$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer File: nVpUDBIv0McM5REXAET_ZYDXYxs.cer (raw, json) Hash identifier: KqFpw12EVHJGhVySSbgno514m3bmwprNhVdj0CGmyXU= Subject key identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:43:03 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 2404:c700::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21073 (0x5251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:43:03 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=9D5A540C122FD0C70CE511170044FF6580D7631B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:7b:90:b4:f9:ee:d8:08:d8:90:27:f3:d7: 28:e1:88:62:06:c6:df:3f:dd:f6:61:07:f8:5f:77: b2:ab:60:08:88:aa:17:e1:f7:25:63:ee:ab:35:83: c7:27:5c:58:5b:91:a6:cc:9f:c5:80:10:dc:df:b4: 7e:43:e4:e2:52:fb:14:3f:11:34:39:f5:c4:d1:bc: 62:2f:2a:c9:4b:d8:33:b8:7d:c6:a6:b5:4d:7f:a4: 0b:de:8f:c2:d8:46:04:3a:26:81:a8:8d:1e:11:3d: 22:51:f8:57:15:72:f8:6a:c7:a8:fa:ba:e9:a8:69: ed:12:7c:19:21:f3:bd:9c:34:74:de:e5:31:5d:55: 5b:bb:36:8a:c7:49:b1:da:07:8b:70:89:0e:ca:bc: 9e:2d:8d:ef:f6:8f:b0:47:1c:b1:6e:51:ec:7e:9d: c1:82:51:bd:0c:40:24:b9:bb:fb:2d:21:de:7c:c8: b7:8d:dc:2c:2d:cb:59:2d:7f:02:23:1d:04:59:f5: 65:c6:0a:ac:c6:2c:59:3b:41:cc:bf:e3:c7:d5:27: e7:db:07:8a:8b:b5:ca:dd:47:74:b0:a1:49:99:c0: 8c:0b:f1:4b:19:41:31:82:5c:c2:71:db:61:6f:8e: 06:ef:b8:75:7c:0f:65:73:59:0b:4c:55:6f:e4:f7: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:c700::/32 Signature Algorithm: sha256WithRSAEncryption 50:ef:6d:93:40:08:7d:aa:e3:dc:ea:40:f6:08:c6:b6:45:7c: 5d:4e:de:f7:8c:ef:cf:5a:47:cc:82:d0:af:f0:3e:8f:d2:ec: ca:e6:54:0e:03:d4:35:17:8f:c9:de:65:40:ac:c1:8c:38:2d: 0c:05:72:f0:d7:1c:6a:2c:a1:99:d4:7c:b8:7b:d6:23:70:b4: 7a:bf:84:b2:e0:e1:87:b4:ac:90:a2:49:bf:8d:ca:31:00:2d: e8:73:90:c4:42:f4:dc:25:d4:d5:32:62:f4:6d:4b:12:04:4e: fe:ff:43:71:48:ad:6b:ac:ee:d5:cc:e3:8f:87:61:6b:0b:14: 77:19:12:5e:1b:f1:92:6e:c9:3e:c3:66:41:b1:dd:ba:c3:4b: c8:34:0c:9b:3f:c4:49:d5:61:62:5f:e3:64:f0:37:c1:81:4d: 89:35:38:b2:32:67:b6:d9:ec:80:fc:d2:21:f8:86:5a:17:4c: f2:41:cc:b9:5e:61:25:8f:00:2f:09:a3:b2:cc:d2:6a:0e:8e: a7:f1:e0:45:07:78:42:50:8f:cd:11:e6:63:dc:9a:e8:e3:60: e9:2e:fe:52:76:b0:73:95:a2:8e:43:cd:7d:95:47:22:0b:12: 87:1f:99:98:33:fe:f3:6d:e6:4f:e6:c7:0a:ca:cb:37:f9:b5: 17:4d:6b:84 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICUlEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDYxNTAxNDMwM1oXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoOUQ1QTU0MEMxMjJGRDBDNzBDRTUxMTE3MDA0NEZGNjU4MEQ3NjMx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIJe5C0+e7YCNiQJ/PX KOGIYgbG3z/d9mEH+F93sqtgCIiqF+H3JWPuqzWDxydcWFuRpsyfxYAQ3N+0fkPk 4lL7FD8RNDn1xNG8Yi8qyUvYM7h9xqa1TX+kC96PwthGBDomgaiNHhE9IlH4VxVy +GrHqPq66ahp7RJ8GSHzvZw0dN7lMV1VW7s2isdJsdoHi3CJDsq8ni2N7/aPsEcc sW5R7H6dwYJRvQxAJLm7+y0h3nzIt43cLC3LWS1/AiMdBFn1ZcYKrMYsWTtBzL/j x9Un59sHiou1yt1HdLChSZnAjAvxSxlBMYJcwnHbYW+OBu+4dXwPZXNZC0xVb+T3 QOkCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSdWlQMEi/QxwzlERcARP9lgNdjGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjM2L25W cFVEQkl2ME1jTTVSRVhBRVRfWllEWFl4cy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBMcAMA0GCSqGSIb3 DQEBCwUAA4IBAQBQ722TQAh9quPc6kD2CMa2RXxdTt73jO/PWkfMgtCv8D6P0uzK 5lQOA9Q1F4/J3mVArMGMOC0MBXLw1xxqLKGZ1Hy4e9YjcLR6v4Sy4OGHtKyQokm/ jcoxAC3oc5DEQvTcJdTVMmL0bUsSBE7+/0NxSK1rrO7VzOOPh2FrCxR3GRJeG/GS bsk+w2ZBsd26w0vINAybP8RJ1WFiX+Nk8DfBgU2JNTiyMme22eyA/NIh+IZaF0zy Qcy5XmEljwAvCaOyzNJqDo6n8eBFB3hCUI/NEeZj3Jro42DpLv5SdrBzlaKOQ819 lUciCxKHH5mYM/7zbeZP5scKyss3+bUXTWuE -----END CERTIFICATE-----Generated at Fri Jul 4 09:37:17 2025 by rpki-client