$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/CgB_79dDVieclEtfSMwDYmjEli0.cer File: CgB_79dDVieclEtfSMwDYmjEli0.cer (raw, json) Hash identifier: IFAOtcvCAys975WG3SBfv2zh5X+UpwLo7CEGMB7YaSE= Subject key identifier: 0A:00:7F:EF:D7:43:56:27:9C:94:4B:5F:48:CC:03:62:68:C4:96:2D Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:44:41 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 163.61.46.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 13:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23505 (0x5bd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:44:41 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=0A007FEFD74356279C944B5F48CC036268C4962D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:23:6c:fd:5d:69:ee:76:a0:7d:2d:eb:af: ad:d8:73:58:78:e1:dd:c3:8b:9e:2b:5c:81:21:63: 3c:4f:6f:cc:4a:3c:ea:27:80:a0:56:ca:41:f4:3c: 90:81:f8:b5:49:a3:bd:c4:b6:37:53:62:b5:c5:ca: 61:31:83:90:13:f0:c2:f3:84:7b:42:f9:2b:21:bc: 77:29:03:06:ae:4f:27:9a:d0:30:96:40:2a:c7:8c: ae:2c:13:2a:cd:03:53:3b:77:55:7b:49:d5:a2:c3: 87:b3:57:a5:b0:f7:49:af:ad:1c:40:bc:4d:5b:96: ce:20:0c:85:10:b8:07:ea:c8:be:6a:3a:16:eb:36: 9e:20:f6:23:e1:5f:87:ab:c9:07:5e:cc:18:01:86: 69:90:cb:df:48:ae:36:37:ad:83:42:82:d7:d7:c2: 1d:08:f8:0c:41:41:77:7a:9f:d3:51:20:31:0b:a4: 70:cd:c4:f0:68:d7:a2:4b:65:cf:75:a0:d1:2d:6e: 68:dc:c3:41:44:5a:af:42:54:51:a3:ea:f8:b5:8c: 8a:4d:c7:1b:c7:16:22:e2:db:5f:86:3a:0e:d4:0b: bf:9b:ac:24:31:61:9a:a1:d5:0d:9c:a0:54:1f:56: 17:1a:c6:2b:78:12:a8:f5:23:45:52:00:d2:1d:0a: e5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:00:7F:EF:D7:43:56:27:9C:94:4B:5F:48:CC:03:62:68:C4:96:2D X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5729/CgB_79dDVieclEtfSMwDYmjEli0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.46.0/24 Signature Algorithm: sha256WithRSAEncryption 09:2e:dc:67:ea:bf:60:93:0e:90:56:05:71:06:d1:8a:1c:ae: d9:3e:7f:fe:5d:a4:4a:05:af:3c:1f:a6:cf:c7:a8:f9:c4:f3: a5:6e:9b:03:19:47:ab:d3:50:11:b2:66:a9:1c:95:cd:f3:bf: 21:ec:02:00:62:13:a4:96:42:0b:51:ff:8c:60:84:4c:34:33: ae:ac:a0:63:f9:b1:bc:1e:28:14:7a:da:d4:ad:a5:bc:6e:05: ab:1e:8b:bd:6f:1d:4a:66:d3:c9:b8:ce:76:5a:a9:82:71:64: 87:0b:02:69:9f:fb:b0:ed:66:bb:f5:14:cf:46:0e:37:b8:9c: 0a:ac:c4:73:c1:00:8d:2d:20:e1:31:e4:10:85:a7:c9:f6:32: 25:d4:8c:79:e6:f0:c0:fb:b8:39:f4:a8:46:f5:46:7d:70:3a: b5:9d:2e:7d:70:cd:5d:8b:86:0a:67:7b:3e:7f:0b:e7:0b:fb: 57:01:b7:58:4f:dd:fc:71:06:e7:06:f7:b0:70:ed:8f:a5:2a: 60:af:f9:19:ee:87:34:99:e6:84:07:3b:6f:ec:ac:00:6a:4d: 25:a0:f5:e8:88:bd:32:4c:19:d2:35:45:da:03:35:25:e7:58: 17:9a:29:f9:fd:57:bb:76:f3:c0:af:79:24:67:97:b4:2e:7e: b8:0f:8b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICW9EwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxNDQ0MVoXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoMEEwMDdGRUZENzQzNTYyNzlDOTQ0QjVGNDhDQzAzNjI2OEM0OTYy RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALodI2z9XWnudqB9Leuv rdhzWHjh3cOLnitcgSFjPE9vzEo86ieAoFbKQfQ8kIH4tUmjvcS2N1NitcXKYTGD kBPwwvOEe0L5KyG8dykDBq5PJ5rQMJZAKseMriwTKs0DUzt3VXtJ1aLDh7NXpbD3 Sa+tHEC8TVuWziAMhRC4B+rIvmo6Fus2niD2I+Ffh6vJB17MGAGGaZDL30iuNjet g0KC19fCHQj4DEFBd3qf01EgMQukcM3E8GjXoktlz3Wg0S1uaNzDQURar0JUUaPq +LWMik3HG8cWIuLbX4Y6DtQLv5usJDFhmqHVDZygVB9WFxrGK3gSqPUjRVIA0h0K 5TsCAwEAAaOCAokwggKFMB0GA1UdDgQWBBQKAH/v10NWJ5yUS19IzANiaMSWLTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvNTcyOS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTcyOS9DZ0Jf NzlkRFZpZWNsRXRmU013RFltakVsaTAubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoz0uMA0GCSqGSIb3DQEB CwUAA4IBAQAJLtxn6r9gkw6QVgVxBtGKHK7ZPn/+XaRKBa88H6bPx6j5xPOlbpsD GUer01ARsmapHJXN878h7AIAYhOklkILUf+MYIRMNDOurKBj+bG8HigUetrUraW8 bgWrHou9bx1KZtPJuM52WqmCcWSHCwJpn/uw7Wa79RTPRg43uJwKrMRzwQCNLSDh MeQQhafJ9jIl1Ix55vDA+7g59KhG9UZ9cDq1nS59cM1di4YKZ3s+fwvnC/tXAbdY T938cQbnBvewcO2PpSpgr/kZ7oc0meaEBztv7KwAak0loPXoiL0yTBnSNUXaAzUl 51gXmin5/Ve7dvPAr3kkZ5e0Ln64D4vX -----END CERTIFICATE-----Generated at Mon Oct 20 16:29:25 2025 by rpki-client