$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer File: 377hQdw06JNkA0On8xKnAu-Rppg.cer (raw, json) Hash identifier: H15KIxI8NljlIbtkM4NxM17djU286hoPK1/pW98LXIM= Subject key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 486D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:31:00 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 133.32.112.0/20 IP: 210.134.192.0/20 IP: 210.156.112.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18541 (0x486d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:31:00 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=DFBEE141DC34E893640343A7F312A702EF91A698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:f1:f3:3b:1f:41:55:02:6e:d6:22:54:8b: de:3f:39:43:4d:65:41:ca:87:1c:88:fc:d2:c9:74: 4c:20:a7:80:2c:6a:12:1c:44:ee:2c:5b:06:d0:31: 42:c5:4d:1c:cd:12:34:60:9d:c1:4e:b6:ae:ec:27: e0:5d:12:42:b9:a1:48:3d:51:11:15:ef:06:80:3e: 66:bd:4a:67:7f:d9:fa:cd:99:95:ea:4f:36:f7:9a: 1f:af:08:b9:5c:9a:d7:a1:04:23:05:43:0d:87:67: 4d:94:97:d0:8f:9e:04:1d:6d:e6:0b:56:e3:ad:43: 4f:e1:99:b5:62:4e:c5:b2:b5:27:04:db:48:3a:51: 02:eb:03:8a:15:43:d9:d1:c7:00:88:41:12:5c:8b: 71:fa:b3:43:6b:09:e0:61:46:76:08:1b:f2:db:b3: cf:4d:65:c8:f3:03:1e:c2:c3:c0:3a:d9:0d:20:b8: 06:6b:4f:65:49:79:40:9f:e7:f7:49:d3:c2:33:06: d7:20:68:e5:52:7f:7d:f1:92:6f:69:98:52:ff:1f: b2:79:a2:08:b5:4d:b8:80:38:17:7b:7c:c0:aa:d2: e4:25:03:cb:d3:10:dd:e8:d1:58:ec:86:d7:70:aa: 1f:a2:dd:95:44:94:fd:07:88:2c:10:fa:c9:a8:a3: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.32.112.0/20 210.134.192.0/20 210.156.112.0/20 Signature Algorithm: sha256WithRSAEncryption 02:44:36:d3:3e:71:fe:41:c0:9c:a4:97:9d:52:e6:5d:ff:01: 88:d2:51:2f:8d:7b:88:43:02:17:c5:73:ad:46:3a:44:fb:ce: 1b:7c:f3:58:6b:01:6e:d1:1d:64:bc:20:ee:15:ca:aa:ca:f6: 0c:1c:45:f9:ac:f8:b0:8d:61:4f:15:15:53:37:26:62:14:50: b0:32:5d:57:3d:be:46:d6:6b:77:d1:29:85:0a:03:11:cd:78: 0b:18:07:af:78:2b:27:ab:2d:78:e7:5d:e5:d8:3a:17:b9:dd: 0e:5b:31:75:5b:68:96:7b:91:c8:9d:a3:0d:95:49:98:05:91: 0b:29:26:af:f3:bc:ff:c0:c5:e2:0c:b1:90:5b:ff:a3:ad:58: de:0c:4b:1c:6f:b6:b7:fa:e7:96:d6:3b:71:db:f9:93:e7:7d: ad:bb:95:46:e8:0c:02:a0:bf:8c:99:d3:2b:10:df:00:e0:15: aa:d7:b1:f5:b8:60:c0:39:9b:a4:17:34:a3:0b:c5:9c:96:3e: 44:e0:1d:8b:d5:44:42:b7:30:53:26:07:56:d6:2e:39:e7:18: 3e:06:e7:c9:eb:c1:70:fe:6e:95:a4:df:12:8b:42:d6:7b:34: 76:0a:36:c2:c8:9a:f9:0d:28:5b:89:a0:48:bd:35:77:54:bb: 11:39:9b:27 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICSG0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzEwMFoXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoREZCRUUxNDFEQzM0RTg5MzY0MDM0M0E3RjMxMkE3MDJFRjkxQTY5 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ4V8fM7H0FVAm7WIlSL 3j85Q01lQcqHHIj80sl0TCCngCxqEhxE7ixbBtAxQsVNHM0SNGCdwU62ruwn4F0S QrmhSD1RERXvBoA+Zr1KZ3/Z+s2ZlepPNveaH68IuVya16EEIwVDDYdnTZSX0I+e BB1t5gtW461DT+GZtWJOxbK1JwTbSDpRAusDihVD2dHHAIhBElyLcfqzQ2sJ4GFG dggb8tuzz01lyPMDHsLDwDrZDSC4BmtPZUl5QJ/n90nTwjMG1yBo5VJ/ffGSb2mY Uv8fsnmiCLVNuIA4F3t8wKrS5CUDy9MQ3ejRWOyG13CqH6LdlUSU/QeILBD6yaij zCUCAwEAAaOCApIwggKOMB0GA1UdDgQWBBTfvuFB3DTok2QDQ6fzEqcC75GmmDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84MzQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzgzNC8zNzdoUWR3 MDZKTmtBME9uOHhLbkF1LVJwcGcubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEhSBwAwQE0obAAwQE0pxwMA0G CSqGSIb3DQEBCwUAA4IBAQACRDbTPnH+QcCcpJedUuZd/wGI0lEvjXuIQwIXxXOt RjpE+84bfPNYawFu0R1kvCDuFcqqyvYMHEX5rPiwjWFPFRVTNyZiFFCwMl1XPb5G 1mt30SmFCgMRzXgLGAeveCsnqy14513l2DoXud0OWzF1W2iWe5HInaMNlUmYBZEL KSav87z/wMXiDLGQW/+jrVjeDEscb7a3+ueW1jtx2/mT532tu5VG6AwCoL+MmdMr EN8A4BWq17H1uGDAOZukFzSjC8Wclj5E4B2L1URCtzBTJgdW1i455xg+BufJ68Fw /m6VpN8Si0LWezR2CjbCyJr5DShbiaBIvTV3VLsROZsn -----END CERTIFICATE-----Generated at Sat Apr 26 08:22:13 2025 by rpki-client