$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer File: gf7ENcw7DVXepAW2GL1BjhrlZIE.cer (raw, json) Hash identifier: GgvZ3ajLTDduFHzrdvJ2Fi+MdU7onN9gMs74Neq6hDY= Subject key identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:30:49 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 193.115.32.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: Jun 15 01:30:49 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:bb:55:f2:97:bf:55:05:00:61:1b:33:9b: 95:0c:fb:19:b7:b7:f0:a8:c5:3a:8e:fb:39:c7:73: e4:74:2f:41:7e:af:88:af:c9:e5:3f:93:12:e7:a8: 84:bd:f7:54:41:e5:71:fe:11:a0:0f:b1:34:f6:26: e3:2b:95:c9:99:ac:2f:13:65:ae:68:8b:10:c9:a7: f0:b8:5b:cf:0c:ec:0b:2a:9d:e3:94:86:53:62:ec: fa:db:5a:02:ba:ee:82:71:3a:95:51:ab:dd:f1:da: 2a:c3:6e:36:bb:fb:28:91:0d:a8:bf:ae:bb:3c:fc: c3:97:99:4d:80:63:d9:43:bd:8a:82:63:a0:63:f6: 65:f0:b7:35:33:6e:c7:9a:e9:24:b7:01:00:f0:ef: 71:1d:d4:ec:7c:65:08:25:c2:44:9b:4f:bb:7e:30: 42:ca:18:f6:b4:77:ff:b3:de:ba:94:8e:6e:b4:9d: 13:9f:2a:aa:31:6c:1b:df:52:79:01:65:d3:73:17: 54:b7:1f:02:fa:ae:1c:45:3d:86:94:10:f9:bb:de: d3:63:fe:3d:e5:86:c4:c9:2a:a9:cb:5c:34:a5:7a: 2a:65:e3:57:df:ea:8e:d3:6c:32:2e:ee:92:8c:a4: c5:3c:53:13:c5:e1:8e:8f:51:9a:0c:af:7d:a4:19: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.115.32.0/19 Signature Algorithm: sha256WithRSAEncryption 56:37:a3:b5:90:bf:9c:46:61:da:55:b3:db:1b:36:e7:c6:c9: 49:d1:19:f1:ba:00:65:01:76:92:a3:aa:dc:7b:22:0c:c1:ed: a2:35:49:f1:80:09:c2:9f:9a:93:d4:95:ba:80:26:c3:a8:44: 9d:92:f2:d5:e6:d0:02:0b:a4:1f:75:16:c7:62:56:26:35:3a: 9f:04:ff:9d:97:5e:fa:61:59:39:60:55:95:81:9a:eb:7e:d3: c3:2e:7f:a1:3f:46:6b:7c:b3:db:d0:a3:69:3b:35:63:4d:ad: 59:49:fd:da:07:38:3d:9a:8f:c0:3f:36:b3:21:71:db:02:81: 21:15:01:fd:af:2b:a8:5b:87:e3:17:ab:47:29:33:f0:df:c1: b5:c0:d8:05:ee:fb:01:e9:8a:c0:c6:75:d5:57:d7:26:de:ed: 5e:cd:c1:81:28:3f:7f:52:a9:eb:7f:77:04:bc:95:0e:f5:c6: 48:95:bf:f1:4b:89:18:c2:3a:8f:15:26:bc:b3:d5:26:cd:dd: 50:80:2b:b3:12:f5:32:35:72:58:cf:25:c8:59:41:eb:71:04: b2:7e:ba:91:89:3c:b9:d1:cb:c8:e9:c5:a2:70:41:fa:a5:f7: 26:a2:31:d0:a1:b4:02:ab:14:1e:52:ec:37:57:46:3b:7e:13: 0d:cb:8c:d0 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI1MDYxNTAxMzA0OVoXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoODFGRUM0MzVDQzNCMEQ1NURFQTQwNUI2MThCRDQxOEUxQUU1NjQ4 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcBu1Xyl79VBQBhGzOb lQz7Gbe38KjFOo77Ocdz5HQvQX6viK/J5T+TEueohL33VEHlcf4RoA+xNPYm4yuV yZmsLxNlrmiLEMmn8LhbzwzsCyqd45SGU2Ls+ttaArrugnE6lVGr3fHaKsNuNrv7 KJENqL+uuzz8w5eZTYBj2UO9ioJjoGP2ZfC3NTNux5rpJLcBAPDvcR3U7HxlCCXC RJtPu34wQsoY9rR3/7PeupSObrSdE58qqjFsG99SeQFl03MXVLcfAvquHEU9hpQQ +bve02P+PeWGxMkqqctcNKV6KmXjV9/qjtNsMi7ukoykxTxTE8Xhjo9RmgyvfaQZ 0A0CAwEAAaOCAoswggKHMB0GA1UdDgQWBBSB/sQ1zDsNVd6kBbYYvUGOGuVkgTAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwODEvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDgxL2dm N0VOY3c3RFZYZXBBVzJHTDFCamhybFpJRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXBcyAwDQYJKoZIhvcN AQELBQADggEBAFY3o7WQv5xGYdpVs9sbNufGyUnRGfG6AGUBdpKjqtx7IgzB7aI1 SfGACcKfmpPUlbqAJsOoRJ2S8tXm0AILpB91FsdiViY1Op8E/52XXvphWTlgVZWB mut+08Muf6E/Rmt8s9vQo2k7NWNNrVlJ/doHOD2aj8A/NrMhcdsCgSEVAf2vK6hb h+MXq0cpM/DfwbXA2AXu+wHpisDGddVX1ybe7V7NwYEoP39Sqet/dwS8lQ71xkiV v/FLiRjCOo8VJryz1SbN3VCAK7MS9TI1cljPJchZQetxBLJ+upGJPLnRy8jpxaJw Qfql9yaiMdChtAKrFB5S7DdXRjt+Ew3LjNA= -----END CERTIFICATE-----Generated at Fri Jul 4 08:48:16 2025 by rpki-client