$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/apWCSYAD-L9tk8FR84y0iWpLLVw.cer File: apWCSYAD-L9tk8FR84y0iWpLLVw.cer (raw, json) Hash identifier: yPsaq8llxHrvsk2uOuZyLzlL0NtWjvvG0ZqPRNrk2hY= Subject key identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 508E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 28 May 2025 00:43:23 +0000 Certificate not after: Thu 28 May 2026 00:35:57 +0000 Subordinate resources: IP: 202.253.252.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20622 (0x508e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 28 00:43:23 2025 GMT Not After : May 28 00:35:57 2026 GMT Subject: CN=6A9582498003F8BF6D93C151F38CB4896A4B2D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:18:b3:bf:9b:21:ed:7e:d1:13:6b:dd:5b: 69:7d:30:a7:a7:c1:ac:84:da:9d:60:9b:76:fc:5d: c5:14:ad:ed:66:f2:43:42:34:cb:bf:c2:98:51:89: 81:2b:c0:cf:88:f9:ef:c8:86:8d:1e:4c:16:45:d9: ec:28:dd:66:19:ea:d0:f9:19:d9:57:db:95:7a:a1: 8a:b1:8f:fc:93:4b:b4:ff:56:7a:85:69:34:e1:05: c9:d9:a8:21:09:d5:e0:5a:78:9f:05:3f:0e:aa:65: 95:28:de:2c:5c:d0:f7:4c:53:2a:f1:49:76:12:63: ae:a4:17:46:bd:bc:f0:9b:51:7f:31:51:20:c3:b7: 16:d7:da:07:b2:67:60:f2:d5:78:fb:c3:0c:05:8f: 99:9c:c3:b7:28:14:94:63:ed:18:2c:ed:28:9b:6f: 4c:14:81:43:f9:f2:34:a3:65:54:01:61:2e:ae:f7: 56:c4:46:b9:46:99:5a:63:6a:27:4c:9f:62:97:c5: 56:ab:4b:cb:a5:69:eb:3d:e4:0d:f9:c2:6e:32:a0: fd:5d:b8:4f:58:ab:11:0e:99:f9:b6:f7:91:21:50: a2:f7:fa:7a:91:2a:d2:0f:3b:12:c8:09:56:d4:ec: 7a:3f:b2:90:3f:20:c6:9b:86:24:ad:8b:53:9e:37: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.253.252.0/23 Signature Algorithm: sha256WithRSAEncryption 86:25:90:76:91:45:a5:ca:83:81:e6:28:de:a8:d2:b3:4f:94: 43:8f:b0:87:43:1a:7d:80:09:b8:a4:b9:e6:6e:1f:da:45:04: 1c:e0:86:47:29:5a:c4:8c:72:dd:00:20:73:0d:fb:95:23:b1: 05:d6:5c:d7:92:49:2a:f0:c7:58:cd:cc:d7:49:1d:97:2b:e7: 76:d0:33:73:6f:d5:25:01:d0:8b:92:70:8f:59:d4:c1:1e:dc: 32:a9:55:d6:2a:f3:ed:e2:db:d0:0e:c4:dc:d3:f4:33:54:80: cf:8c:58:18:5d:a5:0e:be:22:3f:8a:1d:bd:3f:d6:22:52:6a: 64:55:0c:77:74:7f:0e:ca:28:af:2e:61:56:be:31:9b:20:c0: fe:98:8b:ff:a6:9a:8d:98:f2:2f:cf:03:05:9f:9c:9f:e9:88: 89:3f:d4:20:c2:df:ce:1d:84:37:d8:be:4d:2d:4e:44:2f:1e: 30:b5:fd:6c:8b:e1:09:fa:8e:61:d2:31:56:63:93:88:34:2d: 1e:c6:1a:48:7d:fa:cd:44:a5:38:db:fa:76:fa:54:0e:9b:95: 7c:f2:74:ed:ea:0c:5c:46:0b:87:e2:2a:7d:45:0d:2e:22:f1: 7e:1d:ac:fb:3d:80:35:3d:62:8c:30:3a:47:7c:d5:9b:2b:2f: 71:43:eb:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICUI4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUyODAwNDMyM1oXDTI2MDUyODAwMzU1N1owMzEx MC8GA1UEAxMoNkE5NTgyNDk4MDAzRjhCRjZEOTNDMTUxRjM4Q0I0ODk2QTRCMkQ1 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6KGLO/myHtftETa91b aX0wp6fBrITanWCbdvxdxRSt7WbyQ0I0y7/CmFGJgSvAz4j578iGjR5MFkXZ7Cjd Zhnq0PkZ2VfblXqhirGP/JNLtP9WeoVpNOEFydmoIQnV4Fp4nwU/DqpllSjeLFzQ 90xTKvFJdhJjrqQXRr288JtRfzFRIMO3FtfaB7JnYPLVePvDDAWPmZzDtygUlGPt GCztKJtvTBSBQ/nyNKNlVAFhLq73VsRGuUaZWmNqJ0yfYpfFVqtLy6Vp6z3kDfnC bjKg/V24T1irEQ6Z+bb3kSFQovf6epEq0g87EsgJVtTsej+ykD8gxpuGJK2LU543 Ut8CAwEAAaOCAokwggKFMB0GA1UdDgQWBBRqlYJJgAP4v22TwVHzjLSJakstXDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi9hcFdD U1lBRC1MOXRrOEZSODR5MGlXcExMVncubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByv38MA0GCSqGSIb3DQEB CwUAA4IBAQCGJZB2kUWlyoOB5ijeqNKzT5RDj7CHQxp9gAm4pLnmbh/aRQQc4IZH KVrEjHLdACBzDfuVI7EF1lzXkkkq8MdYzczXSR2XK+d20DNzb9UlAdCLknCPWdTB HtwyqVXWKvPt4tvQDsTc0/QzVIDPjFgYXaUOviI/ih29P9YiUmpkVQx3dH8Oyiiv LmFWvjGbIMD+mIv/ppqNmPIvzwMFn5yf6YiJP9Qgwt/OHYQ32L5NLU5ELx4wtf1s i+EJ+o5h0jFWY5OINC0exhpIffrNRKU42/p2+lQOm5V88nTt6gxcRguH4ip9RQ0u IvF+Haz7PYA1PWKMMDpHfNWbKy9xQ+sx -----END CERTIFICATE-----Generated at Mon Jun 2 07:23:55 2025 by rpki-client