$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer File: gcATaiDHNuoCKbzbtbWtDP420oY.cer (raw, json) Hash identifier: 5HkHbduQWgZxLgrRFWBErxNSUxbPZT24P8flR47Y1II= Subject key identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:37:11 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 61.195.44.0/22 IP: 103.173.104.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20880 (0x5190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:37:11 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:62:86:db:87:1a:fa:d4:ce:99:f0:4c:68: 52:64:1a:11:af:da:7c:73:5f:11:5f:3b:db:ca:b8: f0:73:28:3e:b6:13:42:29:6f:7d:3e:1b:4a:45:c5: c6:f7:cf:2c:52:c5:03:66:38:3e:e8:7c:5b:d6:1c: 77:4c:17:02:dd:21:7c:e6:2d:69:60:5c:b4:04:c7: a5:02:26:6e:86:2e:c0:2c:1b:8e:aa:74:9d:b2:2b: 33:f1:9a:f6:f9:7d:c5:6e:01:f6:77:c9:5c:a2:cd: bc:df:75:cd:11:4d:ac:66:c8:df:a1:5d:4e:48:06: ff:19:1a:7f:0b:ef:04:14:4b:af:c6:5e:ce:27:52: 08:92:53:a4:e7:c4:40:6e:49:38:fd:e8:6c:66:d2: 72:c8:27:c7:cc:ca:6b:89:65:4a:d6:ca:3b:3d:7b: 2f:e2:53:65:7a:fa:fb:45:74:7d:11:68:42:88:0f: 3d:6b:f7:a0:73:0d:63:36:25:f5:ab:5b:38:84:c4: a1:1f:47:65:66:29:93:10:7b:da:c4:3c:d8:2c:c7: bb:df:cc:34:a0:ab:72:cf:44:07:fe:dd:53:03:8e: d3:02:d4:5d:9e:8f:85:45:ae:cc:ec:db:9d:1a:75: 28:b5:48:1f:9c:04:19:6e:ee:d0:95:75:2b:69:f5: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.44.0/22 103.173.104.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:d8:a0:42:d6:d1:a3:6b:96:52:04:d4:2a:0e:e4:8f:98:ff: f9:35:aa:bc:77:9e:22:e7:2c:8a:ee:f0:fe:c5:81:0b:29:e6: ff:0a:b0:c6:82:d3:7e:00:21:22:06:71:1c:33:8d:1e:9b:dc: 50:a7:f2:64:05:0e:12:52:84:1e:93:8c:cf:41:92:d5:54:40: ae:34:61:84:b0:8e:48:53:9a:7e:1e:7c:14:61:da:1a:de:18: 44:d9:71:72:31:67:20:e0:0d:91:92:31:ab:8e:7c:72:5e:68: a1:66:da:a6:60:3a:7d:e4:9c:08:39:1d:9d:12:19:44:0f:4e: 5b:12:ff:12:e2:30:54:9f:6f:c6:2f:fd:b6:48:31:ad:ec:5f: 64:85:e2:a6:65:7c:e5:81:6e:88:db:ef:32:82:c2:c7:fa:4d: b0:72:e9:14:ad:ce:74:c6:a5:d1:3d:87:be:a3:df:bd:42:87: d5:84:41:e8:71:61:5d:cb:7e:7f:6f:48:91:47:b1:4b:7f:47: 7b:a9:99:65:4e:ff:ce:9a:af:f4:ec:72:ec:6e:03:4a:14:e2: bd:f5:42:ef:7a:17:31:df:68:81:b9:a6:a5:1c:b3:1f:2c:4c: 05:a6:91:17:13:b8:94:98:02:ec:39:92:45:f4:03:c8:6c:dd: 1a:73:f9:66 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICUZAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDYxNTAxMzcxMVoXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoODFDMDEzNkEyMEM3MzZFQTAyMjlCQ0RCQjVCNUFEMENGRTM2RDI4 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALL1Yobbhxr61M6Z8Exo UmQaEa/afHNfEV8728q48HMoPrYTQilvfT4bSkXFxvfPLFLFA2Y4Puh8W9Ycd0wX At0hfOYtaWBctATHpQImboYuwCwbjqp0nbIrM/Ga9vl9xW4B9nfJXKLNvN91zRFN rGbI36FdTkgG/xkafwvvBBRLr8ZezidSCJJTpOfEQG5JOP3obGbScsgnx8zKa4ll StbKOz17L+JTZXr6+0V0fRFoQogPPWv3oHMNYzYl9atbOITEoR9HZWYpkxB72sQ8 2CzHu9/MNKCrcs9EB/7dUwOO0wLUXZ6PhUWuzOzbnRp1KLVIH5wEGW7u0JV1K2n1 JxsCAwEAAaOCApEwggKNMB0GA1UdDgQWBBSBwBNqIMc26gIpvNu1ta0M/jbShjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxNjgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTY4L2dj QVRhaURITnVvQ0tiemJ0Yld0RFA0MjBvWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAI9wywDBAFnrWgwDQYJ KoZIhvcNAQELBQADggEBAF/YoELW0aNrllIE1CoO5I+Y//k1qrx3niLnLIru8P7F gQsp5v8KsMaC034AISIGcRwzjR6b3FCn8mQFDhJShB6TjM9BktVUQK40YYSwjkhT mn4efBRh2hreGETZcXIxZyDgDZGSMauOfHJeaKFm2qZgOn3knAg5HZ0SGUQPTlsS /xLiMFSfb8Yv/bZIMa3sX2SF4qZlfOWBbojb7zKCwsf6TbBy6RStznTGpdE9h76j 371Ch9WEQehxYV3Lfn9vSJFHsUt/R3upmWVO/86ar/TscuxuA0oU4r31Qu96FzHf aIG5pqUcsx8sTAWmkRcTuJSYAuw5kkX0A8hs3Rpz+WY= -----END CERTIFICATE-----Generated at Sat Jul 5 06:32:10 2025 by rpki-client