$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer File: r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer (raw, json) Hash identifier: 66VMQBlIXLuSMTxf0LDQphp6EOSqW6DEyKnCa3nwA78= Subject key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5713 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Aug 2025 01:37:17 +0000 Certificate not after: Sat 15 Aug 2026 01:30:02 +0000 Subordinate resources: IP: 103.144.122.0/23 IP: 133.32.192.0/21 IP: 133.226.176.0/21 IP: 202.233.72.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22291 (0x5713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:37:17 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:28:97:f3:a5:31:74:98:62:e4:0d:0a:0f: 27:80:fc:f7:84:ec:3a:61:41:d3:55:cc:3a:1a:b2: 2e:6d:3f:c7:39:f1:57:83:62:fc:e6:ab:4c:98:c9: 55:0d:f1:5a:1b:22:1d:04:27:5e:30:aa:85:68:54: d7:b3:14:3e:75:ec:41:f9:f0:d7:b0:ec:fd:84:97: 5d:82:4c:83:7e:ce:80:da:d1:58:6f:e0:86:73:73: a1:44:ba:63:dd:e3:04:d9:85:2b:8d:42:96:d7:00: d0:6f:e4:c3:8b:31:f9:f5:ba:5f:ea:88:85:52:c5: cf:3d:82:1e:f8:a8:06:36:90:d7:84:86:89:d5:a2: bd:36:10:c9:94:74:bf:c0:77:68:e9:51:b4:52:ab: c0:cb:bb:24:76:f1:f3:cd:2d:0b:ad:46:71:8a:2d: a7:cd:19:58:f4:00:a3:ea:89:f7:46:cc:6f:b8:47: 64:56:1d:9c:34:74:c0:d3:15:8c:6e:43:4b:49:92: 3c:93:7f:35:5c:82:cc:56:6d:9c:8c:6b:71:b6:83: 5a:fb:e7:86:c4:85:a2:0c:2b:3a:c5:da:0d:5f:b3: 72:6e:cf:53:86:6b:6d:dd:c5:2d:15:11:68:52:be: c4:44:32:28:09:1c:db:de:f3:8f:3e:7f:0d:76:ee: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.122.0/23 133.32.192.0/21 133.226.176.0/21 202.233.72.0/22 Signature Algorithm: sha256WithRSAEncryption 54:33:df:dd:4f:90:0c:e2:71:83:51:64:5c:b9:ff:1a:40:52: 19:f4:29:92:bb:2c:ab:8a:e8:54:4d:26:48:a7:86:45:fa:80: 7b:5b:1d:e3:e7:ad:23:f4:f4:e8:46:e5:e5:0e:d8:17:d2:8a: d7:d8:fb:06:39:8c:40:ec:0b:5c:b3:37:3b:22:b9:66:35:8e: f0:d9:28:5d:d2:b5:4c:e0:9a:62:05:f0:82:10:a7:3b:e5:4b: 4c:44:67:ed:49:ff:43:2c:44:de:0f:42:60:cc:43:7a:c7:92: 8d:2f:4a:5b:96:68:be:fd:d8:e1:f2:fb:ca:06:62:98:ee:98: cb:23:be:77:c5:b5:20:da:58:77:8e:86:18:10:36:3c:af:43: 48:c6:0b:8d:1e:a2:91:0f:b6:95:40:81:90:80:8f:1f:fe:a1: c0:01:c4:39:41:e5:40:b5:99:57:a9:20:a4:0c:80:a5:89:20: df:83:e5:ae:53:55:c1:2f:e4:e1:fb:96:a2:09:2c:91:8e:83: 35:fb:45:78:ec:52:c8:56:ce:d0:97:de:05:1c:4f:54:23:52: 0d:44:d1:6a:a6:73:7c:d9:01:34:d4:f2:fc:44:46:1e:08:ba: 89:0d:e6:85:56:9b:c4:b7:7f:6c:e5:12:d4:f1:18:95:1d:20: 37:84:b7:c0 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICVxMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDgxNTAxMzcxN1oXDTI2MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoQUZEODI0NzdBMDkxQjE3Q0RBNjFDNTU2M0JDMjkyMENEQ0Q3QUFB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANjgKJfzpTF0mGLkDQoP J4D894TsOmFB01XMOhqyLm0/xznxV4Ni/OarTJjJVQ3xWhsiHQQnXjCqhWhU17MU PnXsQfnw17Ds/YSXXYJMg37OgNrRWG/ghnNzoUS6Y93jBNmFK41CltcA0G/kw4sx +fW6X+qIhVLFzz2CHvioBjaQ14SGidWivTYQyZR0v8B3aOlRtFKrwMu7JHbx880t C61GcYotp80ZWPQAo+qJ90bMb7hHZFYdnDR0wNMVjG5DS0mSPJN/NVyCzFZtnIxr cbaDWvvnhsSFogwrOsXaDV+zcm7PU4Zrbd3FLRURaFK+xEQyKAkc297zjz5/DXbu Az8CAwEAAaOCAp0wggKZMB0GA1UdDgQWBBSv2CR3oJGxfNphxVY7wpIM3NeqpTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTA2L3I5 Z2tkNkNSc1h6YVljVldPOEtTRE56WHFxVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAFnkHoDBAOFIMADBAOF 4rADBALK6UgwDQYJKoZIhvcNAQELBQADggEBAFQz391PkAzicYNRZFy5/xpAUhn0 KZK7LKuK6FRNJkinhkX6gHtbHePnrSP09OhG5eUO2BfSitfY+wY5jEDsC1yzNzsi uWY1jvDZKF3StUzgmmIF8IIQpzvlS0xEZ+1J/0MsRN4PQmDMQ3rHko0vSluWaL79 2OHy+8oGYpjumMsjvnfFtSDaWHeOhhgQNjyvQ0jGC40eopEPtpVAgZCAjx/+ocAB xDlB5UC1mVepIKQMgKWJIN+D5a5TVcEv5OH7lqIJLJGOgzX7RXjsUshWztCX3gUc T1QjUg1E0Wqmc3zZATTU8vxERh4IuokN5oVWm8S3f2zlEtTxGJUdIDeEt8A= -----END CERTIFICATE-----Generated at Sat Aug 23 09:46:13 2025 by rpki-client