$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/c_ecDnoVC5QkVnFc9SCcgvKWGpY.cer File: c_ecDnoVC5QkVnFc9SCcgvKWGpY.cer (raw, json) Hash identifier: +kSyg1Q3WwU/vJIejEhRO4Kx8PPL8pWktOxdAoM+XWo= Subject key identifier: 73:F7:9C:0E:7A:15:0B:94:24:56:71:5C:F5:20:9C:82:F2:96:1A:96 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4FF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/c_ecDnoVC5QkVnFc9SCcgvKWGpY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 10:01:54 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 2401:c800::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20469 (0x4ff5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 23 10:01:54 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=73F79C0E7A150B942456715CF5209C82F2961A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7e:fa:71:77:66:52:f7:8c:33:16:9d:bd:46: 64:67:da:38:20:18:13:09:95:c3:3f:7d:be:a4:72: 51:77:cd:b2:71:38:51:4d:e4:ec:88:66:4b:1c:99: a9:4b:b2:ba:b1:9d:52:91:bd:9c:c1:e3:bd:f7:c8: 49:3b:a6:0c:97:c9:63:0c:25:7f:12:20:04:d4:b5: a9:74:da:d2:79:5d:33:2f:b1:02:0b:66:df:f9:43: 18:04:0a:23:b3:8a:34:3d:75:8c:3b:a8:0e:d3:67: 39:98:63:d5:03:c2:95:05:96:f8:61:97:6c:f1:f0: 35:8a:20:5a:39:47:6f:c6:13:3f:a4:dc:f2:57:c8: 55:f6:15:a0:5e:21:a6:45:da:fa:41:8f:a4:fa:fd: 1a:03:a8:14:d7:4c:3e:dd:31:56:2b:64:9a:29:75: a8:4b:61:71:35:cc:0c:b2:e4:70:38:85:94:aa:78: fe:7a:6c:2d:ba:52:99:8c:e7:64:ba:83:0c:52:50: 8b:43:b8:c3:48:ea:44:68:69:3e:9b:14:0a:c9:dc: 5a:7d:35:b0:4a:4e:09:75:2b:5a:3e:36:09:f9:9f: 53:4f:58:39:91:49:dc:f8:78:b7:6a:7f:b4:42:4e: ca:85:97:2a:63:e7:78:e3:f9:65:fb:86:98:5c:71: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F7:9C:0E:7A:15:0B:94:24:56:71:5C:F5:20:9C:82:F2:96:1A:96 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/c_ecDnoVC5QkVnFc9SCcgvKWGpY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:c800::/32 Signature Algorithm: sha256WithRSAEncryption a6:6b:dd:63:81:b7:9a:72:e8:73:50:7e:74:97:b2:40:a3:4e: 17:39:b9:1c:29:08:e2:ad:c4:96:27:f8:95:0a:57:38:c0:24: 1b:76:03:67:01:ee:7e:e7:08:b9:cf:a4:ec:16:e1:ab:fa:08: a1:d8:b3:c6:57:a6:3b:2d:06:a4:84:1d:b2:57:f7:d2:1d:ac: bf:ff:41:8c:fa:c6:85:76:ca:24:38:63:58:c7:4c:0e:c5:23: 91:16:d3:76:ed:d6:4a:d9:c2:28:0e:44:1d:b6:80:a7:f8:16: 16:7c:e5:cf:eb:41:0a:0e:bc:d9:de:b9:e0:10:d8:9d:b7:64: f8:09:fa:d3:ea:11:13:08:da:e3:df:70:0e:00:fd:f6:71:d7: 5e:89:d5:80:bc:49:78:df:2b:54:d5:81:47:2e:88:73:6d:95: 4a:1d:65:aa:d2:78:72:aa:b1:3a:7f:91:44:7a:74:c7:db:aa: 98:29:49:97:23:98:1e:fb:b5:bc:17:4a:3e:8f:9d:07:47:05: 8d:f0:27:ad:cf:5b:fe:30:a7:98:9d:ea:ca:ce:04:4e:22:91: d4:88:f3:26:96:ed:f8:90:67:11:cf:29:21:5b:4c:ee:68:41: 68:20:11:d3:6e:e0:b2:2d:83:6a:ae:36:be:7f:ee:76:8e:cb: fb:38:c7:57 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICT/UwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUyMzEwMDE1NFoXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoNzNGNzlDMEU3QTE1MEI5NDI0NTY3MTVDRjUyMDlDODJGMjk2MUE5 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOp++nF3ZlL3jDMWnb1G ZGfaOCAYEwmVwz99vqRyUXfNsnE4UU3k7IhmSxyZqUuyurGdUpG9nMHjvffISTum DJfJYwwlfxIgBNS1qXTa0nldMy+xAgtm3/lDGAQKI7OKND11jDuoDtNnOZhj1QPC lQWW+GGXbPHwNYogWjlHb8YTP6Tc8lfIVfYVoF4hpkXa+kGPpPr9GgOoFNdMPt0x Vitkmil1qEthcTXMDLLkcDiFlKp4/npsLbpSmYznZLqDDFJQi0O4w0jqRGhpPpsU CsncWn01sEpOCXUrWj42CfmfU09YOZFJ3Ph4t2p/tEJOyoWXKmPneOP5ZfuGmFxx DqECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRz95wOehULlCRWcVz1IJyC8pYaljAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyOTUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjk1L2Nf ZWNEbm9WQzVRa1ZuRmM5U0NjZ3ZLV0dwWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAcgAMA0GCSqGSIb3 DQEBCwUAA4IBAQCma91jgbeacuhzUH50l7JAo04XObkcKQjircSWJ/iVClc4wCQb dgNnAe5+5wi5z6TsFuGr+gih2LPGV6Y7LQakhB2yV/fSHay//0GM+saFdsokOGNY x0wOxSORFtN27dZK2cIoDkQdtoCn+BYWfOXP60EKDrzZ3rngENidt2T4CfrT6hET CNrj33AOAP32cddeidWAvEl43ytU1YFHLohzbZVKHWWq0nhyqrE6f5FEenTH26qY KUmXI5ge+7W8F0o+j50HRwWN8Cetz1v+MKeYnerKzgROIpHUiPMmlu34kGcRzykh W0zuaEFoIBHTbuCyLYNqrja+f+52jsv7OMdX -----END CERTIFICATE-----Generated at Mon Jun 2 07:18:37 2025 by rpki-client