$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer File: OV2JJ1PBWV4Ha18QBloEhmHDB54.cer (raw, json) Hash identifier: UF797j47mtrCJzjm8/MQBiE+YHulwd99GU4WEgyhiHw= Subject key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 574C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Aug 2025 01:39:02 +0000 Certificate not after: Sat 15 Aug 2026 01:30:02 +0000 Subordinate resources: IP: 2001:c40::/32 IP: 2001:dc2::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22348 (0x574c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:39:02 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=395D892753C1595E076B5F10065A048661C3079E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:ea:92:49:0c:64:00:02:e0:a1:3c:13:3a: 39:de:59:c5:c3:60:46:4c:13:c4:be:65:d0:43:4c: 0e:17:20:7b:f3:d3:08:0c:72:57:c9:cf:22:27:01: d8:46:86:51:5d:3f:53:eb:d7:bf:da:2c:f7:de:0d: 78:78:cb:75:be:8c:ce:0b:6c:39:e8:e4:7d:4f:a2: 71:56:30:ef:7b:2f:6b:b4:66:b2:33:e1:65:9c:59: 0e:88:fb:d5:e6:86:67:f9:35:ad:e5:32:b3:97:f9: 63:96:c7:1e:5c:fc:4c:bb:24:56:86:18:51:4b:18: 31:cc:e6:a5:f9:2a:24:91:ac:b9:ec:f0:dc:23:ac: fe:4a:30:55:fc:61:97:e1:8f:15:5e:c5:46:6b:0e: 82:7b:73:33:e8:53:06:96:48:c7:7c:d1:14:7c:25: a7:fb:3f:0a:ac:fd:84:d9:17:2d:73:50:9e:d7:52: eb:73:0b:d9:a5:e9:fc:59:75:2b:f2:c7:e6:ad:b3: 6c:52:86:be:bd:71:4a:22:6c:84:c1:7c:2b:1f:34: 39:e4:e1:41:c9:01:08:04:db:29:ec:87:ae:58:00: 03:88:25:a0:2e:dc:30:4b:9f:3c:f7:e1:fb:01:66: c2:95:6e:a0:59:2b:b3:31:b5:c2:23:cc:37:30:ca: c7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:c40::/32 2001:dc2::/32 Signature Algorithm: sha256WithRSAEncryption 23:71:cf:3a:9e:d0:b7:28:17:8d:8a:31:4b:b8:50:5c:d6:e1: 3d:8e:51:ca:cf:e1:19:ef:e1:ed:28:28:0b:01:53:18:1e:45: 42:07:78:a1:01:e5:1f:57:24:81:e0:94:5e:ab:e2:b9:f9:be: fa:9c:ac:7d:e9:64:b2:a6:36:25:5c:75:4a:52:2b:41:6c:13: 0f:fb:fd:70:5a:23:5f:c1:e9:da:a8:bb:fe:fb:97:84:c1:ba: 5c:e0:84:e8:f0:29:c2:91:4e:9d:cb:3a:a6:4e:ed:c3:4c:f9: cd:0f:84:54:59:98:55:8f:27:82:57:30:c6:2c:b8:43:a0:21: ae:94:37:6c:c1:50:6c:0e:46:3e:1a:a3:b9:97:1f:a7:e6:c8: ea:3c:7b:bc:ac:66:a8:ab:51:13:85:c5:5d:23:e2:b4:62:7c: 77:db:df:2d:8e:f6:31:a2:fa:e6:39:24:a3:4d:27:22:5f:aa: a5:f8:c9:96:64:a2:e5:f2:a3:34:92:e5:df:d8:38:57:65:a8: c7:bb:11:b8:f8:5d:e6:ae:4d:ac:ec:73:97:7d:4e:c0:b8:c9: dd:3b:c7:9a:7b:03:30:1a:0c:b0:99:bb:d2:38:d9:cd:39:8c: a1:8d:e8:f2:e5:38:62:89:14:6b:29:a3:a4:32:fe:4f:68:d7: f1:8f:c2:4f -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICV0wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDgxNTAxMzkwMloXDTI2MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzk1RDg5Mjc1M0MxNTk1RTA3NkI1RjEwMDY1QTA0ODY2MUMzMDc5 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM6V6pJJDGQAAuChPBM6 Od5ZxcNgRkwTxL5l0ENMDhcge/PTCAxyV8nPIicB2EaGUV0/U+vXv9os994NeHjL db6MzgtsOejkfU+icVYw73sva7RmsjPhZZxZDoj71eaGZ/k1reUys5f5Y5bHHlz8 TLskVoYYUUsYMczmpfkqJJGsuezw3COs/kowVfxhl+GPFV7FRmsOgntzM+hTBpZI x3zRFHwlp/s/Cqz9hNkXLXNQntdS63ML2aXp/Fl1K/LH5q2zbFKGvr1xSiJshMF8 Kx80OeThQckBCATbKeyHrlgAA4gloC7cMEufPPfh+wFmwpVuoFkrszG1wiPMNzDK x1UCAwEAAaOCApMwggKPMB0GA1UdDgQWBBQ5XYknU8FZXgdrXxAGWgSGYcMHnjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwNDUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDQ1L09W MkpKMVBCV1Y0SGExOFFCbG9FaG1IREI1NC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgACMA4DBQAgAQxAAwUAIAENwjAN BgkqhkiG9w0BAQsFAAOCAQEAI3HPOp7QtygXjYoxS7hQXNbhPY5Rys/hGe/h7Sgo CwFTGB5FQgd4oQHlH1ckgeCUXqviufm++pysfelksqY2JVx1SlIrQWwTD/v9cFoj X8Hp2qi7/vuXhMG6XOCE6PApwpFOncs6pk7tw0z5zQ+EVFmYVY8nglcwxiy4Q6Ah rpQ3bMFQbA5GPhqjuZcfp+bI6jx7vKxmqKtRE4XFXSPitGJ8d9vfLY72MaL65jkk o00nIl+qpfjJlmSi5fKjNJLl39g4V2Wox7sRuPhd5q5NrOxzl31OwLjJ3TvHmnsD MBoMsJm70jjZzTmMoY3o8uU4YokUaymjpDL+T2jX8Y/CTw== -----END CERTIFICATE-----Generated at Sat Aug 23 09:45:23 2025 by rpki-client