$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer File: m64sAxhUwbsRPKNlEoptSIwamcM.cer (raw, json) Hash identifier: dIfSMIIvU3RCQ0K8m51nQRFBt8aYYYaxy81bj2PbfEA= Subject key identifier: 9B:AE:2C:03:18:54:C1:BB:11:3C:A3:65:12:8A:6D:48:8C:1A:99:C3 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4BA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:42:18 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 2406:d200::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19363 (0x4ba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:42:18 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=9BAE2C031854C1BB113CA365128A6D488C1A99C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:67:d0:17:49:c0:f3:f1:d8:cf:f8:9e:1b: f0:33:90:99:44:5e:de:45:5d:31:eb:37:17:50:75: ac:3d:c2:b4:16:9c:f3:c8:93:82:5e:2d:2b:7c:f4: ab:fa:13:ea:63:d1:2c:71:e2:8a:fb:32:7b:c1:8d: b3:dc:8a:c2:c7:85:6f:29:ee:e2:8e:a3:8c:18:b7: 9d:27:64:5b:fb:d6:51:e2:11:39:db:91:ca:72:f1: 26:2c:90:d9:d9:e9:8c:ba:5e:2f:42:e8:74:d4:86: 0c:75:a1:24:f0:14:37:10:87:fd:7b:9b:7e:b5:12: 2c:0a:ea:fe:8e:24:2c:a8:e2:e1:60:c6:81:13:27: 14:dd:e9:f5:87:f3:72:ed:07:1a:7d:b7:74:8d:58: f3:af:69:5d:8f:59:7f:4f:28:16:73:ef:2f:24:a7: 5d:bb:fb:b4:6c:f8:c2:23:a5:6e:f9:80:f9:c6:c4: d0:41:64:94:c2:7b:a4:67:69:41:5b:b1:03:39:8d: ab:94:73:fb:06:c8:de:b2:61:e9:c8:b3:0f:e4:a2: d7:1d:5f:f1:07:de:16:0d:34:37:34:21:11:a7:c2: 1f:2f:80:61:b3:07:97:70:6e:da:84:2d:74:1f:1b: 6e:7e:11:2c:92:78:1b:98:c9:96:2a:9e:ca:b9:9a: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AE:2C:03:18:54:C1:BB:11:3C:A3:65:12:8A:6D:48:8C:1A:99:C3 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:d200::/32 Signature Algorithm: sha256WithRSAEncryption 8c:09:e7:b9:16:29:15:d4:a2:e3:bd:72:ff:1e:f6:14:ef:e5: ca:0f:cd:fd:4b:da:c5:4a:e3:12:62:4a:e9:99:de:ae:9b:d3: fe:4b:65:6d:75:54:6f:42:62:04:0e:fd:94:43:bd:90:4e:4a: f4:4e:20:78:0e:ae:85:e6:3f:73:a8:55:7e:42:c3:59:8e:61: 9c:cd:de:c9:d2:ce:49:b2:12:90:e3:40:8b:62:ff:a6:00:8a: 40:a4:44:e5:63:a5:f1:ea:3a:1f:3a:ae:ca:e3:34:d1:7a:44: af:2e:03:81:3b:f4:f3:16:1e:48:59:59:0f:fb:78:cb:bc:61: b5:d9:7e:5b:7b:36:4b:2e:76:28:39:a2:42:29:cc:fd:21:62: d4:7a:0d:d9:56:b4:8c:72:9b:94:9f:00:89:c4:9b:74:2e:3d: 17:42:e0:3a:92:3b:e8:34:e5:26:d8:fb:10:a9:76:d2:17:ec: 33:1e:4c:51:75:79:d4:d2:20:9f:dc:04:52:74:d1:1d:7b:e9: be:1c:b1:9b:35:77:b0:5e:71:75:00:12:ef:40:43:dd:58:c5: e1:34:57:f9:45:a2:8e:46:c5:9c:69:6a:33:e5:76:f2:19:2e: 1f:8e:66:eb:d8:e2:c9:0a:39:34:14:17:f4:ba:36:2a:d3:29: d3:40:53:af -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICS6MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUxNTAxNDIxOFoXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoOUJBRTJDMDMxODU0QzFCQjExM0NBMzY1MTI4QTZENDg4QzFBOTlD MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMldZ9AXScDz8djP+J4b 8DOQmURe3kVdMes3F1B1rD3CtBac88iTgl4tK3z0q/oT6mPRLHHiivsye8GNs9yK wseFbynu4o6jjBi3nSdkW/vWUeIROduRynLxJiyQ2dnpjLpeL0LodNSGDHWhJPAU NxCH/XubfrUSLArq/o4kLKji4WDGgRMnFN3p9Yfzcu0HGn23dI1Y869pXY9Zf08o FnPvLySnXbv7tGz4wiOlbvmA+cbE0EFklMJ7pGdpQVuxAzmNq5Rz+wbI3rJh6ciz D+Si1x1f8QfeFg00NzQhEafCHy+AYbMHl3Bu2oQtdB8bbn4RLJJ4G5jJliqeyrma 1DkCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSbriwDGFTBuxE8o2USim1IjBqZwzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxNzQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTc0L202 NHNBeGhVd2JzUlBLTmxFb3B0U0l3YW1jTS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBtIAMA0GCSqGSIb3 DQEBCwUAA4IBAQCMCee5FikV1KLjvXL/HvYU7+XKD839S9rFSuMSYkrpmd6um9P+ S2VtdVRvQmIEDv2UQ72QTkr0TiB4Dq6F5j9zqFV+QsNZjmGczd7J0s5JshKQ40CL Yv+mAIpApETlY6Xx6jofOq7K4zTRekSvLgOBO/TzFh5IWVkP+3jLvGG12X5bezZL LnYoOaJCKcz9IWLUeg3ZVrSMcpuUnwCJxJt0Lj0XQuA6kjvoNOUm2PsQqXbSF+wz HkxRdXnU0iCf3ARSdNEde+m+HLGbNXewXnF1ABLvQEPdWMXhNFf5RaKORsWcaWoz 5XbyGS4fjmbr2OLJCjk0FBf0ujYq0ynTQFOv -----END CERTIFICATE-----Generated at Sun May 18 17:54:23 2025 by rpki-client