$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/txaEo-Vf6S0LJq--GPU2pAkYSCQ.cer File: txaEo-Vf6S0LJq--GPU2pAkYSCQ.cer (raw, json) Hash identifier: dveKmrPGOh2qX7Q4u+cN04gtiiKfEM5sICuYwZ5+VUo= Subject key identifier: B7:16:84:A3:E5:5F:E9:2D:0B:26:AF:BE:18:F5:36:A4:09:18:48:24 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 10F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/523/txaEo-Vf6S0LJq--GPU2pAkYSCQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/523/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 10:05:18 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 76.77.48.0/20 IP: 157.112.192.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4336 (0x10f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: May 23 10:05:18 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=B71684A3E55FE92D0B26AFBE18F536A409184824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:c3:6d:6a:91:2c:06:6c:41:3b:31:37:a9: 08:ff:cb:00:64:80:e8:a8:f3:12:f8:06:5d:27:24: fe:e8:e4:4d:37:1a:e0:2f:ba:e9:f2:6f:54:3f:df: 20:14:82:b3:d6:9f:17:4b:0d:84:9e:55:d5:7d:3c: 6d:44:03:a5:32:0e:43:98:d6:6b:65:b9:90:3a:3f: d7:d5:c5:1e:54:2c:f6:f4:ad:c6:2e:39:78:3c:66: d8:97:82:7d:7a:00:dc:c0:5b:36:71:b2:8e:e3:da: bd:73:de:db:d0:76:30:ed:a5:d8:6f:ca:99:29:b2: c6:bb:d1:f6:d2:1a:ff:4d:2b:cf:e3:ad:d1:13:76: 8a:59:ea:cf:13:4b:41:29:6e:f4:de:87:9c:b9:cf: 6e:a8:c5:3f:16:6e:25:37:5a:04:ad:de:25:50:ba: bc:dc:b3:46:9a:6b:53:bb:cc:2a:99:4b:db:a0:ad: 04:8c:57:37:85:89:37:82:0c:4c:f4:46:47:90:0c: 95:54:ba:6d:b9:a5:b3:12:8b:64:1e:7f:3d:05:45: a0:28:31:fe:61:91:e0:16:97:d1:90:c9:d5:f8:c0: 44:03:b0:55:16:2d:27:a7:d2:75:2f:de:20:c0:cb: ad:3c:0b:7c:61:02:aa:ab:35:a3:dd:8f:b5:58:28: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:16:84:A3:E5:5F:E9:2D:0B:26:AF:BE:18:F5:36:A4:09:18:48:24 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/523/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/523/txaEo-Vf6S0LJq--GPU2pAkYSCQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 76.77.48.0/20 157.112.192.0/18 Signature Algorithm: sha256WithRSAEncryption 01:19:b3:a9:66:ee:fe:f8:c3:2b:f5:c7:61:dc:5b:51:4a:57: 6b:cb:a3:61:40:ec:12:52:66:8b:db:6a:96:95:71:3a:96:5b: 9f:12:75:8b:25:a8:b1:33:c7:eb:13:9e:ea:dd:6d:c5:01:53: ce:47:2e:f0:2d:dc:7d:dc:3f:95:af:b0:08:80:1c:08:d5:7f: 41:97:87:c3:28:26:91:5c:47:08:e5:a2:78:c2:90:02:4d:89: be:e4:24:01:ff:20:61:b5:88:33:f7:3c:7f:57:f9:0c:8a:c2: e7:d3:d4:5c:2d:61:b2:fd:ce:34:50:bf:7a:c0:71:ef:1f:26: 26:2a:d0:4b:66:20:78:1a:4f:4d:dc:7d:d6:83:5c:d1:c0:c6: 93:22:00:ac:69:0d:6c:8e:fb:d1:4c:2a:c5:df:0a:09:fb:74: 61:5c:a2:e5:28:fb:36:74:10:7a:bc:d0:87:ec:8a:63:43:f9: 1c:ec:6a:fc:84:2f:fa:52:0f:2e:62:f7:c1:f1:70:1f:15:dd: 8b:67:10:9a:e8:2e:65:6d:4d:ad:63:29:26:d6:10:2e:33:2c: 7c:37:f8:e3:5b:7c:84:79:ce:5f:f0:d5:80:4f:e0:11:45:5f: 97:9b:42:53:0f:e9:59:d5:89:fe:a7:0e:3a:c0:88:67:ee:31: 8f:2f:33:0f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICEPAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDUyMzEwMDUxOFoXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoQjcxNjg0QTNFNTVGRTkyRDBCMjZBRkJFMThGNTM2QTQwOTE4NDgy NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN2Rw21qkSwGbEE7MTep CP/LAGSA6KjzEvgGXSck/ujkTTca4C+66fJvVD/fIBSCs9afF0sNhJ5V1X08bUQD pTIOQ5jWa2W5kDo/19XFHlQs9vStxi45eDxm2JeCfXoA3MBbNnGyjuPavXPe29B2 MO2l2G/KmSmyxrvR9tIa/00rz+Ot0RN2ilnqzxNLQSlu9N6HnLnPbqjFPxZuJTda BK3eJVC6vNyzRpprU7vMKplL26CtBIxXN4WJN4IMTPRGR5AMlVS6bbmlsxKLZB5/ PQVFoCgx/mGR4BaX0ZDJ1fjARAOwVRYtJ6fSdS/eIMDLrTwLfGECqqs1o92PtVgo 28ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBS3FoSj5V/pLQsmr74Y9TakCRhIJDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MjMvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUyMy90eGFFby1W ZjZTMExKcS0tR1BVMnBBa1lTQ1EubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETE0wAwQGnXDAMA0GCSqGSIb3 DQEBCwUAA4IBAQABGbOpZu7++MMr9cdh3FtRSldry6NhQOwSUmaL22qWlXE6lluf EnWLJaixM8frE57q3W3FAVPORy7wLdx93D+Vr7AIgBwI1X9Bl4fDKCaRXEcI5aJ4 wpACTYm+5CQB/yBhtYgz9zx/V/kMisLn09RcLWGy/c40UL96wHHvHyYmKtBLZiB4 Gk9N3H3Wg1zRwMaTIgCsaQ1sjvvRTCrF3woJ+3RhXKLlKPs2dBB6vNCH7IpjQ/kc 7Gr8hC/6Ug8uYvfB8XAfFd2LZxCa6C5lbU2tYykm1hAuMyx8N/jjW3yEec5f8NWA T+ARRV+Xm0JTD+lZ1Yn+pw46wIhn7jGPLzMP -----END CERTIFICATE-----Generated at Mon Jun 2 07:22:03 2025 by rpki-client