$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer File: nVpUDBIv0McM5REXAET_ZYDXYxs.cer (raw, json) Hash identifier: +6uoMNW/Ez2kR2lUVUgCFTPVX40Ut0Q8x4cDsgWdXvk= Subject key identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4BC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:43:14 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 2404:c700::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19399 (0x4bc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:43:14 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=9D5A540C122FD0C70CE511170044FF6580D7631B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:7b:90:b4:f9:ee:d8:08:d8:90:27:f3:d7: 28:e1:88:62:06:c6:df:3f:dd:f6:61:07:f8:5f:77: b2:ab:60:08:88:aa:17:e1:f7:25:63:ee:ab:35:83: c7:27:5c:58:5b:91:a6:cc:9f:c5:80:10:dc:df:b4: 7e:43:e4:e2:52:fb:14:3f:11:34:39:f5:c4:d1:bc: 62:2f:2a:c9:4b:d8:33:b8:7d:c6:a6:b5:4d:7f:a4: 0b:de:8f:c2:d8:46:04:3a:26:81:a8:8d:1e:11:3d: 22:51:f8:57:15:72:f8:6a:c7:a8:fa:ba:e9:a8:69: ed:12:7c:19:21:f3:bd:9c:34:74:de:e5:31:5d:55: 5b:bb:36:8a:c7:49:b1:da:07:8b:70:89:0e:ca:bc: 9e:2d:8d:ef:f6:8f:b0:47:1c:b1:6e:51:ec:7e:9d: c1:82:51:bd:0c:40:24:b9:bb:fb:2d:21:de:7c:c8: b7:8d:dc:2c:2d:cb:59:2d:7f:02:23:1d:04:59:f5: 65:c6:0a:ac:c6:2c:59:3b:41:cc:bf:e3:c7:d5:27: e7:db:07:8a:8b:b5:ca:dd:47:74:b0:a1:49:99:c0: 8c:0b:f1:4b:19:41:31:82:5c:c2:71:db:61:6f:8e: 06:ef:b8:75:7c:0f:65:73:59:0b:4c:55:6f:e4:f7: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:c700::/32 Signature Algorithm: sha256WithRSAEncryption a4:13:25:72:1e:ca:30:03:21:44:a0:97:5f:da:a7:0d:66:15: 0b:69:ee:0a:b6:b5:1e:92:bd:51:2e:94:9c:5b:fd:47:85:f7: d4:a0:ef:09:40:d9:2c:60:77:fd:03:fd:d6:29:4f:b0:c5:1a: 9f:7a:70:b0:90:37:94:e9:81:b5:c2:d6:84:45:b9:5b:d0:4e: e0:aa:3a:3c:fc:94:5e:e6:61:c1:16:ac:ef:f0:3a:8d:8b:43: 00:39:92:5d:b3:f2:73:d8:70:ea:3a:19:c4:21:90:95:9c:31: a9:52:36:b1:a5:d5:9d:90:a3:2f:a4:27:44:17:01:90:42:bd: 5a:bc:25:30:e9:f3:2f:86:4c:79:c6:ca:2e:ec:f3:00:23:97: f6:10:02:22:56:b4:9c:ee:c8:fd:23:2b:20:f4:a2:3f:93:dc: 89:5c:d7:d2:77:f1:61:98:55:ba:5c:4d:c1:54:09:ba:1d:7f: 12:37:9f:b0:79:c2:0b:32:b8:3c:5b:80:d3:6c:20:8a:5d:85: 80:05:9d:0a:ae:13:ef:f3:96:2c:91:b6:07:ea:04:a0:52:4a: fd:fd:da:9c:2f:c2:95:9c:81:80:a6:96:2f:0c:c8:26:83:95: cd:b1:e8:d2:8b:a3:f5:14:9b:5d:5f:ae:3e:c3:27:1f:e0:1b: 04:24:84:9d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICS8cwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUxNTAxNDMxNFoXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoOUQ1QTU0MEMxMjJGRDBDNzBDRTUxMTE3MDA0NEZGNjU4MEQ3NjMx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIJe5C0+e7YCNiQJ/PX KOGIYgbG3z/d9mEH+F93sqtgCIiqF+H3JWPuqzWDxydcWFuRpsyfxYAQ3N+0fkPk 4lL7FD8RNDn1xNG8Yi8qyUvYM7h9xqa1TX+kC96PwthGBDomgaiNHhE9IlH4VxVy +GrHqPq66ahp7RJ8GSHzvZw0dN7lMV1VW7s2isdJsdoHi3CJDsq8ni2N7/aPsEcc sW5R7H6dwYJRvQxAJLm7+y0h3nzIt43cLC3LWS1/AiMdBFn1ZcYKrMYsWTtBzL/j x9Un59sHiou1yt1HdLChSZnAjAvxSxlBMYJcwnHbYW+OBu+4dXwPZXNZC0xVb+T3 QOkCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSdWlQMEi/QxwzlERcARP9lgNdjGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjM2L25W cFVEQkl2ME1jTTVSRVhBRVRfWllEWFl4cy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBMcAMA0GCSqGSIb3 DQEBCwUAA4IBAQCkEyVyHsowAyFEoJdf2qcNZhULae4KtrUekr1RLpScW/1HhffU oO8JQNksYHf9A/3WKU+wxRqfenCwkDeU6YG1wtaERblb0E7gqjo8/JRe5mHBFqzv 8DqNi0MAOZJds/Jz2HDqOhnEIZCVnDGpUjaxpdWdkKMvpCdEFwGQQr1avCUw6fMv hkx5xsou7PMAI5f2EAIiVrSc7sj9Iysg9KI/k9yJXNfSd/FhmFW6XE3BVAm6HX8S N5+wecILMrg8W4DTbCCKXYWABZ0KrhPv85YskbYH6gSgUkr9/dqcL8KVnIGAppYv DMgmg5XNsejSi6P1FJtdX64+wycf4BsEJISd -----END CERTIFICATE-----Generated at Sun May 18 23:18:12 2025 by rpki-client