$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer File: M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer (raw, json) Hash identifier: uymQXY4aV31E8xGnU1VM/DzTpbVw0KWjcXxVLhA5Kqg= Subject key identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:36:58 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 103.142.12.0/23 IP: 133.247.112.0/20 IP: 202.233.68.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20872 (0x5188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:36:58 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=33D2C2C8816F30E6B58262B93C717C85513505C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:1d:34:ac:99:fa:0f:7c:f4:c0:39:e0:e8: 95:e8:08:f1:95:37:a9:57:1a:81:c1:53:36:b7:0d: 69:47:7b:cf:59:6c:a0:60:40:84:e0:57:53:a3:bd: 4a:48:eb:12:fc:21:bc:ee:64:de:77:16:ce:1a:96: 69:dd:6c:06:9f:92:40:78:2f:c7:1b:4d:40:f9:a2: 2c:97:a9:4d:a2:b8:57:af:e4:a7:e4:ee:8a:f8:ee: 92:cc:fd:1b:43:65:85:66:b9:d8:70:75:5d:f6:11: ed:b6:ae:ee:de:54:0f:b0:a5:1e:ce:b2:20:17:f9: 13:b8:89:a9:09:d0:f8:40:a7:cb:85:e5:81:17:02: c1:34:99:dd:b2:da:d3:08:89:22:2d:78:b9:8e:2d: c9:03:1f:7b:21:ef:ef:18:bb:fc:13:74:3c:83:32: eb:32:4b:32:9c:c2:de:17:6e:cd:5f:0e:a1:6d:ae: 40:82:46:76:45:38:e0:b3:2b:9f:a7:4e:cd:fe:f3: a3:72:83:0c:f0:55:6c:f0:02:f2:d6:0f:3f:94:00: 99:48:b0:1e:62:0d:78:30:e3:c5:25:22:2b:2e:47: f7:8a:7c:64:03:47:b5:45:d7:0e:76:02:21:fd:da: f3:f0:e4:b5:d1:0a:3f:12:ed:34:a4:e7:fa:25:0a: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.12.0/23 133.247.112.0/20 202.233.68.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:a6:81:ba:53:1c:8e:38:02:80:41:9f:18:ed:50:97:d8:12: e6:71:04:ca:ed:38:49:aa:02:5c:de:ea:8b:a9:4b:5b:12:0d: ea:5a:d8:6a:4a:1f:42:1f:f0:63:9b:4a:14:35:42:4a:d9:7d: 61:2f:ea:f1:5e:a9:5e:6c:c3:0a:b3:5b:52:d3:c5:b8:40:07: 11:9f:13:f6:64:3b:7e:7f:b9:55:ea:b6:e8:65:78:64:e6:b2: 74:ba:a2:f1:58:41:ac:0f:ed:e2:49:fb:d8:45:8c:46:f1:b2: 34:7b:ce:2e:c1:d9:ae:04:71:79:24:65:f0:30:7d:77:1c:7f: 1f:8c:95:06:a7:e9:29:ca:4c:e0:30:06:e7:41:24:11:c2:8d: 1e:67:62:fa:4d:99:09:08:6d:ec:a0:25:89:13:2a:15:a3:b5: 99:5f:b2:89:60:56:c4:74:fc:60:2d:42:63:6b:db:0c:c9:cd: 29:fa:8d:10:61:31:02:c1:05:8e:ac:7b:b6:5f:a5:3d:7e:ff: 18:c2:5e:04:e6:9a:4b:06:b3:d7:35:68:fa:77:7a:af:42:32: 6f:c9:fd:54:89:7a:6b:04:ba:39:b3:66:e8:cf:a1:15:ec:f2: e2:06:46:c0:4d:16:6f:72:8f:0c:60:a6:22:51:4e:21:cb:45: cc:79:81:b1 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICUYgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDYxNTAxMzY1OFoXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzNEMkMyQzg4MTZGMzBFNkI1ODI2MkI5M0M3MTdDODU1MTM1MDVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeZHTSsmfoPfPTAOeDo legI8ZU3qVcagcFTNrcNaUd7z1lsoGBAhOBXU6O9SkjrEvwhvO5k3ncWzhqWad1s Bp+SQHgvxxtNQPmiLJepTaK4V6/kp+Tuivjuksz9G0NlhWa52HB1XfYR7bau7t5U D7ClHs6yIBf5E7iJqQnQ+ECny4XlgRcCwTSZ3bLa0wiJIi14uY4tyQMfeyHv7xi7 /BN0PIMy6zJLMpzC3hduzV8OoW2uQIJGdkU44LMrn6dOzf7zo3KDDPBVbPAC8tYP P5QAmUiwHmINeDDjxSUiKy5H94p8ZANHtUXXDnYCIf3a8/DktdEKPxLtNKTn+iUK rr0CAwEAAaOCApcwggKTMB0GA1UdDgQWBBQz0sLIgW8w5rWCYrk8cXyFUTUFxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTAyL005 TEN5SUZ2TU9hMWdtSzVQSEY4aFZFMUJjVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAFnjgwDBASF93ADBALK 6UQwDQYJKoZIhvcNAQELBQADggEBAI2mgbpTHI44AoBBnxjtUJfYEuZxBMrtOEmq Alze6oupS1sSDepa2GpKH0If8GObShQ1QkrZfWEv6vFeqV5swwqzW1LTxbhABxGf E/ZkO35/uVXqtuhleGTmsnS6ovFYQawP7eJJ+9hFjEbxsjR7zi7B2a4EcXkkZfAw fXccfx+MlQan6SnKTOAwBudBJBHCjR5nYvpNmQkIbeygJYkTKhWjtZlfsolgVsR0 /GAtQmNr2wzJzSn6jRBhMQLBBY6se7ZfpT1+/xjCXgTmmksGs9c1aPp3eq9CMm/J /VSJemsEujmzZujPoRXs8uIGRsBNFm9yjwxgpiJRTiHLRcx5gbE= -----END CERTIFICATE-----Generated at Fri Jul 4 08:15:13 2025 by rpki-client