$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer File: gf7ENcw7DVXepAW2GL1BjhrlZIE.cer (raw, json) Hash identifier: ecnjeQ28LmYsSWAoLJNWI4QrkXyl4oSX8s5TWo5txsQ= Subject key identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 10:04:20 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 193.115.32.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: May 23 10:04:20 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:bb:55:f2:97:bf:55:05:00:61:1b:33:9b: 95:0c:fb:19:b7:b7:f0:a8:c5:3a:8e:fb:39:c7:73: e4:74:2f:41:7e:af:88:af:c9:e5:3f:93:12:e7:a8: 84:bd:f7:54:41:e5:71:fe:11:a0:0f:b1:34:f6:26: e3:2b:95:c9:99:ac:2f:13:65:ae:68:8b:10:c9:a7: f0:b8:5b:cf:0c:ec:0b:2a:9d:e3:94:86:53:62:ec: fa:db:5a:02:ba:ee:82:71:3a:95:51:ab:dd:f1:da: 2a:c3:6e:36:bb:fb:28:91:0d:a8:bf:ae:bb:3c:fc: c3:97:99:4d:80:63:d9:43:bd:8a:82:63:a0:63:f6: 65:f0:b7:35:33:6e:c7:9a:e9:24:b7:01:00:f0:ef: 71:1d:d4:ec:7c:65:08:25:c2:44:9b:4f:bb:7e:30: 42:ca:18:f6:b4:77:ff:b3:de:ba:94:8e:6e:b4:9d: 13:9f:2a:aa:31:6c:1b:df:52:79:01:65:d3:73:17: 54:b7:1f:02:fa:ae:1c:45:3d:86:94:10:f9:bb:de: d3:63:fe:3d:e5:86:c4:c9:2a:a9:cb:5c:34:a5:7a: 2a:65:e3:57:df:ea:8e:d3:6c:32:2e:ee:92:8c:a4: c5:3c:53:13:c5:e1:8e:8f:51:9a:0c:af:7d:a4:19: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.115.32.0/19 Signature Algorithm: sha256WithRSAEncryption 8f:e5:87:74:bb:34:d4:c2:4a:0d:7d:b2:60:71:eb:e3:15:59: 0f:17:59:05:f0:72:0e:dc:7b:08:47:12:42:33:e6:1b:e3:ce: 0d:20:27:32:11:2b:f0:be:5a:9f:2a:5b:29:77:78:5c:25:42: 29:25:e8:db:2a:1d:8d:3e:31:7e:fe:e3:73:f2:8b:e0:9f:f3: d0:42:86:0d:3f:e9:61:d1:36:97:9a:3d:54:7e:9a:10:04:38: 02:db:ad:be:45:2b:d8:9b:e3:69:31:fc:2a:ea:b6:5d:cb:fe: 8a:10:09:6b:d8:08:a6:37:19:10:90:31:ab:58:33:e2:92:7b: 5a:20:2c:13:28:7d:0a:91:f3:c8:58:f9:a7:04:ce:24:a9:45: 4a:f6:70:06:b2:95:0b:d6:d1:4a:e3:18:8e:e7:33:c9:9f:59: 0a:d7:e5:a7:ac:70:3d:aa:86:cb:d1:ad:56:7a:96:48:7b:5d: ef:7b:08:81:e1:6e:97:73:1c:35:3b:36:42:3f:a6:2e:b3:38: e8:1e:b4:34:e9:54:62:8b:92:3d:79:72:fb:2e:e3:f7:4a:98: ad:b8:c2:34:c4:6a:22:e7:0f:29:57:7b:46:31:9c:c1:a9:ba: 39:d5:2e:76:af:6f:32:88:c6:38:34:8c:0b:0c:2d:a9:ff:75: e1:b9:f5:51 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAjowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI1MDUyMzEwMDQyMFoXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoODFGRUM0MzVDQzNCMEQ1NURFQTQwNUI2MThCRDQxOEUxQUU1NjQ4 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcBu1Xyl79VBQBhGzOb lQz7Gbe38KjFOo77Ocdz5HQvQX6viK/J5T+TEueohL33VEHlcf4RoA+xNPYm4yuV yZmsLxNlrmiLEMmn8LhbzwzsCyqd45SGU2Ls+ttaArrugnE6lVGr3fHaKsNuNrv7 KJENqL+uuzz8w5eZTYBj2UO9ioJjoGP2ZfC3NTNux5rpJLcBAPDvcR3U7HxlCCXC RJtPu34wQsoY9rR3/7PeupSObrSdE58qqjFsG99SeQFl03MXVLcfAvquHEU9hpQQ +bve02P+PeWGxMkqqctcNKV6KmXjV9/qjtNsMi7ukoykxTxTE8Xhjo9RmgyvfaQZ 0A0CAwEAAaOCAoswggKHMB0GA1UdDgQWBBSB/sQ1zDsNVd6kBbYYvUGOGuVkgTAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwODEvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDgxL2dm N0VOY3c3RFZYZXBBVzJHTDFCamhybFpJRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXBcyAwDQYJKoZIhvcN AQELBQADggEBAI/lh3S7NNTCSg19smBx6+MVWQ8XWQXwcg7cewhHEkIz5hvjzg0g JzIRK/C+Wp8qWyl3eFwlQikl6NsqHY0+MX7+43Pyi+Cf89BChg0/6WHRNpeaPVR+ mhAEOALbrb5FK9ib42kx/Crqtl3L/ooQCWvYCKY3GRCQMatYM+KSe1ogLBMofQqR 88hY+acEziSpRUr2cAaylQvW0UrjGI7nM8mfWQrX5aescD2qhsvRrVZ6lkh7Xe97 CIHhbpdzHDU7NkI/pi6zOOgetDTpVGKLkj15cvsu4/dKmK24wjTEaiLnDylXe0Yx nMGpujnVLnavbzKIxjg0jAsMLan/deG59VE= -----END CERTIFICATE-----Generated at Mon Jun 2 07:20:13 2025 by rpki-client