$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer File: g3GTlezs0ieqs-JSnnoQSDwPmG8.cer (raw, json) Hash identifier: Hm6p5V8HEyMo9aZmxsXGn2mgQDhKlZbpMBRhcl31b0A= Subject key identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1231 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Aug 2025 01:31:26 +0000 Certificate not after: Sat 15 Aug 2026 01:30:02 +0000 Subordinate resources: IP: 160.187.26.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 19:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4657 (0x1231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Aug 15 01:31:26 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=83719395ECECD227AAB3E2529E7A10483C0F986F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:ad:d6:81:3f:dc:c9:9b:35:7b:d2:47:9e: 55:50:de:6a:31:d0:e6:4f:7a:da:c7:f4:a9:ed:ce: f6:f3:ba:cb:ee:f7:01:3d:99:58:71:1b:20:cd:d5: 3e:41:60:3b:0f:97:c6:88:33:a7:c6:2e:2a:4a:56: c4:48:80:91:f8:c1:c2:5c:90:54:e1:d4:b8:78:f5: 27:06:68:c7:4d:59:c2:d3:64:47:b8:c1:b3:4e:52: a4:f0:70:ef:dc:3c:a0:7d:f7:aa:46:d1:7f:7b:d5: 02:d2:7e:8e:a9:80:86:8b:10:87:e6:cc:63:17:fe: 41:a0:2b:8a:53:38:ac:46:b8:03:25:37:7f:1a:98: c9:1d:7b:35:7c:bc:b5:1f:9c:13:27:c1:d4:c8:7d: cb:b6:9a:8d:d2:e9:f8:04:a1:de:96:ea:5b:ce:06: 14:2d:fa:e1:fd:cf:50:0c:d7:3a:24:4c:14:ea:58: 2c:ed:10:34:dd:ca:b1:f2:ca:a0:cd:bd:c4:11:e2: be:78:f1:86:a0:13:4a:47:bb:ee:01:14:45:0e:ad: 63:e8:c6:08:49:f2:f1:c3:7d:29:61:ea:d4:d7:5c: c3:c9:08:4d:45:7e:09:35:19:d3:52:9a:e6:f1:5c: 32:b6:cc:57:72:53:87:33:35:95:12:dc:16:80:9d: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.26.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:55:c6:50:c1:f0:5c:e9:c0:e8:d9:67:25:6d:b0:28:d8:9a: 3b:85:66:67:b9:38:8c:69:c4:22:a4:12:fe:2e:31:b9:0d:a4: ad:1c:cb:72:46:3d:5a:65:17:6e:ab:8d:59:8d:e9:fa:3a:97: 17:61:2f:ff:06:dd:18:dc:86:e8:7e:0d:b1:ce:04:d1:08:e5: 93:7b:e0:0f:63:83:30:11:ad:64:f2:31:6f:31:d3:b7:54:0b: 50:31:b5:73:17:6a:d1:b4:fc:3a:18:0a:f6:c4:1b:80:8e:0d: e9:06:00:e8:c6:b1:1b:54:f3:ff:93:ec:b4:e1:b5:37:a1:f6: d0:6e:37:56:e4:be:d1:ea:7d:06:f7:34:22:7d:15:88:ab:04: 49:89:2d:8f:ec:a1:35:99:3e:16:2e:5b:7a:d7:46:78:63:0d: 53:16:b0:02:a6:76:90:ac:00:2a:c9:a1:d7:b0:a7:5a:d1:f9: b6:d7:eb:31:6c:48:51:82:29:b2:f8:54:88:81:14:ea:23:28: 98:15:e3:01:9f:35:96:fc:70:78:15:a6:b0:ff:1d:61:0e:f7: 55:b5:38:49:15:1e:c1:cd:af:f7:76:a7:be:a9:da:02:59:50: 27:0a:c6:f6:2a:c2:12:b9:5c:d8:4d:04:0e:fc:41:37:db:1f: 60:cd:96:5a -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEjEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDgxNTAxMzEyNloXDTI2MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoODM3MTkzOTVFQ0VDRDIyN0FBQjNFMjUyOUU3QTEwNDgzQzBGOTg2 RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMXsrdaBP9zJmzV70kee VVDeajHQ5k962sf0qe3O9vO6y+73AT2ZWHEbIM3VPkFgOw+Xxogzp8YuKkpWxEiA kfjBwlyQVOHUuHj1JwZox01ZwtNkR7jBs05SpPBw79w8oH33qkbRf3vVAtJ+jqmA hosQh+bMYxf+QaArilM4rEa4AyU3fxqYyR17NXy8tR+cEyfB1Mh9y7aajdLp+ASh 3pbqW84GFC364f3PUAzXOiRMFOpYLO0QNN3KsfLKoM29xBHivnjxhqATSke77gEU RQ6tY+jGCEny8cN9KWHq1Ndcw8kITUV+CTUZ01Ka5vFcMrbMV3JThzM1lRLcFoCd aicCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSDcZOV7OzSJ6qz4lKeehBIPA+YbzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNzAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjcwL2cz R1RsZXpzMGllcXMtSlNubm9RU0R3UG1HOC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGguxowDQYJKoZIhvcN AQELBQADggEBAEpVxlDB8FzpwOjZZyVtsCjYmjuFZme5OIxpxCKkEv4uMbkNpK0c y3JGPVplF26rjVmN6fo6lxdhL/8G3Rjchuh+DbHOBNEI5ZN74A9jgzARrWTyMW8x 07dUC1AxtXMXatG0/DoYCvbEG4CODekGAOjGsRtU8/+T7LThtTeh9tBuN1bkvtHq fQb3NCJ9FYirBEmJLY/soTWZPhYuW3rXRnhjDVMWsAKmdpCsACrJodewp1rR+bbX 6zFsSFGCKbL4VIiBFOojKJgV4wGfNZb8cHgVprD/HWEO91W1OEkVHsHNr/d2p76p 2gJZUCcKxvYqwhK5XNhNBA78QTfbH2DNllo= -----END CERTIFICATE-----Generated at Sun Aug 24 00:56:01 2025 by rpki-client