$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer File: y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer (raw, json) Hash identifier: /FNy8s0ycQf9faiI1yfSEYIPtbH+j0379dDiHJHj9IA= Subject key identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:44:46 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 2402:2f60::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 03:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23509 (0x5bd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:44:46 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:01:43:19:a7:c6:9e:f7:a2:cd:57:41:1e: 6c:c2:a5:cc:08:82:c6:36:fd:60:e8:fe:d0:53:43: 1c:ea:ea:64:a4:36:69:27:5d:78:b2:ce:fc:94:24: c9:64:70:fc:00:92:5e:36:78:fe:5b:12:70:6d:ff: ad:df:ac:df:cc:0b:7d:58:0a:6f:3b:e8:01:52:1d: 0b:42:8c:4a:42:84:28:de:b6:28:8a:9d:84:06:88: 29:ee:9e:b6:e5:b4:62:e4:f2:53:35:30:8e:2a:84: aa:e5:6c:a3:0b:63:82:fa:67:c2:9a:3d:31:e0:61: f7:b8:63:d6:5c:c1:98:e1:33:ff:5a:23:13:c7:d1: 53:f6:fa:ff:df:68:76:72:cc:8f:9b:80:3b:a7:f5: 84:24:fc:76:d4:c4:4e:1c:fb:a7:5c:64:fe:6e:c9: 05:70:a6:33:9f:a9:61:ac:72:02:19:f8:4d:3c:0f: d0:5d:61:f4:43:c7:b4:c2:32:c9:55:69:0c:02:8e: f7:14:10:ad:9f:3f:c5:c7:6f:d6:46:08:76:63:a7: c4:72:8e:6a:c4:dc:c8:8b:5b:66:ae:21:ef:26:07: 3b:d5:e1:20:78:8d:5f:a9:25:3b:50:f1:89:4c:d4: c1:c7:a8:71:98:2e:ad:5c:a3:ad:93:6a:cd:96:90: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2f60::/32 Signature Algorithm: sha256WithRSAEncryption 67:5b:8d:b2:58:31:2f:56:81:f6:c7:28:b2:c9:41:cb:79:1f: 7e:62:e7:2b:2f:65:96:c2:2f:d7:6b:a2:17:65:29:73:f9:f8: 15:5b:26:82:82:61:23:18:38:ac:29:9c:53:1b:ff:4a:8f:86: 2b:7d:cd:85:9b:d1:70:da:13:27:1b:6c:fd:6e:ee:45:b8:60: 7f:f2:37:fa:8f:fe:90:53:36:cf:e5:7d:59:9f:98:f4:d9:d7: 48:d8:6b:be:31:59:a2:ed:ac:3d:92:43:63:20:0d:33:59:4d: 31:e6:e0:c3:b1:a8:fc:e9:b6:4f:10:a1:3f:ef:a0:e1:db:ce: b9:e2:82:9d:b3:44:36:86:a6:8b:7b:a9:ed:9a:1e:ee:6f:59: a1:29:3a:23:30:b2:8b:4b:a2:38:70:e3:4b:e3:b4:28:5b:b1: 16:1a:13:4e:1d:d9:bb:3c:23:35:76:0d:3c:17:17:96:78:1f: 12:87:34:78:3d:40:d2:29:58:89:2e:09:01:5f:25:29:41:c6: 84:82:cc:02:cd:1a:8b:a0:9a:25:a9:65:ba:28:82:e1:fc:36: 3e:73:61:d5:ce:71:fa:39:d5:0f:cf:0a:26:16:e3:29:88:52: e3:25:b2:81:8e:04:e3:6b:0b:4d:17:bf:15:90:7d:c5:9f:80: 5c:36:e8:c0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICW9UwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxNDQ0NloXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoQ0JBMzJGNDRCQzMyRjFFMUUxOTJGRTJDNTQ3M0MwRDcyOUY4OEM0 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ7eAUMZp8ae96LNV0Ee bMKlzAiCxjb9YOj+0FNDHOrqZKQ2aSddeLLO/JQkyWRw/ACSXjZ4/lsScG3/rd+s 38wLfVgKbzvoAVIdC0KMSkKEKN62KIqdhAaIKe6etuW0YuTyUzUwjiqEquVsowtj gvpnwpo9MeBh97hj1lzBmOEz/1ojE8fRU/b6/99odnLMj5uAO6f1hCT8dtTEThz7 p1xk/m7JBXCmM5+pYaxyAhn4TTwP0F1h9EPHtMIyyVVpDAKO9xQQrZ8/xcdv1kYI dmOnxHKOasTcyItbZq4h7yYHO9XhIHiNX6klO1DxiUzUwceocZgurVyjrZNqzZaQ jG8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBTLoy9EvDLx4eGS/ixUc8DXKfiMTjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NTAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDUwL3k2 TXZSTHd5OGVIaGt2NHNWSFBBMXluNGpFNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAi9gMA0GCSqGSIb3 DQEBCwUAA4IBAQBnW42yWDEvVoH2xyiyyUHLeR9+YucrL2WWwi/Xa6IXZSlz+fgV WyaCgmEjGDisKZxTG/9Kj4Yrfc2Fm9Fw2hMnG2z9bu5FuGB/8jf6j/6QUzbP5X1Z n5j02ddI2Gu+MVmi7aw9kkNjIA0zWU0x5uDDsaj86bZPEKE/76Dh28654oKds0Q2 hqaLe6ntmh7ub1mhKTojMLKLS6I4cONL47QoW7EWGhNOHdm7PCM1dg08FxeWeB8S hzR4PUDSKViJLgkBXyUpQcaEgswCzRqLoJolqWW6KILh/DY+c2HVznH6OdUPzwom FuMpiFLjJbKBjgTjawtNF78VkH3Fn4BcNujA -----END CERTIFICATE-----Generated at Sat Nov 1 04:11:17 2025 by rpki-client