c3:cb:3c:bf:93:25:13:6f:93:e5:24:3d:12:d3: 3f:2f:95:8e:08:67:05:28:5d:17:d7:7a:39:e2:e8:9e:d1:7c: 55:be:b7:34:52:fb:18:77:27:8a:5b:ba:09:32:51:73:14:5f: ba:df:64:f5:69:a4:75:6d:c6:59:af:c1:3a:17:1f:b7:30:9b: 10:38:83:19:5b:9d:62:71:90:7d:ef:5e:0a:d0:80:8e:ab:d6: f7:51:4d:02:7d:48:a3:98:31:01:83:35:d2:de:aa:7f:a4:80: cb:5e:6d:d7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICT9kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUyMzEwMDExM1oXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoNTJDQ0FDNDA1NTY2QjRFNTI5QzIyOTI0M0IyRDQ1Rjc0OTNGQTg4 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL1ypNShaKTZrKWwFksj kPgAdx7kj6eide5QC2E/U1+ye/xFQLCS3tPZ1yx49rJ8ghgT4xMnGPA5hYWXhU8J fqOGPcqf5f++CdXD5vGtOx2B+TvnH2LKMgPySUzE61hujdON8Bly3Yh1pfQcDAaq gUDQBIDPCDs3LZT3dtj/cPmhrWZWBHQy+spmbDx8fEYFsWtafCAIWTWx8QqS66UI 3IMxyS8XwWMMBm88AaKP4Mnz3uovS9sJmEf/UN/tkHi8mxYGCrSngdJIfjC95os3 7Yswja+31pJX1/C3xQviaiJKW0pn+VnL+FUwXzSfby6sflF+GmMVZfOXS/ZqP7YS aK8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBRSzKxAVWa05SnCKSQ7LUX3ST+ohTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwNTYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDU2L1Vz eXNRRlZtdE9VcHdpa2tPeTFGOTBrX3FJVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQNYMA0GCSqGSIb3 DQEBCwUAA4IBAQCdvq/Jg+jOz92z2IDdyM+wgsazWgg9tIJNBUY/Wggtbw7U+6TD ZWLiXiwOJoF9m7PQVhdLiVl53IMrFe4J1ee5Gp9SKlGy2pmO1nBWWytqVkwhkGOK bRIze1sGrqp3Ac7I9cq10ppy/iDIO69DAaLJoA10Z13YJmiALPIEUdZgsrdh3y4F wdHx78/jB0tpxVnAYipdw8s8v5MlE2+T5SQ9EtM/L5WOCGcFKF0X13o54uie0XxV vrc0UvsYdyeKW7oJMlFzFF+632T1aaR1bcZZr8E6Fx+3MJsQOIMZW51icZB9714K 0ICOq9b3UU0CfUijmDEBgzXS3qp/pIDLXm3X -----END CERTIFICATE-----Generated at Wed Jun 4 00:06:47 2025 by rpki-client