$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer File: YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer (raw, json) Hash identifier: zFzdWziK8qrBp4LoTeo39fFmFthJBGgbOmvuJ3ojuY8= Subject key identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:38:59 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 166.119.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4420 (0x1144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jun 15 01:38:59 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=60D43E3EFDB63A2F244F0E3C388C68D93EC25865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:8e:46:5c:04:6a:fb:78:41:bd:61:66:bf: aa:6c:5a:a4:09:a4:98:63:b6:33:72:ea:0a:3f:6b: 17:0c:38:83:3b:14:ce:2c:a2:57:75:b2:08:25:dd: 10:ec:f0:43:39:b9:8a:9c:e7:86:ef:de:73:32:a2: a4:7f:c5:bd:a5:f2:21:23:48:cd:b8:a9:65:23:92: fa:43:b7:18:b2:ca:b9:71:3d:0c:32:8a:7b:76:cb: f4:7b:d4:de:54:ab:89:2a:f7:f1:3e:17:f0:7f:93: f2:6d:cd:84:8b:a8:eb:e9:4a:e0:8c:fb:ba:61:34: b1:3b:a9:92:75:c4:9c:f8:43:80:26:e3:a6:92:94: d3:04:60:99:8c:96:42:52:a2:d4:b0:14:7a:97:89: f2:c5:21:fd:e1:b9:51:71:94:12:f9:5d:98:e4:b0: 25:7d:f4:ee:de:56:53:9c:1e:f2:07:18:89:6b:1a: 49:47:8e:a8:96:9f:a1:bf:a8:36:78:ee:2c:da:ce: f1:08:36:26:a7:f8:65:e4:7d:fa:fe:b3:eb:3e:53: 14:e9:e7:e0:03:32:5b:10:58:50:f3:be:db:ca:49: f8:03:dc:cd:68:44:a9:9c:33:af:8b:cd:e7:5d:35: f3:10:bc:fd:39:76:35:8e:40:ee:a2:c7:39:bc:2a: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.119.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:a8:44:08:a1:14:80:3b:39:d3:f6:e2:8f:a0:17:7e:84:7a: ab:14:8b:14:2c:c5:ea:71:5c:fc:ac:0e:6e:c2:c5:bc:78:d7: a1:96:3e:87:a1:7f:c1:9e:24:d2:af:a2:ac:50:62:c4:ae:8b: 8d:6e:74:05:20:b3:db:b4:1b:cc:16:79:e3:36:d2:d2:d7:4b: 32:f4:7b:f4:26:a8:f0:7b:41:d3:dc:f9:98:8d:15:01:ef:a2: a6:09:32:b9:02:5c:e3:43:f7:eb:01:50:b4:11:9b:64:7e:66: 21:33:48:c8:90:2b:17:80:27:49:c8:39:8b:2a:2b:6f:ea:33: ac:de:c8:f6:6a:c8:ea:83:c1:99:fa:07:ee:8b:e9:9c:1f:2c: 75:65:46:3f:ab:5b:14:4e:a6:44:06:ac:c4:32:e6:2a:ac:f7: db:91:a7:44:c4:3b:bc:17:aa:42:b5:ae:4b:70:3a:a7:cb:c1: 31:68:08:2e:ae:1c:73:83:57:3a:15:2e:eb:14:a7:70:b4:ae: 3f:4c:94:5a:b6:01:f3:de:ea:25:86:95:8b:f8:49:21:f7:0e: df:8b:5f:0c:66:21:7e:c4:d8:de:1e:34:c9:97:7f:49:15:15: 84:00:a6:a3:f2:37:65:c5:aa:c5:ce:db:a6:e6:3a:4d:e0:31: f0:53:83:71 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICEUQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDYxNTAxMzg1OVoXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoNjBENDNFM0VGREI2M0EyRjI0NEYwRTNDMzg4QzY4RDkzRUMyNTg2 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFZjkZcBGr7eEG9YWa/ qmxapAmkmGO2M3LqCj9rFww4gzsUziyiV3WyCCXdEOzwQzm5ipznhu/eczKipH/F vaXyISNIzbipZSOS+kO3GLLKuXE9DDKKe3bL9HvU3lSriSr38T4X8H+T8m3NhIuo 6+lK4Iz7umE0sTupknXEnPhDgCbjppKU0wRgmYyWQlKi1LAUepeJ8sUh/eG5UXGU EvldmOSwJX307t5WU5we8gcYiWsaSUeOqJafob+oNnjuLNrO8Qg2Jqf4ZeR9+v6z 6z5TFOnn4AMyWxBYUPO+28pJ+APczWhEqZwzr4vN51018xC8/Tl2NY5A7qLHObwq pj8CAwEAAaOCAoowggKGMB0GA1UdDgQWBBRg1D4+/bY6LyRPDjw4jGjZPsJYZTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxODYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTg2L1lO US1QdjIyT2k4a1R3NDhPSXhvMlQ3Q1dHVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCmdzANBgkqhkiG9w0B AQsFAAOCAQEAVahECKEUgDs50/bij6AXfoR6qxSLFCzF6nFc/KwObsLFvHjXoZY+ h6F/wZ4k0q+irFBixK6LjW50BSCz27QbzBZ54zbS0tdLMvR79Cao8HtB09z5mI0V Ae+ipgkyuQJc40P36wFQtBGbZH5mITNIyJArF4AnScg5iyorb+ozrN7I9mrI6oPB mfoH7ovpnB8sdWVGP6tbFE6mRAasxDLmKqz325GnRMQ7vBeqQrWuS3A6p8vBMWgI Lq4cc4NXOhUu6xSncLSuP0yUWrYB897qJYaVi/hJIfcO34tfDGYhfsTY3h40yZd/ SRUVhACmo/I3ZcWqxc7bpuY6TeAx8FODcQ== -----END CERTIFICATE-----Generated at Fri Jul 4 19:35:07 2025 by rpki-client