$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer File: r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer (raw, json) Hash identifier: ouSATOQQlRbnAM1U8MEkVUccmIFwzdJMe5T/0Y3OyFM= Subject key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 519C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:37:32 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 103.144.122.0/23 IP: 133.32.192.0/21 IP: 133.226.176.0/21 IP: 202.233.72.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20892 (0x519c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:37:32 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:28:97:f3:a5:31:74:98:62:e4:0d:0a:0f: 27:80:fc:f7:84:ec:3a:61:41:d3:55:cc:3a:1a:b2: 2e:6d:3f:c7:39:f1:57:83:62:fc:e6:ab:4c:98:c9: 55:0d:f1:5a:1b:22:1d:04:27:5e:30:aa:85:68:54: d7:b3:14:3e:75:ec:41:f9:f0:d7:b0:ec:fd:84:97: 5d:82:4c:83:7e:ce:80:da:d1:58:6f:e0:86:73:73: a1:44:ba:63:dd:e3:04:d9:85:2b:8d:42:96:d7:00: d0:6f:e4:c3:8b:31:f9:f5:ba:5f:ea:88:85:52:c5: cf:3d:82:1e:f8:a8:06:36:90:d7:84:86:89:d5:a2: bd:36:10:c9:94:74:bf:c0:77:68:e9:51:b4:52:ab: c0:cb:bb:24:76:f1:f3:cd:2d:0b:ad:46:71:8a:2d: a7:cd:19:58:f4:00:a3:ea:89:f7:46:cc:6f:b8:47: 64:56:1d:9c:34:74:c0:d3:15:8c:6e:43:4b:49:92: 3c:93:7f:35:5c:82:cc:56:6d:9c:8c:6b:71:b6:83: 5a:fb:e7:86:c4:85:a2:0c:2b:3a:c5:da:0d:5f:b3: 72:6e:cf:53:86:6b:6d:dd:c5:2d:15:11:68:52:be: c4:44:32:28:09:1c:db:de:f3:8f:3e:7f:0d:76:ee: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.122.0/23 133.32.192.0/21 133.226.176.0/21 202.233.72.0/22 Signature Algorithm: sha256WithRSAEncryption 97:00:30:8f:6e:60:38:05:6e:2d:b3:ea:9d:f0:0a:84:5e:b4: ac:53:60:c6:d9:d7:1e:f5:a3:19:ac:14:de:77:39:22:62:72: f4:18:3e:91:5b:e0:39:dc:6d:39:65:d9:4c:cc:20:ca:f7:d4: da:ff:f6:e2:e9:75:b8:10:1b:93:da:19:58:8c:de:0b:08:14: 31:bd:dd:bf:b7:ea:e9:8f:5d:33:11:10:f8:8d:36:49:ec:b8: 70:c1:be:22:bc:97:38:61:a7:bf:c4:e4:5c:e2:19:ba:b4:f7: a3:28:92:9a:29:cd:0a:67:94:e1:ef:1a:89:1e:75:39:4e:9f: 34:32:8d:5a:d1:d6:b6:91:37:07:1a:40:a8:ef:30:01:ee:55: f7:a9:84:84:0a:81:14:b6:a5:ef:17:13:48:b4:1c:d8:34:4b: bb:7c:af:07:df:cf:98:f5:06:c7:02:81:53:bd:0f:94:96:94: 36:91:71:60:c4:82:a6:79:5f:f8:8f:50:1b:dc:c0:79:e9:b1: c0:32:22:c3:e9:08:37:81:c6:50:00:69:c0:62:c7:5e:80:69: 99:37:7a:27:c1:21:9b:34:1b:80:cd:20:d2:21:27:b3:2c:a7: 0d:7c:40:bd:e8:25:de:b8:ca:18:d7:78:8c:c5:bb:26:16:3a: 34:03:79:d1 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICUZwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDYxNTAxMzczMloXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoQUZEODI0NzdBMDkxQjE3Q0RBNjFDNTU2M0JDMjkyMENEQ0Q3QUFB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANjgKJfzpTF0mGLkDQoP J4D894TsOmFB01XMOhqyLm0/xznxV4Ni/OarTJjJVQ3xWhsiHQQnXjCqhWhU17MU PnXsQfnw17Ds/YSXXYJMg37OgNrRWG/ghnNzoUS6Y93jBNmFK41CltcA0G/kw4sx +fW6X+qIhVLFzz2CHvioBjaQ14SGidWivTYQyZR0v8B3aOlRtFKrwMu7JHbx880t C61GcYotp80ZWPQAo+qJ90bMb7hHZFYdnDR0wNMVjG5DS0mSPJN/NVyCzFZtnIxr cbaDWvvnhsSFogwrOsXaDV+zcm7PU4Zrbd3FLRURaFK+xEQyKAkc297zjz5/DXbu Az8CAwEAAaOCAp0wggKZMB0GA1UdDgQWBBSv2CR3oJGxfNphxVY7wpIM3NeqpTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTA2L3I5 Z2tkNkNSc1h6YVljVldPOEtTRE56WHFxVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAFnkHoDBAOFIMADBAOF 4rADBALK6UgwDQYJKoZIhvcNAQELBQADggEBAJcAMI9uYDgFbi2z6p3wCoRetKxT YMbZ1x71oxmsFN53OSJicvQYPpFb4DncbTll2UzMIMr31Nr/9uLpdbgQG5PaGViM 3gsIFDG93b+36umPXTMREPiNNknsuHDBviK8lzhhp7/E5FziGbq096MokpopzQpn lOHvGokedTlOnzQyjVrR1raRNwcaQKjvMAHuVfephIQKgRS2pe8XE0i0HNg0S7t8 rwffz5j1BscCgVO9D5SWlDaRcWDEgqZ5X/iPUBvcwHnpscAyIsPpCDeBxlAAacBi x16AaZk3eifBIZs0G4DNINIhJ7Mspw18QL3oJd64yhjXeIzFuyYWOjQDedE= -----END CERTIFICATE-----Generated at Fri Jul 4 09:36:11 2025 by rpki-client