$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer File: 4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer (raw, json) Hash identifier: knq7Jr0UH5RZLUFo1jkZTFKAFExfJIr1Bqdjd9tyaxI= Subject key identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:40:59 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 193.82.64.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: Jun 15 01:40:59 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=E20E6DF43A3F020ADB675A21F3A91AC4D8F35867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:a8:18:8c:c9:cc:6e:78:8d:b7:d7:c7:e7: bd:b6:24:1d:e8:65:40:c5:45:59:80:2f:4c:41:82: 4d:dc:10:7d:00:31:5b:8d:cc:b1:a6:88:30:8e:5d: a2:2a:78:00:d0:f2:66:7f:f7:7e:df:72:d5:b1:ec: bb:70:3c:db:6b:24:7e:f7:23:3c:c1:4c:f0:07:e4: 9b:e4:59:b2:22:7f:f3:70:df:43:6f:b3:48:75:a4: 60:a5:f1:23:52:18:67:e9:49:a9:fa:76:d5:0b:f6: 40:c4:2c:0b:81:1f:99:a4:0d:1b:09:6f:5c:ac:52: 94:a3:6d:64:cf:df:4c:e2:28:87:be:a7:44:58:fb: 5f:38:64:5e:e8:2a:8d:df:ac:b7:d3:21:2d:4b:fc: a5:7f:fc:68:16:72:6a:66:e1:86:e0:f0:50:f4:64: 5b:d8:6f:b4:99:dc:f8:ce:e6:f4:68:21:71:6f:19: 00:c5:38:ec:9e:59:fd:69:d1:2b:17:42:2e:c9:f1: b6:6e:6f:78:d0:cd:24:7b:df:75:77:bd:79:ef:43: 0d:bf:e2:13:ed:14:dc:48:cc:88:46:be:bf:39:42: 2d:74:6a:22:a6:43:0d:ad:ec:8d:30:1f:77:6f:ad: 37:d2:10:23:f4:1e:ab:a8:c2:d8:22:24:38:2b:90: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.82.64.0/19 Signature Algorithm: sha256WithRSAEncryption be:16:bc:6b:84:fc:37:fb:c0:97:4b:ee:bd:78:77:56:09:a5: 54:cd:7b:54:e5:36:ec:84:3a:b8:47:ea:88:25:13:c4:3e:d0: c5:44:14:ce:4b:b6:df:54:65:8f:ee:aa:1c:0a:ff:96:a3:9e: 13:c4:4b:e0:03:68:36:1e:7f:4f:79:0b:72:da:19:92:d1:e6: a7:f7:c3:fc:42:98:ba:5b:b1:f9:f6:b6:91:16:d1:64:47:d0: 0f:17:7d:f8:f5:3a:cf:56:20:d3:14:34:ab:b7:57:c6:35:c8: e0:75:79:96:c2:47:0c:7c:59:98:87:e1:a8:e0:78:98:ab:e7: 6f:a1:e4:f3:97:60:22:b5:0a:5d:0f:48:9d:16:09:2c:45:a6: f3:01:48:90:87:c9:a8:6f:f2:15:d8:bc:82:f9:36:88:4c:8c: d1:4c:9d:b9:f4:6a:1e:64:1f:55:45:eb:dd:0f:90:40:c5:ba: bf:7a:52:5e:5b:70:cb:0d:11:76:7a:25:33:02:f8:c9:ae:4f: de:7a:d9:46:29:f5:60:a7:da:7c:22:16:ea:a2:d4:9d:c9:45: 68:db:ef:b1:27:b2:61:fd:ff:83:4b:49:5f:e7:ae:b2:69:e9: 70:b7:40:b8:70:ff:53:f9:56:b7:aa:d1:35:ea:60:06:0d:43: 40:c0:58:d4 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI1MDYxNTAxNDA1OVoXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoRTIwRTZERjQzQTNGMDIwQURCNjc1QTIxRjNBOTFBQzREOEYzNTg2 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5dqBiMycxueI2318fn vbYkHehlQMVFWYAvTEGCTdwQfQAxW43MsaaIMI5doip4ANDyZn/3ft9y1bHsu3A8 22skfvcjPMFM8Afkm+RZsiJ/83DfQ2+zSHWkYKXxI1IYZ+lJqfp21Qv2QMQsC4Ef maQNGwlvXKxSlKNtZM/fTOIoh76nRFj7XzhkXugqjd+st9MhLUv8pX/8aBZyambh huDwUPRkW9hvtJnc+M7m9GghcW8ZAMU47J5Z/WnRKxdCLsnxtm5veNDNJHvfdXe9 ee9DDb/iE+0U3EjMiEa+vzlCLXRqIqZDDa3sjTAfd2+tN9IQI/Qeq6jC2CIkOCuQ vnECAwEAAaOCAoYwggKCMB0GA1UdDgQWBBTiDm30Oj8CCttnWiHzqRrE2PNYZzAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MjQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUyNC80ZzV0OURv X0FncmJaMW9oODZrYXhOanpXR2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwVJAMA0GCSqGSIb3DQEBCwUA A4IBAQC+FrxrhPw3+8CXS+69eHdWCaVUzXtU5TbshDq4R+qIJRPEPtDFRBTOS7bf VGWP7qocCv+Wo54TxEvgA2g2Hn9PeQty2hmS0ean98P8Qpi6W7H59raRFtFkR9AP F3349TrPViDTFDSrt1fGNcjgdXmWwkcMfFmYh+Go4HiYq+dvoeTzl2AitQpdD0id FgksRabzAUiQh8mob/IV2LyC+TaITIzRTJ259GoeZB9VRevdD5BAxbq/elJeW3DL DRF2eiUzAvjJrk/eetlGKfVgp9p8IhbqotSdyUVo2++xJ7Jh/f+DS0lf566yaelw t0C4cP9T+Va3qtE16mAGDUNAwFjU -----END CERTIFICATE-----Generated at Fri Jul 4 16:25:46 2025 by rpki-client