$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer File: e0mod1mUgnl1qzfm35YGTJJHg_E.cer (raw, json) Hash identifier: fu57VlyJJagpw37Lp5O3dELWwd1hJ7mbKQr5gPWwcVg= Subject key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5A4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:32:27 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 27.109.96.0/21 IP: 103.154.6.0/23 IP: 119.47.96.0/20 IP: 180.200.248.0/22 IP: 202.70.224.0/19 IP: 202.238.16.0/20 IP: 218.231.160.0/19 IP: 219.111.208.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 12:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23115 (0x5a4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:32:27 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=7B49A8775994827975AB37E6DF96064C924783F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:7c:4e:bf:12:10:0f:71:96:82:76:71:73: ca:b8:76:af:51:66:56:35:29:a1:ac:78:f7:b0:a1: 1b:e5:87:20:82:d7:2a:5f:2c:d0:ef:55:69:01:a4: 72:93:4f:49:06:37:fe:73:58:62:c4:12:c5:37:7a: 06:84:82:01:a7:7b:84:ba:65:08:0e:f9:d0:59:d1: 4b:6a:2d:c8:22:57:ea:bd:7b:53:bc:0b:8d:32:7f: eb:48:d3:ce:31:9a:54:e8:b6:b7:4f:a2:ae:76:3d: 1b:bd:cd:de:c0:fa:6c:2c:9e:f0:5c:4d:13:6a:20: 7d:b7:8d:3c:d4:b3:1d:0e:d7:a2:1f:05:4e:a8:e4: bc:31:9f:42:4f:2b:6b:4d:14:53:c2:e9:ba:a7:49: 3b:aa:85:44:8e:a2:07:87:38:43:71:d8:63:26:da: f1:c2:8e:3a:2b:ab:44:b8:da:5e:f0:9f:63:ed:7b: 1a:43:52:12:f1:bb:cd:06:1e:cf:66:4e:30:30:7d: 74:59:76:48:b2:96:cd:68:d1:16:ff:fb:a8:c5:d0: aa:4a:fe:04:01:a9:5d:d5:b7:f8:04:03:93:57:69: 92:bc:a2:6f:a0:8b:71:08:ed:99:f9:17:61:f2:b5: b1:fc:99:ac:b6:f8:24:c6:f8:1c:61:40:73:e5:5b: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.109.96.0/21 103.154.6.0/23 119.47.96.0/20 180.200.248.0/22 202.70.224.0/19 202.238.16.0/20 218.231.160.0/19 219.111.208.0/20 Signature Algorithm: sha256WithRSAEncryption 83:f2:a9:84:9c:8b:46:e4:f6:cc:bd:b3:c8:15:db:b8:be:1f: 14:a3:a9:18:6c:8f:ec:93:fc:9b:05:22:e4:a2:8c:2b:9f:29: b6:5c:ee:00:82:bb:8a:21:a0:00:1e:c5:5c:0d:ec:24:63:cc: dd:76:32:c4:05:43:c9:46:10:61:0c:bc:52:b5:6c:b3:94:e1: d4:76:82:0b:b6:44:17:2d:88:2c:82:80:1f:7c:90:da:76:f9: 28:ca:26:aa:d2:fd:31:c1:85:28:bb:fb:fc:19:5d:7e:d5:45: 0b:7c:a8:81:e9:ac:04:13:04:37:7d:f6:a6:8c:bf:57:90:6c: 39:a1:7f:ce:11:c0:01:f9:f6:42:94:af:80:36:2a:da:d6:c5: 5e:a6:02:7b:99:b0:3a:9c:5d:3a:23:18:03:73:70:76:ad:90: 7c:75:63:37:6f:91:b5:3c:71:c9:02:66:62:34:59:10:00:fe: 79:10:18:f9:3b:28:a8:36:83:e7:e5:72:ca:39:69:55:96:36: 1b:ca:50:dd:9d:6f:17:0c:6a:a0:ab:fb:13:57:8d:28:d6:6f: 81:ed:c1:86:38:ef:e9:f9:af:3d:6e:15:fc:6b:33:29:b5:c4: ce:f9:8e:ba:88:47:4c:b2:ae:0b:93:c9:b5:2d:e7:93:6b:20: f7:57:c2:14 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgICWkswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxMzIyN1oXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoN0I0OUE4Nzc1OTk0ODI3OTc1QUIzN0U2REY5NjA2NEM5MjQ3ODNG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZCfE6/EhAPcZaCdnFz yrh2r1FmVjUpoax497ChG+WHIILXKl8s0O9VaQGkcpNPSQY3/nNYYsQSxTd6BoSC Aad7hLplCA750FnRS2otyCJX6r17U7wLjTJ/60jTzjGaVOi2t0+irnY9G73N3sD6 bCye8FxNE2ogfbeNPNSzHQ7Xoh8FTqjkvDGfQk8ra00UU8LpuqdJO6qFRI6iB4c4 Q3HYYyba8cKOOiurRLjaXvCfY+17GkNSEvG7zQYez2ZOMDB9dFl2SLKWzWjRFv/7 qMXQqkr+BAGpXdW3+AQDk1dpkryib6CLcQjtmfkXYfK1sfyZrLb4JMb4HGFAc+Vb W4UCAwEAAaOCArAwggKsMB0GA1UdDgQWBBR7Sah3WZSCeXWrN+bflgZMkkeD8TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC83NTEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzc1MS9lMG1vZDFt VWdubDFxemZtMzVZR1RKSkhnX0UubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDG21gAwQBZ5oGAwQEdy9gAwQC tMj4AwQFykbgAwQEyu4QAwQF2uegAwQE22/QMA0GCSqGSIb3DQEBCwUAA4IBAQCD 8qmEnItG5PbMvbPIFdu4vh8Uo6kYbI/sk/ybBSLkoowrnym2XO4AgruKIaAAHsVc DewkY8zddjLEBUPJRhBhDLxStWyzlOHUdoILtkQXLYgsgoAffJDadvkoyiaq0v0x wYUou/v8GV1+1UULfKiB6awEEwQ3ffamjL9XkGw5oX/OEcAB+fZClK+ANira1sVe pgJ7mbA6nF06IxgDc3B2rZB8dWM3b5G1PHHJAmZiNFkQAP55EBj5OyioNoPn5XLK OWlVljYbylDdnW8XDGqgq/sTV40o1m+B7cGGOO/p+a89bhX8azMptcTO+Y66iEdM sq4Lk8m1LeeTayD3V8IU -----END CERTIFICATE-----Generated at Mon Oct 20 14:14:39 2025 by rpki-client