$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer File: l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer (raw, json) Hash identifier: pieUrI0oZ5yfxJmJ+Ku37fzSMQm+frxqDfrJr+7epGM= Subject key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4F11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 09:55:54 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 2001:2f0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20241 (0x4f11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 23 09:55:54 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:2c:56:40:ef:1b:56:45:1a:b9:05:ca:99: ac:68:6e:70:37:ff:db:c6:95:0b:aa:72:46:b8:ef: b3:5f:d5:ba:0e:6b:ba:d6:8b:d7:82:24:9c:34:ac: 57:98:3a:5a:e6:a8:0d:65:2f:75:36:34:b5:5a:c5: f2:f1:12:6c:9e:ea:ac:2f:16:02:5f:e7:06:ba:10: f5:3f:dd:97:57:fd:7a:64:12:99:a7:1f:08:91:f5: 7f:a9:f6:56:19:d5:a0:e7:04:8f:6f:6c:88:e6:a2: 50:c6:27:2e:e6:c1:00:87:5d:f0:13:39:b8:bb:51: c7:b9:39:19:d5:9f:d2:73:a3:15:55:d7:ac:b0:0e: 87:b6:25:17:1e:62:a7:c4:64:ec:a6:87:64:9b:2e: f2:65:44:6b:a1:67:4a:85:fd:44:8c:23:d8:20:58: 11:f0:18:5a:0c:d1:9a:76:28:26:9b:2d:1d:ed:48: 1b:5c:94:01:ce:bd:3b:79:aa:08:2e:75:aa:7a:02: ed:b3:94:dc:5c:67:f3:58:64:b0:cd:6b:80:ab:d2: 34:32:12:c3:08:7d:0f:40:be:a1:22:01:92:89:24: 58:f6:b6:c0:8d:b3:fe:38:fc:0a:0b:b5:41:b8:00: 7f:2a:2c:4f:9a:00:99:58:49:80:08:21:22:3f:79: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:2f0::/32 Signature Algorithm: sha256WithRSAEncryption 63:a9:1c:9c:00:2e:c9:3a:92:f7:76:f3:f1:fa:32:13:99:b4: fc:79:cc:cb:81:f4:06:04:bd:98:42:3f:99:c4:9c:09:92:3b: ed:67:02:58:56:06:99:03:5e:5c:35:0b:61:b4:58:8d:4c:4b: be:b0:f2:93:89:60:29:fd:94:11:4e:53:e7:8e:99:cc:22:ab: 19:24:26:80:ad:95:c1:32:a9:2a:1e:a1:eb:fc:d2:0c:3e:34: 10:6a:89:5b:7f:30:ed:09:0b:05:f5:3f:3c:29:48:83:e9:c8: c3:1d:48:07:50:28:c4:4d:f6:3c:65:53:e0:e1:89:62:62:44: 8e:44:19:c9:5a:75:93:43:c5:e9:ad:15:40:91:6c:3b:82:45: 97:8b:a4:93:48:cb:34:2a:2a:9d:4f:82:c0:67:c8:c6:96:c1: eb:86:40:5e:8d:5d:cd:aa:39:d3:13:98:09:aa:75:2f:f8:92: 9b:22:ec:d2:d3:f0:6b:15:23:54:35:62:d0:94:ec:0f:13:a3: 27:6f:dd:e2:45:0a:bc:ad:7d:01:ef:44:61:f7:ee:a9:4b:d1: 2a:4f:d5:38:84:88:b1:49:dc:21:2d:97:28:3e:3e:c8:47:47: 00:9f:9a:c2:43:c2:7c:48:54:66:f2:ec:df:d4:c5:d5:28:db: c4:2f:b6:00 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICTxEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUyMzA5NTU1NFoXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoOTdGMkI0QjhGRTI1QTBDMEM3RjRENkZENEZBMUJBN0NBRTYxMkEx MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOY4LFZA7xtWRRq5BcqZ rGhucDf/28aVC6pyRrjvs1/Vug5rutaL14IknDSsV5g6WuaoDWUvdTY0tVrF8vES bJ7qrC8WAl/nBroQ9T/dl1f9emQSmacfCJH1f6n2VhnVoOcEj29siOaiUMYnLubB AIdd8BM5uLtRx7k5GdWf0nOjFVXXrLAOh7YlFx5ip8Rk7KaHZJsu8mVEa6FnSoX9 RIwj2CBYEfAYWgzRmnYoJpstHe1IG1yUAc69O3mqCC51qnoC7bOU3Fxn81hksM1r gKvSNDISwwh9D0C+oSIBkokkWPa2wI2z/jj8Cgu1QbgAfyosT5oAmVhJgAghIj95 SucCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSX8rS4/iWgwMf01v1Pobp8rmEqEjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyNjAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjYwL2xf SzB1UDRsb01ESDlOYjlUNkc2Zks1aEtoSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQLwMA0GCSqGSIb3 DQEBCwUAA4IBAQBjqRycAC7JOpL3dvPx+jITmbT8eczLgfQGBL2YQj+ZxJwJkjvt ZwJYVgaZA15cNQthtFiNTEu+sPKTiWAp/ZQRTlPnjpnMIqsZJCaArZXBMqkqHqHr /NIMPjQQaolbfzDtCQsF9T88KUiD6cjDHUgHUCjETfY8ZVPg4YliYkSORBnJWnWT Q8XprRVAkWw7gkWXi6STSMs0KiqdT4LAZ8jGlsHrhkBejV3NqjnTE5gJqnUv+JKb IuzS0/BrFSNUNWLQlOwPE6Mnb93iRQq8rX0B70Rh9+6pS9EqT9U4hIixSdwhLZco Pj7IR0cAn5rCQ8J8SFRm8uzf1MXVKNvEL7YA -----END CERTIFICATE-----Generated at Mon Jun 2 07:20:16 2025 by rpki-client