$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer File: YYky9kHWUNyGDXQRrIrrbDXInQQ.cer (raw, json) Hash identifier: jQAVjxpkA1tIvXCW9rlLck58At0qNvgtt2m6Au37opo= Subject key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4BAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:42:28 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 2407:d600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 22:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19370 (0x4baa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:42:28 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:36:4e:71:f5:6f:02:0e:78:a4:03:a8:43: 00:b4:fe:28:05:32:e4:96:b6:a9:68:37:b1:31:fd: de:ed:f9:7a:6f:d2:a8:ea:d2:bc:d6:ed:31:15:7f: 1e:d9:a5:61:bf:18:db:a5:9f:74:a2:ba:a4:5c:c3: 18:4e:20:80:7c:a3:2c:49:a2:cf:59:2d:38:a0:a5: b8:a1:de:61:90:0b:ba:da:4f:cd:04:d5:f6:6a:16: ed:78:f1:19:18:0a:46:46:9f:80:21:96:8f:4d:a9: d5:da:6f:2b:cc:58:09:50:64:a8:92:fd:27:34:70: 8f:99:a9:a9:ce:71:45:2e:7d:1c:83:7b:ca:4a:a6: 7c:1e:ef:41:79:7c:67:a1:82:9a:98:d5:5a:45:d1: 16:e9:bb:af:92:c3:33:6a:7b:f5:15:4f:27:3a:ae: 6d:0a:38:5b:12:10:d1:7a:82:44:8e:d3:6b:7f:e0: 02:d9:92:08:55:1e:0b:e5:76:68:c7:27:f9:bc:9d: a6:de:8a:1d:20:c2:80:13:d1:00:fa:ea:fe:29:61: e9:3d:e7:05:03:5e:3e:f8:e7:59:22:6b:04:cb:2a: 9c:b1:3c:67:57:e9:66:99:b2:a5:18:39:7b:9f:4d: 2a:b9:7e:db:c0:e3:40:d0:28:f9:89:8d:98:80:8d: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d600::/32 Signature Algorithm: sha256WithRSAEncryption 3b:57:ed:84:fb:97:a4:93:c0:60:5c:2a:b9:c4:a1:6b:c1:31: 71:e0:6a:be:24:03:b8:3e:76:13:2f:ce:da:2b:21:b8:61:9c: c7:23:f9:67:67:53:f3:b0:a3:c6:61:55:ab:30:b2:15:6c:0c: 35:f1:d1:d2:0a:b3:96:da:7a:bf:e5:99:28:7a:a2:7e:d8:75: ce:4b:07:a7:cd:41:f4:87:97:97:47:b3:ea:9d:13:67:50:60: c3:f7:57:fb:48:61:d6:e4:8f:8f:d7:02:39:65:32:30:00:f5: 8d:b0:df:7f:43:53:ce:2b:ea:5b:52:c9:d2:7b:33:31:62:f2: c0:4e:d6:47:8c:fe:3f:55:24:be:42:78:9b:95:9b:52:80:4b: 16:d1:42:07:11:54:30:97:c1:fd:29:eb:e9:10:cf:9b:84:f7: 76:af:a6:0a:e8:a5:55:ea:fd:bb:14:28:c5:44:29:9b:af:a6: 62:23:f6:60:e8:06:c5:ce:a2:1d:e9:46:13:cd:60:91:da:88: 9e:ca:d9:bc:88:e0:59:90:54:c1:b3:48:f6:d8:0d:37:db:0a: 02:f4:07:12:4f:c8:14:91:21:da:5c:03:80:a0:a9:80:6a:49: 19:6d:1b:5e:21:cd:8c:64:6d:13:07:80:a8:e2:90:f0:be:93: 52:37:db:30 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICS6owDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUxNTAxNDIyOFoXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoNjE4OTMyRjY0MUQ2NTBEQzg2MEQ3NDExQUM4QUVCNkMzNUM4OUQw NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJWBNk5x9W8CDnikA6hD ALT+KAUy5Ja2qWg3sTH93u35em/SqOrSvNbtMRV/HtmlYb8Y26WfdKK6pFzDGE4g gHyjLEmiz1ktOKCluKHeYZALutpPzQTV9moW7XjxGRgKRkafgCGWj02p1dpvK8xY CVBkqJL9JzRwj5mpqc5xRS59HIN7ykqmfB7vQXl8Z6GCmpjVWkXRFum7r5LDM2p7 9RVPJzqubQo4WxIQ0XqCRI7Ta3/gAtmSCFUeC+V2aMcn+bydpt6KHSDCgBPRAPrq /ilh6T3nBQNePvjnWSJrBMsqnLE8Z1fpZpmypRg5e59NKrl+28DjQNAo+YmNmICN 1/ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRhiTL2QdZQ3IYNdBGsiutsNcidBDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxODAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTgwL1lZ a3k5a0hXVU55R0RYUVJySXJyYkRYSW5RUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB9YAMA0GCSqGSIb3 DQEBCwUAA4IBAQA7V+2E+5ekk8BgXCq5xKFrwTFx4Gq+JAO4PnYTL87aKyG4YZzH I/lnZ1PzsKPGYVWrMLIVbAw18dHSCrOW2nq/5ZkoeqJ+2HXOSwenzUH0h5eXR7Pq nRNnUGDD91f7SGHW5I+P1wI5ZTIwAPWNsN9/Q1POK+pbUsnSezMxYvLATtZHjP4/ VSS+QniblZtSgEsW0UIHEVQwl8H9KevpEM+bhPd2r6YK6KVV6v27FCjFRCmbr6Zi I/Zg6AbFzqId6UYTzWCR2oieytm8iOBZkFTBs0j22A032woC9AcST8gUkSHaXAOA oKmAakkZbRteIc2MZG0TB4Co4pDwvpNSN9sw -----END CERTIFICATE-----Generated at Mon May 19 00:46:04 2025 by rpki-client