$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0_4nFVMUwUjdhbciP6DR-P0rJng.cer File: 0_4nFVMUwUjdhbciP6DR-P0rJng.cer (raw, json) Hash identifier: +o+INqaX5x0ev6ZhZHrv1S2Dj8ak2GQKGCpsg1aK9Ms= Subject key identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 55AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 30 Jul 2025 06:41:51 +0000 Certificate not after: Thu 30 Jul 2026 06:29:08 +0000 Subordinate resources: IP: 2402:5a00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21935 (0x55af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 30 06:41:51 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=D3FE27155314C148DD85B7223FA0D1F8FD2B2678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:92:71:ff:81:a2:fa:cf:78:b3:00:06:c9: 57:60:2d:c3:c7:5f:67:ff:e2:7c:51:23:ab:6e:53: f1:93:93:3b:19:7d:3a:93:97:4f:5f:00:9c:c1:73: d8:ef:f1:3f:a3:6a:5b:98:3f:4a:34:40:58:40:b6: 78:90:b3:d2:ee:d7:e8:b5:af:78:f5:0a:d9:17:60: 8f:11:32:b7:19:95:b1:32:00:29:80:de:a3:92:bb: 8c:25:21:de:de:f8:56:d7:a3:80:3f:01:dc:78:de: 51:2b:ff:f3:8c:99:08:eb:cc:30:61:db:94:2d:5c: d7:c0:9d:6e:eb:7b:81:ec:ee:1e:f2:32:99:0a:79: 1e:f1:f1:13:fe:9b:1f:14:76:ea:49:c3:8e:3a:27: bc:9e:99:24:32:44:04:23:86:0b:59:98:a9:09:32: a1:a8:34:f3:a8:a2:fd:c2:f2:b3:6c:7e:92:aa:e0: 7c:0f:d9:93:58:f0:7e:63:7a:f3:4f:05:de:df:d4: d6:c4:fa:ce:a9:89:a6:3d:da:a7:8d:3b:3e:81:da: 5c:33:7b:3d:df:12:a2:42:8b:4b:f0:ce:a8:e7:28: 0a:db:79:56:7e:72:18:dd:45:23:85:0b:34:8a:30: b1:ac:6e:39:04:d4:ec:0d:b2:4d:b0:5d:d8:68:a8: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 27:10:19:28:59:46:27:ef:7e:16:b2:88:9d:42:c5:4e:ac:1e: 12:9f:07:2b:9e:64:b9:63:87:f7:7e:16:15:2c:75:af:f8:ed: b7:1d:be:c1:79:6e:0b:1d:14:82:54:82:71:1e:e7:57:ce:3e: ba:92:73:8c:8d:ce:9a:66:cd:7c:e5:57:43:b3:51:76:c2:05: be:aa:f4:70:c8:fd:e7:8f:5f:9b:bd:1b:18:7e:0b:1d:3c:28: 54:f5:16:17:e7:16:e6:87:a8:50:bf:d5:c4:d9:45:82:1d:b5: d6:90:d4:fe:68:d0:0f:e0:01:8e:37:56:7d:bd:a7:80:f0:6a: f9:43:ee:ad:2a:00:40:c4:ac:fd:82:d9:25:f9:80:ab:21:f5: e1:c9:75:46:e0:c3:5f:b3:71:80:53:d7:e6:c1:e3:1b:87:24: 6d:57:bb:db:a5:95:e5:f3:9a:ee:f9:97:61:2f:7a:7c:2b:95: 01:d9:90:22:56:a2:6f:14:1c:30:97:d7:94:1e:a6:0e:63:6e: 1d:f1:82:69:17:42:5a:61:e7:5c:2a:5a:a5:a5:db:71:59:e0: 1e:a4:ac:4b:3f:cd:f3:25:1f:e0:38:d0:5d:6c:51:a3:2c:a2: 9b:c8:9c:47:55:dd:91:79:5d:b6:05:d3:33:2b:e2:dd:9d:7f: 0d:c4:a1:89 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICVa8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDczMDA2NDE1MVoXDTI2MDczMDA2MjkwOFowMzEx MC8GA1UEAxMoRDNGRTI3MTU1MzE0QzE0OEREODVCNzIyM0ZBMEQxRjhGRDJCMjY3 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjQknH/gaL6z3izAAbJ V2Atw8dfZ//ifFEjq25T8ZOTOxl9OpOXT18AnMFz2O/xP6NqW5g/SjRAWEC2eJCz 0u7X6LWvePUK2RdgjxEytxmVsTIAKYDeo5K7jCUh3t74VtejgD8B3HjeUSv/84yZ COvMMGHblC1c18Cdbut7gezuHvIymQp5HvHxE/6bHxR26knDjjonvJ6ZJDJEBCOG C1mYqQkyoag086ii/cLys2x+kqrgfA/Zk1jwfmN6808F3t/U1sT6zqmJpj3ap407 PoHaXDN7Pd8SokKLS/DOqOcoCtt5Vn5yGN1FI4ULNIowsaxuOQTU7A2yTbBd2Gio oacCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTT/icVUxTBSN2FtyI/oNH4/SsmeDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTM2LzBf NG5GVk1Vd1VqZGhiY2lQNkRSLVAwckpuZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAloAMA0GCSqGSIb3 DQEBCwUAA4IBAQAnEBkoWUYn734WsoidQsVOrB4SnwcrnmS5Y4f3fhYVLHWv+O23 Hb7BeW4LHRSCVIJxHudXzj66knOMjc6aZs185VdDs1F2wgW+qvRwyP3nj1+bvRsY fgsdPChU9RYX5xbmh6hQv9XE2UWCHbXWkNT+aNAP4AGON1Z9vaeA8Gr5Q+6tKgBA xKz9gtkl+YCrIfXhyXVG4MNfs3GAU9fmweMbhyRtV7vbpZXl85ru+ZdhL3p8K5UB 2ZAiVqJvFBwwl9eUHqYOY24d8YJpF0JaYedcKlqlpdtxWeAepKxLP83zJR/gONBd bFGjLKKbyJxHVd2ReV22BdMzK+LdnX8NxKGJ -----END CERTIFICATE-----Generated at Mon Aug 11 07:42:30 2025 by rpki-client