$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer File: 4qCwBJ8aPRI9yspc61tOXp7HlNc.cer (raw, json) Hash identifier: 5oKD8gU4/IafnRRDTmQfojGu0fXlWVLVG93uRQaJxrw= Subject key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0FB3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:32:08 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 160.27.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4019 (0xfb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: May 15 01:32:08 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bc:6a:b6:a9:23:69:f2:e2:1f:16:24:23:bc: 7b:7e:76:cc:7c:31:ff:5a:60:4e:fd:47:55:52:d8: 8c:65:f5:fe:f6:ed:64:f0:a8:bd:80:fe:50:8e:13: 66:e7:08:e9:6e:ea:48:fb:02:75:19:40:81:42:ea: 9a:eb:36:18:97:03:f8:a4:c0:60:a4:10:41:b5:bf: 2f:e5:70:b1:ec:4b:cf:a9:0a:6a:00:47:6f:3b:03: 09:84:b9:dc:4e:f6:f7:90:fc:c5:56:be:88:cb:7b: 68:51:62:d6:36:5c:31:45:f6:29:b1:0a:60:ce:76: 39:cb:fb:ad:49:f2:2d:31:d6:48:91:06:82:d2:27: b5:25:84:32:12:b3:c8:df:8a:33:28:72:d8:4d:6e: d0:c6:4b:ad:bf:ed:3f:a2:37:57:69:d1:ea:95:2e: c4:40:93:11:43:4c:21:80:1b:8d:f7:cd:6a:61:11: 63:9b:02:2b:39:63:6d:e4:9a:42:7a:16:99:25:36: 45:fe:aa:ad:d2:eb:a4:20:a6:10:5d:60:e0:b8:66: af:66:a7:74:0e:82:2b:97:26:33:e1:0e:00:90:f8: 6b:29:53:48:a5:10:a8:e0:c6:91:53:8b:0f:89:af: 58:61:af:2e:6f:3e:31:2d:a3:35:14:3b:26:97:66: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:d2:8f:a0:3f:81:f7:dc:15:48:30:dd:a4:9b:4b:96:04:e3: df:4c:cb:d0:df:f2:65:d9:f5:3f:86:ab:b4:3c:bc:aa:45:b0: cb:0e:2f:9a:73:dc:81:89:77:75:00:c3:34:71:37:62:c1:b3: b1:30:79:51:3e:22:a6:bf:64:cb:f0:e7:e2:8e:e3:67:9d:7f: 47:24:9c:11:1b:04:a1:45:cc:1c:5e:06:08:1f:d5:2a:c7:0b: 6d:cf:1a:ae:84:72:99:52:02:4f:f0:92:8a:7e:95:9a:b9:6f: a5:9e:aa:e3:da:cc:f9:df:00:c2:f8:60:8a:41:be:e5:0c:a1: 14:0d:b1:8e:2d:c5:5a:e0:4c:fc:d9:c3:1e:5b:f8:a2:f7:7f: 23:d4:70:7e:be:84:5a:ce:f1:36:70:ec:81:23:b2:74:8e:85: b3:8f:3e:cd:05:96:55:83:4e:d5:08:a6:47:09:07:0e:1b:47: fe:fe:27:e5:1c:cb:00:8c:95:54:5d:9e:2b:ce:be:98:8f:d0: 2d:a5:a5:b9:b8:a0:03:2e:4b:b3:49:10:69:90:d0:c2:e1:1a: aa:84:1b:d3:c6:69:d3:25:8e:8b:67:12:ec:7a:c3:bc:fb:1b: 42:b6:c6:9c:ba:0d:b4:93:54:de:27:70:dd:29:b2:63:d6:18: e7:88:c1:ea -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICD7MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDUxNTAxMzIwOFoXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoRTJBMEIwMDQ5RjFBM0QxMjNEQ0FDQTVDRUI1QjRFNUU5RUM3OTRE NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOy8arapI2ny4h8WJCO8 e352zHwx/1pgTv1HVVLYjGX1/vbtZPCovYD+UI4TZucI6W7qSPsCdRlAgULqmus2 GJcD+KTAYKQQQbW/L+VwsexLz6kKagBHbzsDCYS53E7295D8xVa+iMt7aFFi1jZc MUX2KbEKYM52Ocv7rUnyLTHWSJEGgtIntSWEMhKzyN+KMyhy2E1u0MZLrb/tP6I3 V2nR6pUuxECTEUNMIYAbjffNamERY5sCKzljbeSaQnoWmSU2Rf6qrdLrpCCmEF1g 4Lhmr2andA6CK5cmM+EOAJD4aylTSKUQqODGkVOLD4mvWGGvLm8+MS2jNRQ7Jpdm CtcCAwEAAaOCAoowggKGMB0GA1UdDgQWBBTioLAEnxo9Ej3KylzrW05enseU1zAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTAyNDcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzEwMjQ3LzRx Q3dCSjhhUFJJOXlzcGM2MXRPWHA3SGxOYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCgGzANBgkqhkiG9w0B AQsFAAOCAQEAA9KPoD+B99wVSDDdpJtLlgTj30zL0N/yZdn1P4artDy8qkWwyw4v mnPcgYl3dQDDNHE3YsGzsTB5UT4ipr9ky/Dn4o7jZ51/RyScERsEoUXMHF4GCB/V KscLbc8aroRymVICT/CSin6VmrlvpZ6q49rM+d8AwvhgikG+5QyhFA2xji3FWuBM /NnDHlv4ovd/I9Rwfr6EWs7xNnDsgSOydI6Fs48+zQWWVYNO1QimRwkHDhtH/v4n 5RzLAIyVVF2eK86+mI/QLaWlubigAy5Ls0kQaZDQwuEaqoQb08Zp0yWOi2cS7HrD vPsbQrbGnLoNtJNU3idw3SmyY9YY54jB6g== -----END CERTIFICATE-----Generated at Sun May 18 02:03:01 2025 by rpki-client