$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer File: Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer (raw, json) Hash identifier: reCkweHPsAC5s+GP0KhH2s+wlkSAATAFs6yXrkAj6AE= Subject key identifier: 67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:36:24 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 2405:8500::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19169 (0x4ae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:36:24 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=675815DB7349C2ACFBC48AA75306520050C26248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:40:e6:6b:c6:85:0d:0e:6d:bf:b3:31:a7: c6:c7:40:94:06:99:eb:94:ed:ad:df:6d:bc:e7:5b: 80:9c:d4:04:45:38:e9:13:10:fd:70:9a:f1:6f:24: 34:38:d6:08:9c:b6:81:25:45:58:c6:67:14:69:8a: b7:ee:c6:68:4f:69:d0:b8:24:88:94:27:06:10:99: 54:aa:f0:5f:f0:59:21:b3:07:36:78:cc:29:f0:ad: 4a:d1:ad:40:0b:f4:32:79:e9:68:df:d4:ac:3f:29: 98:a6:cf:7d:1a:94:cb:8c:17:fa:43:4b:e7:18:5f: 45:00:df:9c:79:77:e1:84:3b:b3:ef:85:4c:63:ad: 11:e3:56:64:90:7b:b7:c3:e3:6a:88:59:87:88:11: de:8c:a1:c1:e5:55:63:e4:0a:25:7f:76:8b:5c:5e: 35:f3:1d:65:e7:ed:8a:c3:b1:50:19:d2:da:b3:78: 4c:6f:55:af:53:a6:3b:9f:38:0d:a9:30:65:5d:35: 86:94:e8:80:65:da:cb:16:32:81:0d:20:31:8d:51: b5:6e:6a:29:30:0d:b8:b3:3d:5b:3b:c8:db:62:bf: bf:26:97:f3:93:e3:fb:f1:5a:10:b3:3a:b1:92:23: 58:8c:d5:bf:ed:9e:d2:cb:35:0c:3d:06:45:36:b3: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:8500::/32 Signature Algorithm: sha256WithRSAEncryption 13:52:ef:b3:6f:c1:82:8d:02:94:16:9d:ac:a6:33:39:8c:47: 49:ea:4a:40:8b:db:55:09:11:5c:55:3b:0c:92:f9:d8:cc:d1: da:8f:e6:26:5f:09:f1:72:f7:ed:a3:06:77:09:88:3e:8e:bc: f3:39:cf:29:72:07:ea:1e:3c:d3:c3:09:34:dd:a9:81:64:5a: 86:0a:56:17:bd:3e:b9:55:96:4f:de:dd:c4:1e:45:9d:74:0f: 16:81:fe:ee:63:f4:a2:5c:80:ac:24:db:e6:52:d3:07:98:0a: a1:4b:b8:ab:84:c4:95:b9:35:ff:e5:c7:b1:ef:f8:3c:a7:28: 76:26:02:89:52:6f:26:15:f0:37:fc:6d:f8:08:8f:23:30:4b: 41:8e:1c:f7:3c:d3:ee:5c:b4:f3:8a:3b:c3:a3:9f:41:a2:82: 0c:2c:5e:e2:f0:52:f8:61:fd:5a:93:6c:1b:e7:b7:28:b7:f3: 78:6d:a0:ce:d1:b3:d4:c1:31:80:a4:07:1a:b2:16:d8:37:cf: f8:02:a9:6e:da:ea:15:b5:e4:f8:2e:90:0d:a6:c3:c0:52:7a: 3d:d9:8d:0f:2e:fc:1c:61:1e:b8:71:7b:d5:42:8b:11:02:99: 1a:3e:7a:c3:6a:fa:8a:ef:21:86:09:15:ed:d8:37:cb:9a:b7: 15:6b:4c:78 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICSuEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUxNTAxMzYyNFoXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoNjc1ODE1REI3MzQ5QzJBQ0ZCQzQ4QUE3NTMwNjUyMDA1MEMyNjI0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/gQOZrxoUNDm2/szGn xsdAlAaZ65Ttrd9tvOdbgJzUBEU46RMQ/XCa8W8kNDjWCJy2gSVFWMZnFGmKt+7G aE9p0LgkiJQnBhCZVKrwX/BZIbMHNnjMKfCtStGtQAv0MnnpaN/UrD8pmKbPfRqU y4wX+kNL5xhfRQDfnHl34YQ7s++FTGOtEeNWZJB7t8PjaohZh4gR3oyhweVVY+QK JX92i1xeNfMdZeftisOxUBnS2rN4TG9Vr1OmO584DakwZV01hpTogGXayxYygQ0g MY1RtW5qKTANuLM9WzvI22K/vyaX85Pj+/FaELM6sZIjWIzVv+2e0ss1DD0GRTaz +pECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRnWBXbc0nCrPvEiqdTBlIAUMJiSDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzNTkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzU5L1ox Z1YyM05Kd3F6N3hJcW5Vd1pTQUZEQ1lrZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBYUAMA0GCSqGSIb3 DQEBCwUAA4IBAQATUu+zb8GCjQKUFp2spjM5jEdJ6kpAi9tVCRFcVTsMkvnYzNHa j+YmXwnxcvftowZ3CYg+jrzzOc8pcgfqHjzTwwk03amBZFqGClYXvT65VZZP3t3E HkWddA8Wgf7uY/SiXICsJNvmUtMHmAqhS7irhMSVuTX/5cex7/g8pyh2JgKJUm8m FfA3/G34CI8jMEtBjhz3PNPuXLTzijvDo59BooIMLF7i8FL4Yf1ak2wb57cot/N4 baDO0bPUwTGApAcashbYN8/4Aqlu2uoVteT4LpANpsPAUno92Y0PLvwcYR64cXvV QosRApkaPnrDavqK7yGGCRXt2DfLmrcVa0x4 -----END CERTIFICATE-----Generated at Sun May 18 17:55:19 2025 by rpki-client