$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer File: 9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer (raw, json) Hash identifier: PtUImq4yONV55S2UOr5tupzZgnExVEr2gpa8521MVZA= Subject key identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1257 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Aug 2025 01:37:05 +0000 Certificate not after: Sat 15 Aug 2026 01:30:02 +0000 Subordinate resources: IP: 157.66.72.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 19:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4695 (0x1257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Aug 15 01:37:05 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=F7FCBB98375357213F81D24BE1E19A8C64EBDD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:d5:b4:5e:1e:a5:ac:77:60:c3:c1:d6:b2: a0:27:36:f9:c7:8a:10:fd:7e:44:d4:4d:7a:8a:5f: b7:89:8f:41:3b:0d:1b:34:72:d3:51:a1:26:4f:01: 0c:f4:95:b7:73:8a:86:be:27:c5:84:62:2d:05:3b: 1a:67:e4:9b:5f:de:e4:8d:7e:d3:bf:96:ee:7b:ed: e3:7d:44:35:8d:60:00:dc:1c:3c:65:c5:e6:60:78: 07:6b:ba:1d:81:92:2a:92:44:79:10:5f:68:73:84: fd:d2:06:9c:f0:d8:9f:d9:d6:b4:5e:f2:80:42:76: 58:79:84:d0:25:0a:4f:ce:8a:4f:c6:b3:d3:40:be: 45:ae:e8:b0:b9:cd:1e:bd:b6:73:a4:52:ee:59:6e: 91:8d:e5:1e:bf:f9:ca:97:8a:14:45:40:d1:49:fe: 43:0c:7a:db:59:41:cb:d7:25:27:14:db:f3:fe:dd: 07:5c:34:cd:0d:c5:44:af:53:a5:14:e6:e7:f9:c5: a3:07:14:ea:79:34:d0:92:fd:19:2e:18:dc:5f:c8: 8c:cd:7f:ee:9d:b6:38:1c:b7:10:30:31:81:a7:a9: b8:0c:7d:47:d4:1e:15:0e:6f:fa:95:d3:18:aa:bc: 4f:8e:bf:e7:4e:3a:46:90:c3:65:ff:3b:d2:3c:2c: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.72.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:48:d4:d5:03:eb:0b:7a:a9:56:3c:ca:7f:d0:df:3d:32:5d: 6c:29:08:73:3e:b8:52:60:df:96:b0:e8:5f:a0:c1:29:f4:55: 40:38:a0:82:19:87:e4:3c:f0:05:74:47:b6:1d:81:c7:93:b3: 0d:19:9d:a9:42:99:25:40:d2:08:3b:1f:99:8e:42:02:0c:dc: ce:af:87:40:cb:43:59:0c:db:c0:ae:4a:c7:be:7c:72:86:9d: f9:1d:d5:a0:68:a2:0b:ae:5d:67:eb:a8:3e:c2:fa:10:e1:47: 43:42:72:2b:8e:d7:7c:0b:00:a4:4e:76:af:14:d2:91:1e:0e: 23:b3:92:46:3a:d1:90:ec:4e:70:f1:84:63:8a:5b:b9:94:0f: 43:e5:fa:65:a1:71:61:91:de:40:01:91:62:81:58:9b:4c:da: 82:4b:da:e8:0b:d8:87:ef:c6:d2:6e:e6:f9:91:f1:e1:be:da: 40:be:86:94:d3:fd:ff:03:f0:ad:6f:f9:71:05:55:19:b4:1c: 9e:64:f6:5e:11:73:bd:79:45:27:94:40:c3:8b:d0:87:a5:3d: a0:4e:1a:83:9a:f3:fa:a6:2a:29:03:30:a0:67:a0:3e:b6:09: 34:d8:71:89:6c:ba:0f:61:08:88:ab:2d:ea:cd:f4:c4:5d:db: ef:00:ba:0a -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICElcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDgxNTAxMzcwNVoXDTI2MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoRjdGQ0JCOTgzNzUzNTcyMTNGODFEMjRCRTFFMTlBOEM2NEVCREQw QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANG91bReHqWsd2DDwday oCc2+ceKEP1+RNRNeopft4mPQTsNGzRy01GhJk8BDPSVt3OKhr4nxYRiLQU7Gmfk m1/e5I1+07+W7nvt431ENY1gANwcPGXF5mB4B2u6HYGSKpJEeRBfaHOE/dIGnPDY n9nWtF7ygEJ2WHmE0CUKT86KT8az00C+Ra7osLnNHr22c6RS7llukY3lHr/5ypeK FEVA0Un+Qwx621lBy9clJxTb8/7dB1w0zQ3FRK9TpRTm5/nFowcU6nk00JL9GS4Y 3F/IjM1/7p22OBy3EDAxgaepuAx9R9QeFQ5v+pXTGKq8T46/5046RpDDZf870jws JfsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBT3/LuYN1NXIT+B0kvh4ZqMZOvdCzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjU3Lzlf eTdtRGRUVnlFX2dkSkw0ZUdhakdUcjNRcy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQkgwDQYJKoZIhvcN AQELBQADggEBACxI1NUD6wt6qVY8yn/Q3z0yXWwpCHM+uFJg35aw6F+gwSn0VUA4 oIIZh+Q88AV0R7YdgceTsw0ZnalCmSVA0gg7H5mOQgIM3M6vh0DLQ1kM28CuSse+ fHKGnfkd1aBooguuXWfrqD7C+hDhR0NCciuO13wLAKROdq8U0pEeDiOzkkY60ZDs TnDxhGOKW7mUD0Pl+mWhcWGR3kABkWKBWJtM2oJL2ugL2IfvxtJu5vmR8eG+2kC+ hpTT/f8D8K1v+XEFVRm0HJ5k9l4Rc715RSeUQMOL0IelPaBOGoOa8/qmKikDMKBn oD62CTTYcYlsug9hCIirLerN9MRd2+8Augo= -----END CERTIFICATE-----Generated at Sat Aug 23 22:27:24 2025 by rpki-client