$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer File: KPOWmDwzKEL92rYXWVowqDwzNGQ.cer (raw, json) Hash identifier: mPR71N+MtHJCD/6jmlwowthOBH0pOmdBpy7xxt1obig= Subject key identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0FF8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:41:36 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 136.198.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4088 (0xff8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: May 15 01:41:36 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=28F396983C332842FDDAB617595A30A83C333464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3c:ce:64:ff:03:11:5a:af:78:c9:6d:a9:67: 2a:0d:ce:af:86:1d:2c:7e:cd:98:db:70:15:21:30: 5e:32:25:f7:dd:9b:89:5b:90:63:a5:1f:f4:fa:ee: 42:c6:b3:9f:30:a1:77:d4:5e:f4:96:dd:bb:04:b1: 69:75:87:2f:36:4b:b6:85:56:51:c0:21:ae:e1:ce: 83:b1:eb:38:30:7c:5e:ef:34:92:b9:ee:d5:c0:04: 77:dd:87:38:74:ec:74:ac:f8:82:ad:86:f8:5e:39: 42:dc:a2:8b:6c:83:db:59:d3:b4:9a:a2:3f:6a:b4: d1:6f:9a:16:77:fe:0d:3f:55:93:78:08:79:5f:72: 75:f6:e0:26:49:d0:61:d1:f3:8f:70:97:7d:76:77: 1a:69:8d:ed:65:18:cc:28:75:67:df:b5:ef:18:ee: 6d:92:1d:0c:87:a7:81:b1:16:da:a6:d2:be:fb:f5: 33:44:55:74:50:ce:46:55:6a:c6:39:54:34:1d:9d: d2:8b:f4:6e:2e:13:d4:6b:c8:e4:11:f8:e9:13:f1: ee:f8:27:08:8e:2e:e6:af:c1:32:1f:e9:c3:de:d5: 1e:24:c4:16:40:58:f0:b0:05:a8:36:6c:20:4d:bf: a6:5d:ae:44:b3:58:f9:15:f8:ff:d6:ca:c4:14:ad: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 136.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 82:bc:8e:0a:b5:5e:dd:27:b9:06:fc:bc:f4:17:a6:88:68:72: 41:7c:bf:b7:d3:ba:ff:54:e9:dc:6a:84:29:d3:35:7c:b7:d6: 77:ef:31:02:24:e6:98:39:a1:2a:02:32:7d:db:7c:06:09:43: 01:e2:6f:28:a9:91:29:88:1c:8f:93:5f:0a:04:9c:53:92:70: 52:07:f1:32:91:28:46:d7:db:b3:8c:91:24:0b:e4:21:a0:73: 24:e9:2c:f3:d3:52:42:e1:4f:f8:cf:fd:57:9c:b6:ea:93:3f: 2d:b6:51:a6:cd:a7:20:c2:e6:bd:e4:b3:09:e1:e0:89:e8:6d: 26:de:03:7c:90:e8:29:a1:e9:8a:4a:ee:cf:46:13:5a:fe:ca: e2:d7:fa:0b:25:21:8c:92:18:21:7f:27:13:68:0b:19:fa:3d: 8a:f0:bc:4b:a4:99:7d:0e:6e:1a:f3:24:40:27:c0:a1:23:b4: 83:09:5d:a7:62:41:6c:76:17:8c:19:51:21:e6:37:0a:99:48: 48:67:6e:4c:cb:0a:fb:6d:be:c9:20:6e:fe:ef:5d:f2:8c:72: 61:c8:bc:30:7b:57:0f:41:21:76:3f:48:67:a3:d9:a1:ea:0e: a5:79:d6:dc:b5:0d:63:e0:9d:19:00:c4:ed:ca:99:41:11:d2: 7e:a9:c7:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICD/gwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDUxNTAxNDEzNloXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoMjhGMzk2OTgzQzMzMjg0MkZEREFCNjE3NTk1QTMwQTgzQzMzMzQ2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQ8zmT/AxFar3jJbaln Kg3Or4YdLH7NmNtwFSEwXjIl992biVuQY6Uf9PruQsaznzChd9Re9JbduwSxaXWH LzZLtoVWUcAhruHOg7HrODB8Xu80krnu1cAEd92HOHTsdKz4gq2G+F45Qtyii2yD 21nTtJqiP2q00W+aFnf+DT9Vk3gIeV9ydfbgJknQYdHzj3CXfXZ3GmmN7WUYzCh1 Z9+17xjubZIdDIengbEW2qbSvvv1M0RVdFDORlVqxjlUNB2d0ov0bi4T1GvI5BH4 6RPx7vgnCI4u5q/BMh/pw97VHiTEFkBY8LAFqDZsIE2/pl2uRLNY+RX4/9bKxBSt cHUCAwEAAaOCAogwggKEMB0GA1UdDgQWBBQo85aYPDMoQv3athdZWjCoPDM0ZDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTE2OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTE2OS9LUE9X bUR3ektFTDkycllYV1Zvd3FEd3pOR1EubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiMYwDQYJKoZIhvcNAQEL BQADggEBAIK8jgq1Xt0nuQb8vPQXpohockF8v7fTuv9U6dxqhCnTNXy31nfvMQIk 5pg5oSoCMn3bfAYJQwHibyipkSmIHI+TXwoEnFOScFIH8TKRKEbX27OMkSQL5CGg cyTpLPPTUkLhT/jP/VectuqTPy22UabNpyDC5r3kswnh4InobSbeA3yQ6Cmh6YpK 7s9GE1r+yuLX+gslIYySGCF/JxNoCxn6PYrwvEukmX0ObhrzJEAnwKEjtIMJXadi QWx2F4wZUSHmNwqZSEhnbkzLCvttvskgbv7vXfKMcmHIvDB7Vw9BIXY/SGej2aHq DqV51ty1DWPgnRkAxO3KmUER0n6px2c= -----END CERTIFICATE-----Generated at Mon May 19 00:57:52 2025 by rpki-client