$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/mgPVwv6gP2gol_0jcVx_H9US0fE.cer File: mgPVwv6gP2gol_0jcVx_H9US0fE.cer (raw, json) Hash identifier: oFstmd5ngkBEs4YCR5vhaI2FhSMLj7WhsGq7Zu16MiY= Subject key identifier: 9A:03:D5:C2:FE:A0:3F:68:28:97:FD:23:71:5C:7F:1F:D5:12:D1:F1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Aug 2025 01:30:04 +0000 Certificate not after: Sat 15 Aug 2026 01:30:02 +0000 Subordinate resources: IP: 103.177.65.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22057 (0x5629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:30:04 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=9A03D5C2FEA03F682897FD23715C7F1FD512D1F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:5e:1c:52:75:0d:a8:0f:7f:e8:2f:1c:0e: cf:29:db:ec:be:61:99:d2:77:4e:fe:db:9c:e9:b6: 12:e1:6c:4f:36:f5:ce:a6:96:7d:a4:7e:f2:fb:bf: e4:c6:a1:c9:03:cc:75:09:92:1b:4a:e3:f8:77:26: 58:ea:8f:ae:5e:70:80:df:e5:9d:bf:13:55:49:ad: e8:ac:ce:6a:b6:41:84:e6:5e:23:67:f2:ac:f5:aa: 38:1d:ac:63:e0:67:85:fc:e0:f6:e9:38:5c:71:be: 3f:06:7d:fd:1b:79:aa:6b:6e:4a:c0:c1:1f:dd:36: 9a:ce:bb:59:0b:26:85:16:a2:d9:7d:9a:e9:08:c9: 29:03:fa:1a:64:61:6b:66:34:0c:49:c4:c6:af:19: a9:01:a6:f3:4e:2a:f3:83:bc:bd:8f:34:af:d5:66: 66:33:f7:ed:d4:1b:52:19:dd:7b:8e:c7:75:b5:81: ce:05:ad:cb:c3:74:3a:eb:43:eb:b6:67:47:b8:20: ae:fd:f6:1b:dd:f0:18:de:67:13:1d:ff:85:f9:99: 78:de:90:a0:b1:55:d0:f8:5a:1a:14:66:7e:ce:c6: 18:e9:54:5b:56:27:86:0f:c3:c9:2c:76:f4:3c:6b: 72:48:ab:d8:36:de:b9:31:7e:c4:b7:8f:5a:07:25: 51:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:03:D5:C2:FE:A0:3F:68:28:97:FD:23:71:5C:7F:1F:D5:12:D1:F1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.65.0/24 Signature Algorithm: sha256WithRSAEncryption a5:21:9f:cf:3e:66:50:d1:77:4e:61:d1:62:0a:75:f9:da:fb: 21:b6:33:f5:06:13:e6:8b:2a:ac:93:25:2d:9e:fb:88:7b:07: c7:ef:b4:72:c9:ba:0f:ac:7b:fd:7f:f0:ad:e8:2e:0c:56:1f: 1d:ed:88:62:94:0d:e2:49:03:0a:2b:99:fd:8a:d3:6b:62:72: 43:c1:07:27:a8:fd:9d:59:5a:00:86:a5:28:0f:0f:37:81:64: f7:c2:7a:37:a4:9f:19:30:3a:61:fa:f0:2e:39:8f:4a:81:8f: 64:5d:6c:89:50:08:bd:cc:35:7e:ae:f5:43:9d:07:9a:8e:94: 81:fb:18:11:4e:e5:c8:70:5f:52:0e:ed:93:b3:56:6b:44:7f: bc:62:f9:cc:ed:c0:4a:d0:f1:93:01:40:ef:08:a3:3b:0b:27: a1:f5:ff:95:46:e8:13:ae:8f:ce:4a:ad:5c:e4:3b:19:b8:dc: d5:f2:3b:73:3b:9e:b2:f7:03:99:ab:25:78:b2:29:1e:e4:65: b0:39:5d:a5:fb:20:a7:61:77:3f:3c:2e:d0:e7:50:0b:05:be: 9f:3a:2a:c5:5e:1f:b4:39:88:cb:c5:56:66:3c:82:f1:d8:4a: cb:a6:59:f8:69:72:3e:32:7c:2f:06:3d:dc:9b:f9:be:d3:18: b1:a9:78:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICVikwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDgxNTAxMzAwNFoXDTI2MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoOUEwM0Q1QzJGRUEwM0Y2ODI4OTdGRDIzNzE1QzdGMUZENTEyRDFG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKG9XhxSdQ2oD3/oLxwO zynb7L5hmdJ3Tv7bnOm2EuFsTzb1zqaWfaR+8vu/5MahyQPMdQmSG0rj+HcmWOqP rl5wgN/lnb8TVUmt6KzOarZBhOZeI2fyrPWqOB2sY+Bnhfzg9uk4XHG+PwZ9/Rt5 qmtuSsDBH902ms67WQsmhRai2X2a6QjJKQP6GmRha2Y0DEnExq8ZqQGm804q84O8 vY80r9VmZjP37dQbUhnde47HdbWBzgWty8N0OutD67ZnR7ggrv32G93wGN5nEx3/ hfmZeN6QoLFV0PhaGhRmfs7GGOlUW1Ynhg/DySx29Dxrckir2DbeuTF+xLePWgcl UZcCAwEAAaOCAokwggKFMB0GA1UdDgQWBBSaA9XC/qA/aCiX/SNxXH8f1RLR8TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvNTUxMy8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTUxMy9tZ1BW d3Y2Z1AyZ29sXzBqY1Z4X0g5VVMwZkUubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7FBMA0GCSqGSIb3DQEB CwUAA4IBAQClIZ/PPmZQ0XdOYdFiCnX52vshtjP1BhPmiyqskyUtnvuIewfH77Ry yboPrHv9f/Ct6C4MVh8d7YhilA3iSQMKK5n9itNrYnJDwQcnqP2dWVoAhqUoDw83 gWT3wno3pJ8ZMDph+vAuOY9KgY9kXWyJUAi9zDV+rvVDnQeajpSB+xgRTuXIcF9S Du2Ts1ZrRH+8YvnM7cBK0PGTAUDvCKM7Cyeh9f+VRugTro/OSq1c5DsZuNzV8jtz O56y9wOZqyV4sike5GWwOV2l+yCnYXc/PC7Q51ALBb6fOirFXh+0OYjLxVZmPILx 2ErLpln4aXI+MnwvBj3cm/m+0xixqXhr -----END CERTIFICATE-----Generated at Sat Aug 23 07:37:43 2025 by rpki-client