$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/n_1hCP46yEH5IOgIwaGkN0qBIO0.cer File: n_1hCP46yEH5IOgIwaGkN0qBIO0.cer (raw, json) Hash identifier: jUG8qET8fUmp2k01JY5s18XwNQtIMa/SXPMbUKlDxGg= Subject key identifier: 9F:FD:61:08:FE:3A:C8:41:F9:20:E8:08:C1:A1:A4:37:4A:81:20:ED Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5054 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/n_1hCP46yEH5IOgIwaGkN0qBIO0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 10:04:22 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 2001:f60::/27 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20564 (0x5054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 23 10:04:22 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9FFD6108FE3AC841F920E808C1A1A4374A8120ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c4:c9:8e:30:17:fb:e2:1c:68:94:ff:ca:85: 86:8a:9e:e8:e5:36:1b:23:42:d0:a6:2d:83:14:d5: 5a:66:3d:04:2b:4a:5c:ee:92:8c:75:33:be:b7:e0: 24:40:af:aa:45:1f:ab:a5:d6:18:a5:e3:e9:01:51: 02:43:ea:9f:08:7b:f9:03:9c:f5:28:51:a9:57:da: 39:85:3c:8c:e6:78:3e:fd:7a:dd:53:f3:58:18:67: 75:04:f5:4f:bd:a1:8d:4d:36:9c:5f:88:f6:f8:b9: 39:3a:84:27:65:74:f2:be:df:5a:94:5d:71:40:5f: 1c:cd:b5:06:8e:5e:fa:ad:f2:ac:e6:da:2f:f8:ab: de:7c:17:78:b7:87:b7:2e:c4:dd:4a:d3:32:17:b1: d9:29:46:ae:ae:b4:25:09:da:2a:f1:93:30:ca:93: 03:c1:6f:13:3b:36:1c:b8:a9:7d:b0:40:49:5e:0d: 21:a6:4b:09:31:fc:f6:11:9e:0d:09:71:9c:c0:3b: f2:24:83:70:1a:55:c0:4d:b2:41:db:f6:f5:4e:ac: fb:d5:63:3a:e0:ad:62:77:77:03:34:52:7f:be:6f: a7:69:14:79:05:12:8a:09:bf:9e:29:e5:44:97:28: e0:4f:8d:56:70:24:07:e8:91:01:8c:bf:6c:47:17: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FD:61:08:FE:3A:C8:41:F9:20:E8:08:C1:A1:A4:37:4A:81:20:ED X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30057/n_1hCP46yEH5IOgIwaGkN0qBIO0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:f60::/27 Signature Algorithm: sha256WithRSAEncryption 3c:19:bc:b6:4b:d4:0f:78:31:53:de:a7:a0:c5:fd:9c:7f:76: 1d:0e:bd:90:0c:c7:cd:f9:c3:d3:57:44:3d:2e:4a:38:86:67: 07:71:31:1f:e3:b4:8b:8c:d7:03:2b:a2:1a:71:9e:cb:8a:8e: e1:31:89:53:a9:ee:4a:ae:04:ee:d3:25:5b:d1:60:7d:e7:6e: f8:f6:6c:4c:39:c1:58:09:7a:8a:8a:e8:60:ed:9f:e8:dc:f2: e1:25:f5:8d:54:71:97:eb:22:6e:bf:68:1c:b9:71:35:ce:60: 5f:28:f2:e0:3f:c6:5d:e0:dc:55:c0:29:5a:de:21:96:9e:a0: 20:c9:0c:4f:e7:cf:d3:55:44:e3:cd:ba:e3:98:0a:40:9c:33: a4:13:b4:f3:22:f3:63:57:2f:3b:7a:aa:c0:3a:dc:96:a7:31: 90:81:2c:af:a8:16:66:08:1d:1e:2b:ff:64:e0:5c:f4:bb:42: 49:6a:3a:4e:8d:9b:7a:2b:24:6d:82:cd:87:a6:2e:c2:fe:41: f4:bf:fe:05:d8:b7:a6:ce:3a:34:6d:a5:9e:10:31:3b:30:aa: a4:be:d2:69:e9:6b:e1:53:74:0d:b3:42:32:3e:b7:45:ca:c6: 00:79:5b:44:96:93:59:c9:af:e3:c6:e5:90:9d:7c:be:f8:20: 83:82:41:09 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICUFQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUyMzEwMDQyMloXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoOUZGRDYxMDhGRTNBQzg0MUY5MjBFODA4QzFBMUE0Mzc0QTgxMjBF RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOTEyY4wF/viHGiU/8qF hoqe6OU2GyNC0KYtgxTVWmY9BCtKXO6SjHUzvrfgJECvqkUfq6XWGKXj6QFRAkPq nwh7+QOc9ShRqVfaOYU8jOZ4Pv163VPzWBhndQT1T72hjU02nF+I9vi5OTqEJ2V0 8r7fWpRdcUBfHM21Bo5e+q3yrObaL/ir3nwXeLeHty7E3UrTMhex2SlGrq60JQna KvGTMMqTA8FvEzs2HLipfbBASV4NIaZLCTH89hGeDQlxnMA78iSDcBpVwE2yQdv2 9U6s+9VjOuCtYnd3AzRSf75vp2kUeQUSigm/ninlRJco4E+NVnAkB+iRAYy/bEcX 4zcCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSf/WEI/jrIQfkg6AjBoaQ3SoEg7TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwNTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDU3L25f MWhDUDQ2eUVINUlPZ0l3YUdrTjBxQklPMC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQUgAQ9gMA0GCSqGSIb3 DQEBCwUAA4IBAQA8Gby2S9QPeDFT3qegxf2cf3YdDr2QDMfN+cPTV0Q9Lko4hmcH cTEf47SLjNcDK6IacZ7Lio7hMYlTqe5KrgTu0yVb0WB952749mxMOcFYCXqKiuhg 7Z/o3PLhJfWNVHGX6yJuv2gcuXE1zmBfKPLgP8Zd4NxVwCla3iGWnqAgyQxP58/T VUTjzbrjmApAnDOkE7TzIvNjVy87eqrAOtyWpzGQgSyvqBZmCB0eK/9k4Fz0u0JJ ajpOjZt6KyRtgs2Hpi7C/kH0v/4F2Lemzjo0baWeEDE7MKqkvtJp6WvhU3QNs0Iy PrdFysYAeVtElpNZya/jxuWQnXy++CCDgkEJ -----END CERTIFICATE-----Generated at Mon Jun 2 07:13:39 2025 by rpki-client