$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer File: VfNagqI2vO2BkIjU2QiH4Lllx88.cer (raw, json) Hash identifier: vEvN+EdwfZy7fHjDZ8QBpd6yqYjq+wL8mqcvCZZkeeo= Subject key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 509A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:30:03 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 180.235.140.0/22 IP: 202.70.176.0/20 IP: 210.255.240.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20634 (0x509a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:30:03 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=55F35A82A236BCED819088D4D90887E0B965C7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:38:6d:64:24:44:de:7c:c1:82:21:45:3b: 3d:bb:b7:35:48:54:65:a9:37:0e:70:62:32:8e:e6: 3e:f7:4b:18:9f:20:11:9f:0c:f3:93:5d:d1:a6:01: 05:ae:8b:d3:0c:cc:49:f3:5e:96:3e:93:f1:9e:0c: a2:1d:ce:5f:32:f3:57:fa:78:85:10:40:65:8d:8e: bb:f9:ba:92:f2:3c:a9:5e:7d:32:32:da:26:fe:2e: 04:f9:48:d6:31:a1:8e:f6:fb:52:92:95:14:34:62: ac:dc:55:eb:63:aa:0f:0f:5e:8e:c1:14:c1:33:f4: 07:b5:19:2d:36:09:46:10:52:14:5b:5a:e3:ac:01: 76:6f:ca:27:21:c2:8e:84:4c:2e:e1:e1:14:b1:ca: c5:5a:7f:f0:6e:da:5f:52:71:45:ee:6d:ab:e2:60: 5b:cf:ff:a3:b1:96:a5:0b:85:cf:da:ae:25:36:ab: 64:8e:b9:64:f4:4c:00:f9:12:e1:90:0a:5c:ab:a2: 90:e1:21:ea:b0:8d:19:01:74:bf:7d:84:67:98:7a: 1e:82:b3:6d:a5:29:da:8b:da:49:a0:c5:33:bb:09: af:4d:6e:fb:58:98:e5:23:6b:f8:23:c6:c1:83:92: cb:e2:5d:20:8f:df:21:e1:f7:12:f7:75:62:7d:11: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.235.140.0/22 202.70.176.0/20 210.255.240.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:3f:8b:55:2e:7d:26:6b:6c:17:76:9a:70:52:24:15:d9:38: 45:62:51:6b:e1:fc:a6:cd:5f:97:7f:ad:78:6a:30:57:15:71: 01:51:9b:bf:84:e4:9e:11:0a:5b:e0:db:7e:39:1e:ba:7b:08: 35:ff:c5:b7:ff:9a:eb:e7:7d:7c:2b:4c:33:7d:26:3f:e8:c1: 03:a0:40:ab:e2:c5:1d:a7:8e:78:aa:5d:33:6d:c8:83:10:ec: 05:83:fb:06:0d:b0:71:b8:c9:df:f9:8d:d0:9d:7d:e6:7b:42: 9d:f3:2b:98:10:5c:56:40:a9:1c:a3:3a:71:04:fc:9e:74:f6: 69:48:26:c7:fc:92:d5:2a:cd:e5:75:4c:69:af:dc:f0:eb:36: bb:76:0d:a3:27:02:d4:42:4d:dc:1a:9b:db:2a:62:34:7f:0e: 5d:b0:12:5f:a8:ab:6e:f3:5c:40:97:38:ad:33:11:f9:6a:ce: 3d:80:e6:16:53:57:0d:e4:00:11:1b:79:53:24:e5:f6:94:b0: 37:6d:01:87:78:99:c1:f6:31:8c:67:f9:6d:32:ad:e1:f2:34: 81:07:f6:7e:d4:31:2c:5b:17:1e:78:6d:01:cd:4f:82:8c:59: f0:ca:b7:0e:40:fa:f2:8e:77:60:c3:43:39:64:f2:3f:fd:63: 75:fc:73:51 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICUJowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDYxNTAxMzAwM1oXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoNTVGMzVBODJBMjM2QkNFRDgxOTA4OEQ0RDkwODg3RTBCOTY1QzdD RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALItOG1kJETefMGCIUU7 Pbu3NUhUZak3DnBiMo7mPvdLGJ8gEZ8M85Nd0aYBBa6L0wzMSfNelj6T8Z4Moh3O XzLzV/p4hRBAZY2Ou/m6kvI8qV59MjLaJv4uBPlI1jGhjvb7UpKVFDRirNxV62Oq Dw9ejsEUwTP0B7UZLTYJRhBSFFta46wBdm/KJyHCjoRMLuHhFLHKxVp/8G7aX1Jx Re5tq+JgW8//o7GWpQuFz9quJTarZI65ZPRMAPkS4ZAKXKuikOEh6rCNGQF0v32E Z5h6HoKzbaUp2ovaSaDFM7sJr01u+1iY5SNr+CPGwYOSy+JdII/fIeH3Evd1Yn0R RFECAwEAAaOCApIwggKOMB0GA1UdDgQWBBRV81qCoja87YGQiNTZCIfguWXHzzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NDgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg0OC9WZk5hZ3FJ MnZPMkJrSWpVMlFpSDRMbGx4ODgubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCtOuMAwQEykawAwQE0v/wMA0G CSqGSIb3DQEBCwUAA4IBAQB9P4tVLn0ma2wXdppwUiQV2ThFYlFr4fymzV+Xf614 ajBXFXEBUZu/hOSeEQpb4Nt+OR66ewg1/8W3/5rr5318K0wzfSY/6MEDoECr4sUd p454ql0zbciDEOwFg/sGDbBxuMnf+Y3QnX3me0Kd8yuYEFxWQKkcozpxBPyedPZp SCbH/JLVKs3ldUxpr9zw6za7dg2jJwLUQk3cGpvbKmI0fw5dsBJfqKtu81xAlzit MxH5as49gOYWU1cN5AARG3lTJOX2lLA3bQGHeJnB9jGMZ/ltMq3h8jSBB/Z+1DEs WxceeG0BzU+CjFnwyrcOQPryjndgw0M5ZPI//WN1/HNR -----END CERTIFICATE-----Generated at Fri Jul 4 09:07:18 2025 by rpki-client