$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer File: RJV2NHCVBo-WRmvzqO-pg-MncRY.cer (raw, json) Hash identifier: 6OJFAn/5ZGekgEl3lk6nH/AKy6juHm+cUnhA4Y3hTb0= Subject key identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Aug 2025 01:41:19 +0000 Certificate not after: Sat 15 Aug 2026 01:30:02 +0000 Subordinate resources: IP: 2401:3600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22419 (0x5793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:41:19 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=449576347095068F96466BF3A8EFA983E3277116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:f6:dc:1f:9a:81:39:15:71:51:97:12:fa: 4d:ee:63:25:5f:ce:12:78:97:2a:bd:ca:90:7b:0e: ae:59:ee:77:31:a3:24:cf:86:51:3c:65:ce:d6:f8: 50:bd:95:b5:e0:e9:cb:3f:c3:32:c5:6e:ad:1a:18: e7:fa:77:5f:c1:05:99:c6:63:91:62:b4:af:9d:5b: 70:41:78:9a:29:3c:fd:60:56:be:fa:2c:c5:d2:53: 26:9a:0b:48:ed:3f:7b:b0:46:13:6c:c3:d4:29:ad: 05:c1:d6:55:e7:17:43:ba:3b:50:26:c9:8c:c2:54: a8:b8:a6:e6:ff:a4:99:de:27:2d:95:d6:1f:91:b5: c8:06:f1:8a:f7:e7:b2:30:36:17:3d:76:da:50:84: bc:45:3f:bb:ab:f1:57:ad:8e:12:df:9a:1f:7e:de: 40:77:40:16:d2:2c:82:d3:6f:ea:38:91:5e:95:42: 70:6c:15:ed:6a:af:ae:6f:46:df:76:8c:62:12:63: bb:ab:e7:01:0a:5a:6b:2c:7c:4b:15:1e:85:ce:99: 62:ff:0d:dc:72:32:21:de:89:8a:0d:e4:4e:cb:1b: d1:c2:16:f8:01:08:b6:8e:13:45:ff:52:ab:9d:b7: 52:cd:88:8c:82:06:38:fd:93:8b:88:71:42:9e:44: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:3600::/32 Signature Algorithm: sha256WithRSAEncryption 4f:8a:dc:30:25:bd:4c:90:17:c4:7c:5f:82:ec:f9:07:f3:d0: 32:66:2d:7b:a7:46:9f:44:62:48:9a:fe:71:ed:ee:8d:13:5f: c8:17:66:ae:8f:46:fe:1e:d3:c9:23:7a:75:a9:22:d1:6c:ef: 6b:87:ab:5b:c1:13:13:3d:b1:50:04:48:5c:46:e4:5d:eb:1e: 5b:b5:38:cd:c1:8f:0f:83:8d:88:b5:89:b4:8e:49:c6:e3:cf: 24:52:26:f4:23:09:e5:b0:47:6d:7f:9d:bd:60:0d:f1:f7:7e: fc:68:2e:6a:23:bf:34:b2:57:3d:aa:b2:0f:1d:77:0e:b5:3a: c1:a0:4f:7c:20:0c:f0:1d:f7:5d:12:b1:d4:07:8c:23:0f:c4: 37:d8:13:30:1a:45:ac:0f:84:eb:b5:c3:f7:94:6d:04:43:70: ca:8c:55:65:80:bc:26:ea:cb:e3:2a:7a:3b:4d:6b:81:7f:7f: ca:2d:16:3e:4e:12:a9:aa:2a:6a:dd:82:a5:d3:03:b5:e5:3f: 70:e9:37:ba:0e:47:f9:bb:83:0b:2c:ce:a2:bf:af:85:cb:3e: de:4b:8e:88:7e:b3:fb:c7:18:22:58:40:4a:0b:b0:03:bd:5e: 01:16:fc:a3:79:51:c7:51:55:b4:43:a7:da:e9:23:6e:08:d1: a5:8e:6b:e4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICV5MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDgxNTAxNDExOVoXDTI2MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoNDQ5NTc2MzQ3MDk1MDY4Rjk2NDY2QkYzQThFRkE5ODNFMzI3NzEx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrS9twfmoE5FXFRlxL6 Te5jJV/OEniXKr3KkHsOrlnudzGjJM+GUTxlztb4UL2VteDpyz/DMsVurRoY5/p3 X8EFmcZjkWK0r51bcEF4mik8/WBWvvosxdJTJpoLSO0/e7BGE2zD1CmtBcHWVecX Q7o7UCbJjMJUqLim5v+kmd4nLZXWH5G1yAbxivfnsjA2Fz122lCEvEU/u6vxV62O Et+aH37eQHdAFtIsgtNv6jiRXpVCcGwV7Wqvrm9G33aMYhJju6vnAQpaayx8SxUe hc6ZYv8N3HIyId6Jig3kTssb0cIW+AEIto4TRf9Sq523Us2IjIIGOP2Ti4hxQp5E NpUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRElXY0cJUGj5ZGa/Oo76mD4ydxFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTMzL1JK VjJOSENWQm8tV1JtdnpxTy1wZy1NbmNSWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATYAMA0GCSqGSIb3 DQEBCwUAA4IBAQBPitwwJb1MkBfEfF+C7PkH89AyZi17p0afRGJImv5x7e6NE1/I F2auj0b+HtPJI3p1qSLRbO9rh6tbwRMTPbFQBEhcRuRd6x5btTjNwY8Pg42ItYm0 jknG488kUib0IwnlsEdtf529YA3x9378aC5qI780slc9qrIPHXcOtTrBoE98IAzw HfddErHUB4wjD8Q32BMwGkWsD4TrtcP3lG0EQ3DKjFVlgLwm6svjKno7TWuBf3/K LRY+ThKpqipq3YKl0wO15T9w6Te6Dkf5u4MLLM6iv6+Fyz7eS46IfrP7xxgiWEBK C7ADvV4BFvyjeVHHUVW0Q6fa6SNuCNGljmvk -----END CERTIFICATE-----Generated at Sat Aug 23 09:44:47 2025 by rpki-client