$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer File: uOU8UkS3-adtX535-69h5XsuqTs.cer (raw, json) Hash identifier: Mxj2HGBYFyz1yE8XXxM/sC/hksWff7pBTCQTV03fijQ= Subject key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1333 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:40:37 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 160.246.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4915 (0x1333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Oct 15 01:40:37 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:b2:88:91:4b:3c:68:a0:62:f7:fb:39:88: c9:56:2e:66:f5:32:dd:9a:fc:d1:cc:bd:ec:49:8d: ba:6e:04:b5:5e:bf:91:61:8f:ad:24:d5:db:43:88: 33:8a:a5:82:12:e1:72:9e:76:cb:b6:4c:d9:f1:ca: 3e:30:b6:bf:6d:b6:2b:28:fe:61:5e:dc:76:6f:b9: 8f:d3:0c:67:d6:71:cd:a7:df:82:22:5f:60:56:a2: 92:1f:db:b4:01:7e:d1:f7:9f:f4:b3:c1:fe:97:4f: c2:06:c2:2d:4e:4e:3b:77:82:11:a2:6a:e8:f8:90: c2:9a:da:50:73:da:81:e4:cc:1c:dd:24:86:18:50: 94:fd:fb:16:f0:63:c0:5d:43:e8:24:57:3b:dd:d5: 8e:1b:8a:92:97:7d:2d:3b:fd:63:5f:c3:18:76:3e: f4:9c:b0:9f:72:9d:bc:57:09:ea:8c:d9:6f:af:6a: 4a:bc:6b:3b:e6:7a:40:59:48:6c:c2:ca:de:f3:ff: 54:2b:68:81:13:1c:f7:67:43:ec:36:f6:1b:10:9a: 74:41:77:ef:b6:97:62:44:2b:18:e5:b1:70:11:25: 38:17:47:af:0b:b5:57:2a:e1:b2:83:3d:ba:dd:6a: af:f9:80:32:40:d6:fa:c8:bf:6b:62:8c:99:ef:43: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.246.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:52:16:70:c1:e3:c9:d6:8d:b4:0e:1d:a8:48:41:ee:36:c4: 6e:f2:bf:36:8e:a7:fb:98:58:ad:37:ff:4f:e6:d0:b2:04:55: d1:89:8f:3a:2b:f8:94:d2:a9:fc:c1:ac:37:e9:64:de:70:3c: d1:12:21:69:28:60:86:c4:b4:48:ab:d2:c1:63:69:45:f0:2c: 0a:c0:96:06:fb:23:28:55:d6:39:38:cb:da:43:b6:25:1d:d2: 24:13:2c:4c:01:c2:56:ab:8a:24:f1:15:66:94:fc:a5:88:8e: 72:05:f4:e3:9d:a9:b0:b2:8c:52:97:0e:03:78:40:80:8a:58: 2e:b4:00:2c:e7:6c:cd:99:09:76:d4:28:98:93:a3:99:c6:8f: 60:0f:ee:8b:52:7e:d1:80:68:4e:c9:71:ff:be:09:fb:dc:ee: e9:0f:dc:32:ef:4a:c1:08:f7:28:77:89:eb:29:46:09:89:33: 81:1e:5b:81:2a:38:ba:fc:0e:f6:ce:71:69:59:f8:64:7e:16: 85:2c:d5:05:de:82:fb:50:f5:51:8a:95:d9:4f:ac:ca:5d:df: 6a:0e:e0:b9:42:85:0e:fb:e7:f1:72:65:90:e3:66:25:26:c4: 73:96:b6:0d:eb:9f:53:29:20:d8:bf:5f:f8:73:49:be:27:7c: 04:6a:74:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICEzMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MTAxNTAxNDAzN1oXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoQjhFNTNDNTI0NEI3RjlBNzZENUY5REY5RkJBRjYxRTU3QjJFQTkz QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNssoiRSzxooGL3+zmI yVYuZvUy3Zr80cy97EmNum4EtV6/kWGPrSTV20OIM4qlghLhcp52y7ZM2fHKPjC2 v222Kyj+YV7cdm+5j9MMZ9ZxzaffgiJfYFaikh/btAF+0fef9LPB/pdPwgbCLU5O O3eCEaJq6PiQwpraUHPageTMHN0khhhQlP37FvBjwF1D6CRXO93VjhuKkpd9LTv9 Y1/DGHY+9Jywn3KdvFcJ6ozZb69qSrxrO+Z6QFlIbMLK3vP/VCtogRMc92dD7Db2 GxCadEF377aXYkQrGOWxcBElOBdHrwu1VyrhsoM9ut1qr/mAMkDW+si/a2KMme9D J3kCAwEAAaOCAogwggKEMB0GA1UdDgQWBBS45TxSRLf5p21fnfn7r2Hley6pOzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjQ5MC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjQ5MC91T1U4 VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoPYwDQYJKoZIhvcNAQEL BQADggEBAAlSFnDB48nWjbQOHahIQe42xG7yvzaOp/uYWK03/0/m0LIEVdGJjzor +JTSqfzBrDfpZN5wPNESIWkoYIbEtEir0sFjaUXwLArAlgb7IyhV1jk4y9pDtiUd 0iQTLEwBwlariiTxFWaU/KWIjnIF9OOdqbCyjFKXDgN4QICKWC60ACznbM2ZCXbU KJiTo5nGj2AP7otSftGAaE7Jcf++Cfvc7ukP3DLvSsEI9yh3iespRgmJM4EeW4Eq OLr8DvbOcWlZ+GR+FoUs1QXegvtQ9VGKldlPrMpd32oO4LlChQ775/FyZZDjZiUm xHOWtg3rn1MpINi/X/hzSb4nfARqdOU= -----END CERTIFICATE-----Generated at Mon Oct 20 19:58:52 2025 by rpki-client