$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer File: r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer (raw, json) Hash identifier: AmMlGAaG9VNQ4c6g89hfP8fwGYyKodNzvslJ6fxirSs= Subject key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 508B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 26 May 2025 08:02:52 +0000 Certificate not after: Tue 26 May 2026 07:57:30 +0000 Subordinate resources: IP: 103.144.122.0/23 IP: 133.32.192.0/21 IP: 133.226.176.0/21 IP: 202.233.72.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20619 (0x508b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 26 08:02:52 2025 GMT Not After : May 26 07:57:30 2026 GMT Subject: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:28:97:f3:a5:31:74:98:62:e4:0d:0a:0f: 27:80:fc:f7:84:ec:3a:61:41:d3:55:cc:3a:1a:b2: 2e:6d:3f:c7:39:f1:57:83:62:fc:e6:ab:4c:98:c9: 55:0d:f1:5a:1b:22:1d:04:27:5e:30:aa:85:68:54: d7:b3:14:3e:75:ec:41:f9:f0:d7:b0:ec:fd:84:97: 5d:82:4c:83:7e:ce:80:da:d1:58:6f:e0:86:73:73: a1:44:ba:63:dd:e3:04:d9:85:2b:8d:42:96:d7:00: d0:6f:e4:c3:8b:31:f9:f5:ba:5f:ea:88:85:52:c5: cf:3d:82:1e:f8:a8:06:36:90:d7:84:86:89:d5:a2: bd:36:10:c9:94:74:bf:c0:77:68:e9:51:b4:52:ab: c0:cb:bb:24:76:f1:f3:cd:2d:0b:ad:46:71:8a:2d: a7:cd:19:58:f4:00:a3:ea:89:f7:46:cc:6f:b8:47: 64:56:1d:9c:34:74:c0:d3:15:8c:6e:43:4b:49:92: 3c:93:7f:35:5c:82:cc:56:6d:9c:8c:6b:71:b6:83: 5a:fb:e7:86:c4:85:a2:0c:2b:3a:c5:da:0d:5f:b3: 72:6e:cf:53:86:6b:6d:dd:c5:2d:15:11:68:52:be: c4:44:32:28:09:1c:db:de:f3:8f:3e:7f:0d:76:ee: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.122.0/23 133.32.192.0/21 133.226.176.0/21 202.233.72.0/22 Signature Algorithm: sha256WithRSAEncryption 08:eb:03:70:d7:6c:22:70:2e:49:a1:d8:72:24:e3:a7:df:64: 45:63:8c:87:4c:a7:cc:9d:d5:5c:43:ea:69:18:eb:bf:6d:90: 9c:ad:9c:73:cd:be:1c:24:fb:ea:0c:84:c9:f8:86:3a:61:2a: 99:64:bb:e8:be:bb:7a:0d:f9:c4:dd:50:77:00:95:d6:eb:7f: 36:8d:5c:18:b4:8c:2d:57:72:40:2e:f2:2a:01:41:6b:ef:bb: 37:fe:82:f2:34:0a:fa:9d:51:a5:12:4a:c0:09:58:f3:97:80: af:5e:c6:3e:b1:6d:b0:f5:4b:20:d6:ee:05:1b:fd:90:fb:60: c8:59:eb:81:d2:15:cc:f2:47:97:47:66:24:d6:23:7e:94:af: 8b:e5:d6:05:a0:da:e4:d2:cb:44:dc:d7:3b:fa:74:8e:f4:ca: 47:f7:7a:4e:9a:a0:61:f8:86:4f:4e:fa:c3:0d:b1:5d:3e:04: f1:6d:6d:8c:f7:93:ff:26:60:20:e9:3e:da:d2:10:a3:32:9e: 46:6d:14:16:6a:41:9b:e2:74:f1:9b:a9:a1:50:c8:a0:51:6e: 72:fc:ec:ec:dd:04:36:bf:31:b5:7a:3d:40:df:ed:88:e7:a4: 92:98:6b:39:6b:c8:e9:96:73:c8:93:88:57:31:a2:b6:f1:70: a6:3e:cd:81 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICUIswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUyNjA4MDI1MloXDTI2MDUyNjA3NTczMFowMzEx MC8GA1UEAxMoQUZEODI0NzdBMDkxQjE3Q0RBNjFDNTU2M0JDMjkyMENEQ0Q3QUFB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANjgKJfzpTF0mGLkDQoP J4D894TsOmFB01XMOhqyLm0/xznxV4Ni/OarTJjJVQ3xWhsiHQQnXjCqhWhU17MU PnXsQfnw17Ds/YSXXYJMg37OgNrRWG/ghnNzoUS6Y93jBNmFK41CltcA0G/kw4sx +fW6X+qIhVLFzz2CHvioBjaQ14SGidWivTYQyZR0v8B3aOlRtFKrwMu7JHbx880t C61GcYotp80ZWPQAo+qJ90bMb7hHZFYdnDR0wNMVjG5DS0mSPJN/NVyCzFZtnIxr cbaDWvvnhsSFogwrOsXaDV+zcm7PU4Zrbd3FLRURaFK+xEQyKAkc297zjz5/DXbu Az8CAwEAAaOCAp0wggKZMB0GA1UdDgQWBBSv2CR3oJGxfNphxVY7wpIM3NeqpTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTA2L3I5 Z2tkNkNSc1h6YVljVldPOEtTRE56WHFxVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAFnkHoDBAOFIMADBAOF 4rADBALK6UgwDQYJKoZIhvcNAQELBQADggEBAAjrA3DXbCJwLkmh2HIk46ffZEVj jIdMp8yd1VxD6mkY679tkJytnHPNvhwk++oMhMn4hjphKplku+i+u3oN+cTdUHcA ldbrfzaNXBi0jC1XckAu8ioBQWvvuzf+gvI0CvqdUaUSSsAJWPOXgK9exj6xbbD1 SyDW7gUb/ZD7YMhZ64HSFczyR5dHZiTWI36Ur4vl1gWg2uTSy0Tc1zv6dI70ykf3 ek6aoGH4hk9O+sMNsV0+BPFtbYz3k/8mYCDpPtrSEKMynkZtFBZqQZvidPGbqaFQ yKBRbnL87OzdBDa/MbV6PUDf7YjnpJKYazlryOmWc8iTiFcxorbxcKY+zYE= -----END CERTIFICATE-----Generated at Mon Jun 2 07:25:33 2025 by rpki-client