$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer File: ivQg8ZIA4Rvkro2RTroqy0KRe24.cer (raw, json) Hash identifier: 7Usws37MwrQ3w2SUZC5biz78DIxLIzVPkJRXLDRLeuk= Subject key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 56C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Aug 2025 01:35:00 +0000 Certificate not after: Sat 15 Aug 2026 01:30:02 +0000 Subordinate resources: IP: 103.40.128.0/22 IP: 202.140.192.0/19 IP: 219.100.132.0/22 IP: 220.152.96.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22209 (0x56c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:35:00 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:3f:61:7a:77:16:e2:83:a2:e3:0f:a1:09: 92:4c:52:9a:b5:de:72:f7:fe:c0:db:b9:39:d4:fb: cf:33:db:f5:b3:7d:8a:24:71:f1:7f:fa:fc:7e:b7: 19:52:f3:82:0f:83:cc:9a:ec:91:6d:9b:b4:ae:b1: 1e:84:a0:a9:95:8f:7e:aa:01:31:59:91:97:46:4d: 1e:9e:ba:f0:94:ee:dd:a6:74:37:47:21:41:11:fe: 8b:86:84:f6:ec:fe:c7:df:88:71:2d:b6:fa:67:3e: 37:57:c7:85:dc:a4:e9:81:3f:d4:5d:d6:22:02:b2: 77:ab:99:5c:c1:ab:fa:8d:50:f3:05:04:60:86:03: 81:5e:af:f4:dc:2b:4b:8f:a4:f4:d7:a0:e2:01:cc: 1e:99:d3:80:10:f1:77:40:2a:3d:70:05:a3:5e:c8: e5:11:88:55:54:67:fb:37:4d:cc:a4:e1:4b:4b:f3: c8:56:4b:c9:4d:44:83:9a:03:fc:7e:2e:b1:4e:8d: d6:4c:9b:c1:3e:52:d1:aa:c5:b2:ff:28:7a:24:f8: f3:bb:b5:4f:a1:7f:35:c0:a7:63:e9:ef:9a:23:50: 2c:28:f4:3d:80:2c:ab:33:e9:ca:92:e2:df:d7:c9: e9:40:d5:96:6c:40:7d:3b:c8:04:ca:d3:98:56:4f: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.128.0/22 202.140.192.0/19 219.100.132.0/22 220.152.96.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:58:f4:d7:2e:b2:6f:6c:49:4a:03:73:5e:9f:ae:b7:0e:db: cc:b3:17:93:8d:b4:e8:eb:42:5d:c9:c3:b9:3d:53:c5:b6:30: 64:61:15:09:db:18:f9:91:12:a0:e5:ef:da:a1:4a:27:6e:31: 52:bb:12:aa:63:f1:40:a3:69:a3:9a:2f:50:5a:11:00:89:13: 57:b3:c5:bf:09:7b:b8:f7:80:bf:a7:cc:9e:dd:a3:88:aa:57: d0:2b:df:10:46:93:07:bd:a7:4d:85:1e:04:97:4e:28:e9:af: b5:a1:38:3d:e1:74:e7:6f:98:23:6e:7e:45:c7:01:02:ef:7a: 98:fe:e8:f5:b0:de:97:38:0e:5c:d1:13:27:bf:84:d3:96:06: 9e:5f:47:af:02:56:46:66:f4:54:79:04:f7:1f:ea:ac:ba:7b: 70:d7:53:a6:90:50:b4:85:48:e3:0a:ea:c1:65:61:46:66:e9: ba:c7:8b:f5:65:20:6f:b6:3b:14:c4:d6:be:75:68:2a:65:e8: 4a:ec:4e:fc:81:79:8c:9b:2d:42:c1:e1:89:50:3c:6d:07:80: ba:05:73:e6:1d:ed:86:45:24:e7:d7:06:fb:77:27:a3:ac:23: 11:3b:f8:75:54:52:1b:b9:f9:68:bb:0c:83:2d:c0:48:5c:b5: d1:b5:53:4a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICVsEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDgxNTAxMzUwMFoXDTI2MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoOEFGNDIwRjE5MjAwRTExQkU0QUU4RDkxNEVCQTJBQ0I0MjkxN0I2 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANKaP2F6dxbig6LjD6EJ kkxSmrXecvf+wNu5OdT7zzPb9bN9iiRx8X/6/H63GVLzgg+DzJrskW2btK6xHoSg qZWPfqoBMVmRl0ZNHp668JTu3aZ0N0chQRH+i4aE9uz+x9+IcS22+mc+N1fHhdyk 6YE/1F3WIgKyd6uZXMGr+o1Q8wUEYIYDgV6v9NwrS4+k9Neg4gHMHpnTgBDxd0Aq PXAFo17I5RGIVVRn+zdNzKThS0vzyFZLyU1Eg5oD/H4usU6N1kybwT5S0arFsv8o eiT487u1T6F/NcCnY+nvmiNQLCj0PYAsqzPpypLi39fJ6UDVlmxAfTvIBMrTmFZP 550CAwEAAaOCApgwggKUMB0GA1UdDgQWBBSK9CDxkgDhG+SujZFOuirLQpF7bjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84ODQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg4NC9pdlFnOFpJ QTRSdmtybzJSVHJvcXkwS1JlMjQubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCZyiAAwQFyozAAwQC22SEAwQE 3JhgMA0GCSqGSIb3DQEBCwUAA4IBAQBeWPTXLrJvbElKA3Nen663DtvMsxeTjbTo 60JdycO5PVPFtjBkYRUJ2xj5kRKg5e/aoUonbjFSuxKqY/FAo2mjmi9QWhEAiRNX s8W/CXu494C/p8ye3aOIqlfQK98QRpMHvadNhR4El04o6a+1oTg94XTnb5gjbn5F xwEC73qY/uj1sN6XOA5c0RMnv4TTlgaeX0evAlZGZvRUeQT3H+qsuntw11OmkFC0 hUjjCurBZWFGZum6x4v1ZSBvtjsUxNa+dWgqZehK7E78gXmMmy1CweGJUDxtB4C6 BXPmHe2GRSTn1wb7dyejrCMRO/h1VFIbuflouwyDLcBIXLXRtVNK -----END CERTIFICATE-----Generated at Sat Aug 23 07:42:39 2025 by rpki-client