$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer File: 3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer (raw, json) Hash identifier: Ov6n1a5quiruDofL8NDKtXFe1g7PpNv0niChzDu/Nnw= Subject key identifier: DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1355 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 17 Oct 2025 01:21:38 +0000 Certificate not after: Sat 17 Oct 2026 01:15:13 +0000 Subordinate resources: IP: 138.252.25.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4949 (0x1355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Oct 17 01:21:38 2025 GMT Not After : Oct 17 01:15:13 2026 GMT Subject: CN=DC7ACE41B68FB5C26ECA14355EF2D74BE3EBCFC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:73:2f:bd:2e:ea:59:9d:5b:be:9f:fb:e5: e4:1a:55:04:73:a3:53:0e:86:b2:fd:17:63:c6:9e: dd:46:aa:ca:5a:9b:f1:3c:ff:7e:89:95:dd:78:1e: d0:74:9e:d8:08:5d:e6:2a:63:66:99:40:48:7b:24: a1:d1:1f:bf:6e:37:b5:bb:ce:4c:b8:ab:a0:02:ef: 15:cb:ea:1a:b2:0a:22:33:59:8c:c4:dc:36:1d:38: 8c:35:cf:60:9d:22:a0:96:63:15:2f:d8:74:08:9c: 8a:45:8b:d4:33:0c:e5:70:68:82:c6:70:55:ba:f2: dd:a7:14:6c:20:d1:e4:f5:e5:c2:6e:14:2f:76:78: 64:db:b3:a2:11:6a:6c:e0:fc:42:d7:08:d0:0c:e6: c8:68:2e:72:2f:a9:16:8d:2c:c2:e5:e9:2b:6c:fb: 7f:bd:0c:3b:ce:15:94:bf:65:8f:41:87:b4:4c:f5: ce:45:b9:c4:6f:6a:b5:0f:51:6a:8d:60:84:bf:3f: d1:36:a1:97:ad:ea:fe:4a:74:45:08:8c:eb:99:08: 21:d5:d4:0b:1b:4b:b1:d6:6b:67:41:1c:1e:a0:cf: 01:cf:af:8f:1b:9a:95:64:a7:16:b8:97:f3:9c:e5: 92:fe:2a:73:13:19:80:c1:c7:4c:7f:88:b1:74:cb: 93:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.25.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ef:ff:26:dc:cf:06:78:ed:10:70:8d:c8:a7:38:6e:e0:53: 37:2e:08:48:52:a3:b7:c4:12:37:54:2d:f8:db:d1:80:46:c3: 88:a3:d4:70:49:8e:d5:e5:18:4e:f7:71:ba:83:83:d9:f3:46: dd:13:5e:77:e5:10:6c:d5:7e:68:a3:2f:7d:e7:61:56:97:68: ce:69:ba:dc:45:f2:11:ca:be:06:28:8c:7f:0f:de:40:eb:2e: 22:7f:2e:55:b3:ac:e5:a8:78:08:37:53:b3:b8:aa:e8:07:fe: 8c:a7:43:0b:34:90:62:4e:f5:97:a4:6e:f2:96:7a:1f:bc:1a: 2b:1a:a9:f8:06:5c:ea:bc:2c:10:67:85:1e:15:5f:fc:fd:69: c4:87:68:cc:c9:36:73:52:44:9f:8d:c0:39:92:16:8f:62:dd: e3:22:bb:cd:d4:0d:25:3b:e1:4a:60:69:6d:7b:c3:28:6f:04: 60:12:9b:96:2f:a1:a6:62:37:c7:3a:ee:e4:20:c8:4d:cd:6e: ff:67:a2:be:72:c1:32:32:d3:ad:06:c0:eb:d7:cc:3d:84:66: f8:73:1c:a1:af:38:b0:33:b6:89:fd:90:f0:9d:f2:f1:58:98: 93:92:fd:12:8a:1d:08:97:ce:91:52:4c:6e:ac:f7:d8:02:c2: d5:6b:72:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1UwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MTAxNzAxMjEzOFoXDTI2MTAxNzAxMTUxM1owMzEx MC8GA1UEAxMoREM3QUNFNDFCNjhGQjVDMjZFQ0ExNDM1NUVGMkQ3NEJFM0VCQ0ZD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANywcy+9LupZnVu+n/vl 5BpVBHOjUw6Gsv0XY8ae3Uaqylqb8Tz/fomV3Xge0HSe2Ahd5ipjZplASHskodEf v243tbvOTLiroALvFcvqGrIKIjNZjMTcNh04jDXPYJ0ioJZjFS/YdAicikWL1DMM 5XBogsZwVbry3acUbCDR5PXlwm4UL3Z4ZNuzohFqbOD8QtcI0AzmyGguci+pFo0s wuXpK2z7f70MO84VlL9lj0GHtEz1zkW5xG9qtQ9Rao1ghL8/0Tahl63q/kp0RQiM 65kIIdXUCxtLsdZrZ0EcHqDPAc+vjxualWSnFriX85zlkv4qcxMZgMHHTH+IsXTL kwkCAwEAAaOCAokwggKFMB0GA1UdDgQWBBTces5Bto+1wm7KFDVe8tdL4+vPxTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvNTc1MC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTc1MC8zSHJP UWJhUHRjSnV5aFExWHZMWFMtUHJ6OFUubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivwZMA0GCSqGSIb3DQEB CwUAA4IBAQAW7/8m3M8GeO0QcI3Ipzhu4FM3LghIUqO3xBI3VC3429GARsOIo9Rw SY7V5RhO93G6g4PZ80bdE1535RBs1X5ooy9952FWl2jOabrcRfIRyr4GKIx/D95A 6y4ify5Vs6zlqHgIN1OzuKroB/6Mp0MLNJBiTvWXpG7ylnofvBorGqn4BlzqvCwQ Z4UeFV/8/WnEh2jMyTZzUkSfjcA5khaPYt3jIrvN1A0lO+FKYGlte8MobwRgEpuW L6GmYjfHOu7kIMhNzW7/Z6K+csEyMtOtBsDr18w9hGb4cxyhrziwM7aJ/ZDwnfLx WJiTkv0Sih0Il86RUkxurPfYAsLVa3K2 -----END CERTIFICATE-----Generated at Mon Oct 20 19:57:22 2025 by rpki-client