$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer File: g3GTlezs0ieqs-JSnnoQSDwPmG8.cer (raw, json) Hash identifier: WdnQ8jAWzao+j1rkPx814TCrentkB7nzIzLgbcrSZDM= Subject key identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0FF3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:41:15 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 160.187.26.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4083 (0xff3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: May 15 01:41:15 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=83719395ECECD227AAB3E2529E7A10483C0F986F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:ad:d6:81:3f:dc:c9:9b:35:7b:d2:47:9e: 55:50:de:6a:31:d0:e6:4f:7a:da:c7:f4:a9:ed:ce: f6:f3:ba:cb:ee:f7:01:3d:99:58:71:1b:20:cd:d5: 3e:41:60:3b:0f:97:c6:88:33:a7:c6:2e:2a:4a:56: c4:48:80:91:f8:c1:c2:5c:90:54:e1:d4:b8:78:f5: 27:06:68:c7:4d:59:c2:d3:64:47:b8:c1:b3:4e:52: a4:f0:70:ef:dc:3c:a0:7d:f7:aa:46:d1:7f:7b:d5: 02:d2:7e:8e:a9:80:86:8b:10:87:e6:cc:63:17:fe: 41:a0:2b:8a:53:38:ac:46:b8:03:25:37:7f:1a:98: c9:1d:7b:35:7c:bc:b5:1f:9c:13:27:c1:d4:c8:7d: cb:b6:9a:8d:d2:e9:f8:04:a1:de:96:ea:5b:ce:06: 14:2d:fa:e1:fd:cf:50:0c:d7:3a:24:4c:14:ea:58: 2c:ed:10:34:dd:ca:b1:f2:ca:a0:cd:bd:c4:11:e2: be:78:f1:86:a0:13:4a:47:bb:ee:01:14:45:0e:ad: 63:e8:c6:08:49:f2:f1:c3:7d:29:61:ea:d4:d7:5c: c3:c9:08:4d:45:7e:09:35:19:d3:52:9a:e6:f1:5c: 32:b6:cc:57:72:53:87:33:35:95:12:dc:16:80:9d: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.26.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:35:94:3c:b1:8c:93:f9:b6:93:f8:dd:02:fd:e9:92:f1:86: 83:5a:26:00:7b:23:be:85:b1:6d:52:38:ea:c2:46:66:85:24: 52:2b:ad:7a:96:f1:5b:07:03:c5:5b:ed:3a:d3:b8:5e:68:b4: aa:cb:f7:19:04:c0:cf:9a:71:70:37:24:4d:c7:fc:6a:4f:58: 90:87:04:f4:f9:68:a5:18:82:df:5a:41:08:bf:c6:82:36:1a: af:1e:d6:05:b4:08:fc:19:f5:64:a4:5d:19:80:82:30:b5:d7: 7d:cd:25:9a:64:4b:c5:47:1e:f7:3b:8d:30:2d:47:5f:9c:71: 59:f7:e5:78:5f:db:96:72:e4:8a:5d:87:f8:a5:3c:ec:5e:95: c8:25:12:40:e7:c8:03:76:42:5a:04:54:e1:78:56:74:f5:3e: 9f:f4:15:69:bf:30:de:84:96:4b:03:78:98:ec:33:48:d3:a3: 52:b3:4b:dc:ac:a9:ce:7a:f9:da:29:60:61:f8:19:05:a9:52: e7:d9:3a:72:44:55:46:ef:7a:e1:fa:78:52:71:7d:54:49:dc: 62:72:c0:a6:74:e9:50:a0:2b:86:5c:78:a8:38:df:2d:cd:b9: 2b:5a:6c:8f:8e:bc:17:80:11:90:2a:ae:c4:66:cf:3b:bc:c3: 9c:bc:2a:d7 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICD/MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDUxNTAxNDExNVoXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoODM3MTkzOTVFQ0VDRDIyN0FBQjNFMjUyOUU3QTEwNDgzQzBGOTg2 RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMXsrdaBP9zJmzV70kee VVDeajHQ5k962sf0qe3O9vO6y+73AT2ZWHEbIM3VPkFgOw+Xxogzp8YuKkpWxEiA kfjBwlyQVOHUuHj1JwZox01ZwtNkR7jBs05SpPBw79w8oH33qkbRf3vVAtJ+jqmA hosQh+bMYxf+QaArilM4rEa4AyU3fxqYyR17NXy8tR+cEyfB1Mh9y7aajdLp+ASh 3pbqW84GFC364f3PUAzXOiRMFOpYLO0QNN3KsfLKoM29xBHivnjxhqATSke77gEU RQ6tY+jGCEny8cN9KWHq1Ndcw8kITUV+CTUZ01Ka5vFcMrbMV3JThzM1lRLcFoCd aicCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSDcZOV7OzSJ6qz4lKeehBIPA+YbzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNzAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjcwL2cz R1RsZXpzMGllcXMtSlNubm9RU0R3UG1HOC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGguxowDQYJKoZIhvcN AQELBQADggEBAE01lDyxjJP5tpP43QL96ZLxhoNaJgB7I76FsW1SOOrCRmaFJFIr rXqW8VsHA8Vb7TrTuF5otKrL9xkEwM+acXA3JE3H/GpPWJCHBPT5aKUYgt9aQQi/ xoI2Gq8e1gW0CPwZ9WSkXRmAgjC1133NJZpkS8VHHvc7jTAtR1+ccVn35Xhf25Zy 5Ipdh/ilPOxelcglEkDnyAN2QloEVOF4VnT1Pp/0FWm/MN6ElksDeJjsM0jTo1Kz S9ysqc56+dopYGH4GQWpUufZOnJEVUbveuH6eFJxfVRJ3GJywKZ06VCgK4ZceKg4 3y3NuStabI+OvBeAEZAqrsRmzzu8w5y8Ktc= -----END CERTIFICATE-----Generated at Sun May 18 17:53:17 2025 by rpki-client