$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer File: q2yEZLBStyD10sACDmQmtsftGGs.cer (raw, json) Hash identifier: XUU4vH5mNjRToX4J9MEPBo23zYdMPTA3MLqYYIlHT1U= Subject key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:40:32 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 2402:c840::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19325 (0x4b7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:40:32 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:3f:74:49:c7:35:ae:fe:42:62:bf:12:cf: 3c:88:59:43:85:96:f3:e2:a7:7c:b4:7c:d4:9b:a8: ff:3b:7b:eb:e5:dc:69:3b:ba:b5:d7:6c:df:48:bb: 27:52:ac:b6:b4:66:a6:10:56:c7:26:0f:b4:f2:24: 1c:ce:98:b4:3f:b3:44:01:fb:d2:88:16:73:2f:86: 73:53:b6:e9:02:ae:54:b7:02:44:a0:1f:f0:c2:47: 17:51:31:41:28:87:02:f7:db:0c:be:1c:57:77:fe: 72:8a:c1:64:45:35:48:41:ed:af:4f:bd:19:c2:30: b2:3a:a1:76:fd:ca:0e:2b:37:5a:8c:d1:74:26:5b: 66:4b:bf:1a:2e:ad:04:d6:f6:35:30:fd:9f:81:44: 4d:2b:00:65:33:88:7b:f6:62:9c:ac:0f:cd:7d:5d: 88:5d:49:ac:90:f2:a8:71:da:35:5c:9b:5f:62:ef: 1f:f2:1b:48:74:e1:53:58:56:a4:fe:e4:ac:e1:f2: 88:c8:2d:ab:1d:42:9c:c0:be:89:4e:11:5a:26:f4: 86:d4:45:28:f7:01:1c:e5:0e:a0:db:77:de:bc:6f: 8a:2f:77:4d:15:88:6f:a2:34:19:e8:93:6c:1d:09: ab:47:33:2e:e4:29:3c:75:b1:53:e4:80:92:b1:94: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:c840::/32 Signature Algorithm: sha256WithRSAEncryption 78:e8:35:6b:5f:12:90:cd:cd:c3:f9:e9:09:72:6a:2c:47:e7: 15:54:7d:39:fb:b7:2d:b7:32:43:5e:f7:16:a1:47:fb:a3:4b: 88:98:29:7d:bb:5a:86:0e:82:db:03:2d:2d:89:eb:ed:7b:d8: 52:24:a4:b6:7a:92:25:9b:8a:68:bf:9a:86:ef:88:05:52:e5: b9:04:0e:7a:a1:b7:4b:a0:1d:da:54:62:ff:5d:28:2c:71:c6: 08:fe:28:7f:19:71:b6:5a:5a:8c:de:b1:98:c3:90:68:aa:77: b7:3e:76:da:61:23:15:b2:3e:9e:a5:c8:27:13:13:ab:ae:40: 89:9d:51:4e:48:ce:38:38:27:60:9b:9a:5c:61:b4:6f:cb:1c: 62:b0:e0:6d:dc:61:2a:36:ad:a5:88:73:19:58:82:fa:ec:3b: 2f:62:61:44:e7:8a:6b:fd:1b:b7:f0:bd:92:9a:42:eb:67:1f: 42:9b:c4:66:7e:1e:eb:f8:64:16:47:6d:eb:f6:b3:9c:11:86: d2:47:fd:7c:37:47:a8:3d:ce:aa:15:13:e7:03:20:93:ea:0a: d7:20:1c:e5:b9:b4:53:ab:03:fe:b2:65:04:4b:7e:49:7e:a8: 93:ae:f2:5a:5c:90:13:d8:46:4c:e7:5a:d1:d0:72:18:8b:18: ea:0a:12:05 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICS30wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUxNTAxNDAzMloXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoQUI2Qzg0NjRCMDUyQjcyMEY1RDJDMDAyMEU2NDI2QjZDN0VEMTg2 QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANC5P3RJxzWu/kJivxLP PIhZQ4WW8+KnfLR81Juo/zt76+XcaTu6tdds30i7J1KstrRmphBWxyYPtPIkHM6Y tD+zRAH70ogWcy+Gc1O26QKuVLcCRKAf8MJHF1ExQSiHAvfbDL4cV3f+corBZEU1 SEHtr0+9GcIwsjqhdv3KDis3WozRdCZbZku/Gi6tBNb2NTD9n4FETSsAZTOIe/Zi nKwPzX1diF1JrJDyqHHaNVybX2LvH/IbSHThU1hWpP7krOHyiMgtqx1CnMC+iU4R Wib0htRFKPcBHOUOoNt33rxvii93TRWIb6I0GeiTbB0Jq0czLuQpPHWxU+SAkrGU mg8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBSrbIRksFK3IPXSwAIOZCa2x+0YazAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMjMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzIzL3Ey eUVaTEJTdHlEMTBzQUNEbVFtdHNmdEdHcy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAshAMA0GCSqGSIb3 DQEBCwUAA4IBAQB46DVrXxKQzc3D+ekJcmosR+cVVH05+7cttzJDXvcWoUf7o0uI mCl9u1qGDoLbAy0tievte9hSJKS2epIlm4pov5qG74gFUuW5BA56obdLoB3aVGL/ XSgsccYI/ih/GXG2WlqM3rGYw5Boqne3PnbaYSMVsj6epcgnExOrrkCJnVFOSM44 OCdgm5pcYbRvyxxisOBt3GEqNq2liHMZWIL67DsvYmFE54pr/Ru38L2SmkLrZx9C m8Rmfh7r+GQWR23r9rOcEYbSR/18N0eoPc6qFRPnAyCT6grXIBzlubRTqwP+smUE S35JfqiTrvJaXJAT2EZM51rR0HIYixjqChIF -----END CERTIFICATE-----Generated at Sun May 18 17:52:21 2025 by rpki-client