$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer File: e5r2GKThvUClCRs5VuFc2ir2ydI.cer (raw, json) Hash identifier: DWWhl0Lc9pEzmzP2fTRy5iP0+hd1DYsXxIk9KXeFTWA= Subject key identifier: 7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 07:49:19 +0000 Certificate not after: Thu 15 Oct 2026 07:43:22 +0000 Subordinate resources: IP: 2402:3160::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23512 (0x5bd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 07:49:19 2025 GMT Not After : Oct 15 07:43:22 2026 GMT Subject: CN=7B9AF618A4E1BD40A5091B3956E15CDA2AF6C9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:c2:a6:d0:77:09:ec:da:7f:2d:a2:02:0a: 31:57:cd:e7:a1:f7:38:5a:e6:f9:0e:2f:6b:a2:d2: 17:71:fe:77:a4:03:81:3e:9f:1a:c8:07:ea:36:e3: db:3e:90:dc:22:94:da:fc:a5:76:85:b2:57:ee:1b: 1c:16:37:63:23:cb:e2:ca:df:9d:41:88:2a:d2:db: de:25:4b:3d:7a:3d:02:66:0d:ef:ea:41:c3:38:ae: 17:03:c5:7a:15:c2:2f:36:2c:6a:c6:26:98:23:3e: 09:75:df:bb:5d:92:7c:ec:97:3b:73:24:dd:f8:43: 1c:96:f4:4e:ea:84:cc:3e:43:32:1b:15:c5:ef:04: eb:81:a9:c0:13:72:7c:6f:34:a2:15:c4:4a:6d:1a: 1f:70:ba:10:89:31:c6:21:10:74:68:32:57:79:7b: d4:83:02:03:68:9e:0b:50:4e:3a:bd:1b:90:64:67: 51:27:89:1c:03:7b:11:8f:ad:fb:6c:33:f7:de:d2: 17:ac:5f:27:63:95:7d:a5:1b:71:df:b8:ed:c1:d1: e6:5e:37:d6:3a:49:a2:b8:cc:a8:59:c4:50:e4:5b: e6:c2:a8:1d:d3:12:c4:79:99:ab:0e:76:8f:49:74: de:5e:2c:8b:52:96:65:3d:4c:d0:5e:e8:17:c7:54: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3160::/32 Signature Algorithm: sha256WithRSAEncryption 7d:cc:bc:9e:b5:ef:72:f2:b3:b8:b3:ac:20:01:a1:fc:cb:c7: d5:39:08:14:e9:c1:ae:50:fa:46:e4:4b:5f:f8:6b:10:95:61: c7:38:d8:96:f3:d0:cc:a3:d7:85:67:5f:f8:96:18:14:ee:c1: eb:f9:1e:c9:8e:81:d6:4a:ee:ed:8c:d9:38:7d:1f:f0:a2:76: 0a:5a:b4:35:4b:e4:0e:16:a6:4d:15:04:83:38:1a:b7:37:17: a9:2c:a8:72:72:f8:9d:7c:02:85:fd:7e:d4:59:b8:95:50:0d: 80:d4:42:75:8c:eb:37:95:5d:75:70:f5:a3:8d:45:92:6c:01: 04:50:2e:fe:1b:9d:b0:aa:2f:61:eb:39:b6:14:e9:1d:ca:87: 79:bc:fa:7e:36:3d:9d:ec:a2:c8:b5:b6:ff:e6:be:de:f2:31: df:9e:da:62:89:e7:e8:49:25:c7:ad:0a:25:98:77:ed:2d:6d: 4d:bd:53:b3:6b:90:16:b9:ec:e9:e7:15:57:e1:5d:96:d9:01: de:bc:6d:ab:c8:bd:0b:18:b9:b4:79:97:0c:ae:ff:ab:ab:27: 81:7a:45:15:48:9b:38:d2:f4:87:20:5b:2c:03:18:96:41:3d: c2:5d:1c:a4:da:ee:2d:8e:65:33:9f:73:1a:c6:d8:da:6f:99: 7b:63:36:b3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICW9gwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTA3NDkxOVoXDTI2MTAxNTA3NDMyMlowMzEx MC8GA1UEAxMoN0I5QUY2MThBNEUxQkQ0MEE1MDkxQjM5NTZFMTVDREEyQUY2QzlE MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANNDwqbQdwns2n8togIK MVfN56H3OFrm+Q4va6LSF3H+d6QDgT6fGsgH6jbj2z6Q3CKU2vyldoWyV+4bHBY3 YyPL4srfnUGIKtLb3iVLPXo9AmYN7+pBwziuFwPFehXCLzYsasYmmCM+CXXfu12S fOyXO3Mk3fhDHJb0TuqEzD5DMhsVxe8E64GpwBNyfG80ohXESm0aH3C6EIkxxiEQ dGgyV3l71IMCA2ieC1BOOr0bkGRnUSeJHAN7EY+t+2wz997SF6xfJ2OVfaUbcd+4 7cHR5l431jpJorjMqFnEUORb5sKoHdMSxHmZqw52j0l03l4si1KWZT1M0F7oF8dU Jo0CAwEAAaOCAowwggKIMB0GA1UdDgQWBBR7mvYYpOG9QKUJGzlW4VzaKvbJ0jAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NDkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDQ5L2U1 cjJHS1RodlVDbENSczVWdUZjMmlyMnlkSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAjFgMA0GCSqGSIb3 DQEBCwUAA4IBAQB9zLyete9y8rO4s6wgAaH8y8fVOQgU6cGuUPpG5Etf+GsQlWHH ONiW89DMo9eFZ1/4lhgU7sHr+R7JjoHWSu7tjNk4fR/wonYKWrQ1S+QOFqZNFQSD OBq3NxepLKhycvidfAKF/X7UWbiVUA2A1EJ1jOs3lV11cPWjjUWSbAEEUC7+G52w qi9h6zm2FOkdyod5vPp+Nj2d7KLItbb/5r7e8jHfntpiiefoSSXHrQolmHftLW1N vVOza5AWuezp5xVX4V2W2QHevG2ryL0LGLm0eZcMrv+rqyeBekUVSJs40vSHIFss AxiWQT3CXRyk2u4tjmUzn3Maxtjab5l7Yzaz -----END CERTIFICATE-----Generated at Tue Oct 21 02:18:36 2025 by rpki-client