$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer File: gf7ENcw7DVXepAW2GL1BjhrlZIE.cer (raw, json) Hash identifier: UwaT7Y4L37pzef+ZCUmEu5Y1ViD2aHiV3816viDm6D4= Subject key identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:39:43 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 193.115.32.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: Oct 15 01:39:43 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:bb:55:f2:97:bf:55:05:00:61:1b:33:9b: 95:0c:fb:19:b7:b7:f0:a8:c5:3a:8e:fb:39:c7:73: e4:74:2f:41:7e:af:88:af:c9:e5:3f:93:12:e7:a8: 84:bd:f7:54:41:e5:71:fe:11:a0:0f:b1:34:f6:26: e3:2b:95:c9:99:ac:2f:13:65:ae:68:8b:10:c9:a7: f0:b8:5b:cf:0c:ec:0b:2a:9d:e3:94:86:53:62:ec: fa:db:5a:02:ba:ee:82:71:3a:95:51:ab:dd:f1:da: 2a:c3:6e:36:bb:fb:28:91:0d:a8:bf:ae:bb:3c:fc: c3:97:99:4d:80:63:d9:43:bd:8a:82:63:a0:63:f6: 65:f0:b7:35:33:6e:c7:9a:e9:24:b7:01:00:f0:ef: 71:1d:d4:ec:7c:65:08:25:c2:44:9b:4f:bb:7e:30: 42:ca:18:f6:b4:77:ff:b3:de:ba:94:8e:6e:b4:9d: 13:9f:2a:aa:31:6c:1b:df:52:79:01:65:d3:73:17: 54:b7:1f:02:fa:ae:1c:45:3d:86:94:10:f9:bb:de: d3:63:fe:3d:e5:86:c4:c9:2a:a9:cb:5c:34:a5:7a: 2a:65:e3:57:df:ea:8e:d3:6c:32:2e:ee:92:8c:a4: c5:3c:53:13:c5:e1:8e:8f:51:9a:0c:af:7d:a4:19: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.115.32.0/19 Signature Algorithm: sha256WithRSAEncryption 62:89:7c:25:76:ac:c3:36:49:d9:3f:67:f2:2c:73:9b:c5:41: ed:80:50:57:88:77:2f:68:84:81:d6:1c:f5:f8:74:a1:5e:76: bb:52:ce:18:23:dd:32:c4:d7:91:e3:6e:1f:4f:8d:ff:da:25: 55:60:21:9e:25:ed:13:17:7c:01:af:98:81:4c:0a:9b:0e:15: bc:63:2b:74:c6:d5:33:f8:c5:64:9d:63:1d:ca:05:42:ce:d6: 67:c3:21:14:40:6a:14:4a:04:e5:f5:2a:d5:01:9c:ac:c6:3b: 83:a8:23:5b:de:75:7e:af:4a:6e:2f:7c:bf:f7:76:ff:c8:a9: f3:f4:91:61:d6:51:25:b5:2c:75:66:77:c9:24:25:b5:9d:1c: e0:91:55:07:f1:47:75:01:99:5b:93:ed:ec:ed:6e:93:16:1e: 8a:f1:86:dd:b6:bb:6e:c4:79:b8:34:1c:6c:40:c7:f1:78:90: d1:d5:e8:ab:2c:67:24:3d:92:3e:c8:df:4c:3d:ed:bc:90:21: 71:cf:bc:c6:e7:83:5a:0c:3d:0e:e2:c9:02:74:e1:77:d7:8e: 3d:b5:f6:b7:1a:a5:af:10:85:63:65:99:81:8c:38:f1:1e:2f: b9:13:69:5d:13:a0:a0:17:88:c1:39:22:08:a6:4c:d9:53:5a: a3:0d:b8:ce -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI1MTAxNTAxMzk0M1oXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoODFGRUM0MzVDQzNCMEQ1NURFQTQwNUI2MThCRDQxOEUxQUU1NjQ4 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcBu1Xyl79VBQBhGzOb lQz7Gbe38KjFOo77Ocdz5HQvQX6viK/J5T+TEueohL33VEHlcf4RoA+xNPYm4yuV yZmsLxNlrmiLEMmn8LhbzwzsCyqd45SGU2Ls+ttaArrugnE6lVGr3fHaKsNuNrv7 KJENqL+uuzz8w5eZTYBj2UO9ioJjoGP2ZfC3NTNux5rpJLcBAPDvcR3U7HxlCCXC RJtPu34wQsoY9rR3/7PeupSObrSdE58qqjFsG99SeQFl03MXVLcfAvquHEU9hpQQ +bve02P+PeWGxMkqqctcNKV6KmXjV9/qjtNsMi7ukoykxTxTE8Xhjo9RmgyvfaQZ 0A0CAwEAAaOCAoswggKHMB0GA1UdDgQWBBSB/sQ1zDsNVd6kBbYYvUGOGuVkgTAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwODEvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDgxL2dm N0VOY3c3RFZYZXBBVzJHTDFCamhybFpJRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXBcyAwDQYJKoZIhvcN AQELBQADggEBAGKJfCV2rMM2Sdk/Z/Isc5vFQe2AUFeIdy9ohIHWHPX4dKFedrtS zhgj3TLE15Hjbh9Pjf/aJVVgIZ4l7RMXfAGvmIFMCpsOFbxjK3TG1TP4xWSdYx3K BULO1mfDIRRAahRKBOX1KtUBnKzGO4OoI1vedX6vSm4vfL/3dv/IqfP0kWHWUSW1 LHVmd8kkJbWdHOCRVQfxR3UBmVuT7eztbpMWHorxht22u27Eebg0HGxAx/F4kNHV 6KssZyQ9kj7I30w97byQIXHPvMbng1oMPQ7iyQJ04XfXjj219rcapa8QhWNlmYGM OPEeL7kTaV0ToKAXiME5IgimTNlTWqMNuM4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:43:28 2025 by rpki-client