$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer File: 1TkKLCMKW2EqKT_v59qPAgwo9NM.cer (raw, json) Hash identifier: AaG5e42CGFBI6kbGIZ7e7zlTAMWBiJQGGxqGRQb0/W8= Subject key identifier: D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1331 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:39:49 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 165.101.8.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4913 (0x1331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Oct 15 01:39:49 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=D5390A2C230A5B612A293FEFE7DA8F020C28F4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:50:72:58:cf:be:f4:2b:95:69:3b:85:7f: 98:e4:e2:8a:4e:69:36:00:97:54:b2:6d:05:5e:d8: cd:6e:57:3e:4a:8a:e9:6c:c1:1d:9f:e5:81:44:61: bf:6b:93:af:ad:22:52:64:be:34:ef:29:93:27:66: ee:3b:9e:76:f8:18:76:a6:6c:b3:81:16:23:46:46: 5e:6c:72:23:b4:2b:d1:34:05:4a:a0:7a:8b:7a:c3: a0:99:7e:8e:84:c0:0e:c2:f7:75:46:68:f5:54:13: e4:a0:55:e4:30:03:54:35:8a:9d:1c:5f:d4:ee:77: 9d:2a:fa:dd:79:6c:c6:5b:f9:8b:2f:27:73:53:54: 79:97:a5:9e:94:61:db:9d:50:e4:ce:f1:fa:7a:d5: 00:2a:a6:78:1b:87:ee:c5:c0:1d:b8:65:96:b3:b8: 63:ab:38:59:b5:e9:8d:9a:dc:7a:8a:e7:8d:e7:2d: 02:68:74:42:ea:17:be:75:8f:cc:fc:b3:0b:84:73: ac:46:95:e4:6e:39:18:45:84:00:58:1c:3f:8e:a7: fa:88:53:96:66:6c:d7:15:eb:d4:8b:6d:00:db:54: 98:ca:3d:8d:19:dd:06:f9:9e:a6:98:9e:17:32:81: 07:b7:7a:cd:f3:bc:50:e0:3c:bd:04:8a:45:e7:4d: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.8.0/24 Signature Algorithm: sha256WithRSAEncryption 53:60:14:7e:aa:b1:8d:1c:44:7c:16:f8:2b:0a:a2:43:bb:2f: 73:97:f4:14:ab:63:32:00:1e:ae:b5:63:58:b6:37:bb:0a:6d: 23:6f:59:1f:20:48:c5:62:6f:db:50:73:21:1d:39:6c:d8:34: 81:38:d6:61:9e:3d:d0:dc:6a:31:2e:df:cd:37:fa:57:af:2e: a2:71:79:5a:d5:cc:dd:ac:19:81:91:a0:7a:08:ce:1c:08:44: 2e:04:8e:1c:e6:af:3e:f3:e4:ad:9a:f1:d1:7f:d3:47:c3:b8: a0:91:dc:50:05:19:e6:1e:52:33:91:59:e1:19:55:31:63:92: 1e:d2:a3:90:a9:71:58:94:c7:bc:df:1a:20:13:9b:fd:75:a1: 91:57:ad:1c:e4:14:53:18:e3:a9:24:7c:e5:f4:a0:ba:58:68: 96:26:c8:51:5b:87:78:e1:b9:ca:62:2b:b6:cd:63:ca:d1:28: 81:57:fb:2e:cb:ea:d8:84:bb:a7:29:3a:93:28:57:80:f4:05: b1:e8:9e:fd:f7:3e:fb:36:b2:71:d7:6f:13:2d:29:36:33:04: 83:71:de:09:f4:e5:9a:e8:b4:94:8d:27:89:67:dc:e0:a0:35: 34:7a:5d:9f:98:24:5c:9f:b8:5b:74:40:38:e1:65:cd:cf:9e: 49:e7:6a:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MTAxNTAxMzk0OVoXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoRDUzOTBBMkMyMzBBNUI2MTJBMjkzRkVGRTdEQThGMDIwQzI4RjRE MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZdUHJYz770K5VpO4V/ mOTiik5pNgCXVLJtBV7YzW5XPkqK6WzBHZ/lgURhv2uTr60iUmS+NO8pkydm7jue dvgYdqZss4EWI0ZGXmxyI7Qr0TQFSqB6i3rDoJl+joTADsL3dUZo9VQT5KBV5DAD VDWKnRxf1O53nSr63Xlsxlv5iy8nc1NUeZelnpRh251Q5M7x+nrVACqmeBuH7sXA HbhllrO4Y6s4WbXpjZrceornjectAmh0QuoXvnWPzPyzC4RzrEaV5G45GEWEAFgc P46n+ohTlmZs1xXr1IttANtUmMo9jRndBvmeppieFzKBB7d6zfO8UOA8vQSKRedN D5cCAwEAAaOCAokwggKFMB0GA1UdDgQWBBTVOQosIwpbYSopP+/n2o8CDCj00zAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvNTczNi8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTczNi8xVGtL TENNS1cyRXFLVF92NTlxUEFnd285Tk0ubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApWUIMA0GCSqGSIb3DQEB CwUAA4IBAQBTYBR+qrGNHER8FvgrCqJDuy9zl/QUq2MyAB6utWNYtje7Cm0jb1kf IEjFYm/bUHMhHTls2DSBONZhnj3Q3GoxLt/NN/pXry6icXla1czdrBmBkaB6CM4c CEQuBI4c5q8+8+StmvHRf9NHw7igkdxQBRnmHlIzkVnhGVUxY5Ie0qOQqXFYlMe8 3xogE5v9daGRV60c5BRTGOOpJHzl9KC6WGiWJshRW4d44bnKYiu2zWPK0SiBV/su y+rYhLunKTqTKFeA9AWx6J799z77NrJx128TLSk2MwSDcd4J9OWa6LSUjSeJZ9zg oDU0el2fmCRcn7hbdEA44WXNz55J52q8 -----END CERTIFICATE-----Generated at Wed Nov 5 05:31:25 2025 by rpki-client