$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer File: nbB2TG38Hj32vVgOpplKHnCY9So.cer (raw, json) Hash identifier: yA/65roJEVWUzTEsp0h6ShRDJ+FmFTWlYzpbJbu5i4E= Subject key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 56A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Aug 2025 01:34:12 +0000 Certificate not after: Sat 15 Aug 2026 01:30:02 +0000 Subordinate resources: IP: 115.166.160.0 -- 115.166.207.255 IP: 122.128.112.0/21 IP: 203.160.16.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22180 (0x56a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:34:12 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:bc:aa:b9:e2:b9:f4:47:1d:96:e1:53:20: fe:d8:98:18:37:1a:5e:3a:3c:7c:67:4e:3a:db:e1: de:78:f7:7d:8e:30:90:4c:0b:48:b2:16:b2:a7:5e: 04:52:cd:0f:78:e6:f4:bd:f7:b4:a1:8a:1c:74:dc: c9:3c:3a:de:b7:29:95:05:6f:53:4e:44:eb:f9:c7: 69:ab:d3:60:c3:5c:74:d5:b8:16:5e:c8:45:2d:9e: 96:42:73:93:62:25:cd:11:6a:6e:25:86:96:0b:a3: ab:e6:20:34:91:a9:b2:b1:87:20:d4:44:d2:9b:7d: e2:5c:aa:21:50:6a:6a:7c:ac:4f:c2:1a:b7:b2:85: 2c:af:96:00:50:9e:b6:5f:4c:f6:8b:b7:8b:9b:9e: 18:08:25:bf:5d:76:c0:5c:47:67:b3:ff:6a:ac:54: 68:96:73:c1:7b:ad:ed:61:45:2f:91:e9:34:a6:8e: 13:43:55:c3:73:17:75:70:40:4c:45:8b:9b:1d:d6: 76:ed:b3:34:2d:61:cd:9b:6c:fb:b7:ff:1b:23:de: 79:ce:f7:7d:99:b0:45:dd:6f:89:06:72:c8:12:61: b3:0a:aa:57:09:62:47:15:fd:b8:3a:27:30:73:d6: 3b:0b:a2:92:5a:be:c2:63:9d:c8:1d:d0:ba:c9:a6: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.166.160.0-115.166.207.255 122.128.112.0/21 203.160.16.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:a5:7f:c3:4f:93:41:52:ad:c9:66:3a:6e:f9:53:16:20:4f: d6:a1:e2:a3:09:82:85:f9:e2:fb:91:d6:bc:73:27:0a:f8:76: 4d:42:1e:20:d3:83:bd:1f:29:bc:e7:05:0b:5a:dd:6e:14:63: 91:d4:ec:56:70:5c:2a:97:e0:ae:6b:0e:38:90:eb:eb:4b:f6: bb:27:64:c8:7e:0c:36:78:a3:09:6c:56:b1:cb:99:a9:ec:dc: 1d:6a:01:e5:08:ca:9b:da:03:0d:12:b0:02:e4:4b:89:7f:cb: 79:93:56:23:d8:2c:af:a2:66:b0:45:eb:cb:73:9c:fe:cf:c8: 9f:89:14:fc:ff:48:26:19:08:a6:8a:68:62:51:c7:20:8f:74: ea:27:5a:94:14:cc:31:91:ad:66:51:76:e9:16:ab:75:86:ba: de:5b:a4:4d:42:c7:58:b8:a6:e1:99:53:67:13:c3:be:b9:75: dc:2c:91:fb:b1:f7:5a:d1:49:d3:39:9c:12:c7:46:c8:a3:e4: c6:07:ed:73:0d:da:69:b1:e6:56:93:71:73:09:f4:9a:e7:12: 2e:c7:43:d3:5e:69:f9:fc:b6:67:ce:40:8d:c4:9e:8b:9b:da: 20:38:f6:f9:e7:f8:09:69:de:34:16:8d:94:5b:66:29:55:26: b1:bd:03:6d -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICVqQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDgxNTAxMzQxMloXDTI2MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoOURCMDc2NEM2REZDMUUzREY2QkQ1ODBFQTY5OTRBMUU3MDk4RjUy QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5hvKq54rn0Rx2W4VMg /tiYGDcaXjo8fGdOOtvh3nj3fY4wkEwLSLIWsqdeBFLND3jm9L33tKGKHHTcyTw6 3rcplQVvU05E6/nHaavTYMNcdNW4Fl7IRS2elkJzk2IlzRFqbiWGlgujq+YgNJGp srGHINRE0pt94lyqIVBqanysT8Iat7KFLK+WAFCetl9M9ou3i5ueGAglv112wFxH Z7P/aqxUaJZzwXut7WFFL5HpNKaOE0NVw3MXdXBATEWLmx3Wdu2zNC1hzZts+7f/ GyPeec73fZmwRd1viQZyyBJhswqqVwliRxX9uDonMHPWOwuiklq+wmOdyB3Qusmm M+8CAwEAAaOCAp8wggKbMB0GA1UdDgQWBBSdsHZMbfwePfa9WA6mmUoecJj1KjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwNjMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDYzL25i QjJURzM4SGozMnZWZ09wcGxLSG5DWTlTby5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBowDAMEBXOmoAMEBHOmwAME A3qAcAMEBMugEDANBgkqhkiG9w0BAQsFAAOCAQEAn6V/w0+TQVKtyWY6bvlTFiBP 1qHiowmChfni+5HWvHMnCvh2TUIeINODvR8pvOcFC1rdbhRjkdTsVnBcKpfgrmsO OJDr60v2uydkyH4MNnijCWxWscuZqezcHWoB5QjKm9oDDRKwAuRLiX/LeZNWI9gs r6JmsEXry3Oc/s/In4kU/P9IJhkIpopoYlHHII906idalBTMMZGtZlF26RardYa6 3lukTULHWLim4ZlTZxPDvrl13CyR+7H3WtFJ0zmcEsdGyKPkxgftcw3aabHmVpNx cwn0mucSLsdD015p+fy2Z85AjcSei5vaIDj2+ef4CWneNBaNlFtmKVUmsb0DbQ== -----END CERTIFICATE-----Generated at Sat Aug 23 09:45:44 2025 by rpki-client