$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer File: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer (raw, json) Hash identifier: r+4wviEN3IRTj42Sg6hlIOB/7yUck5JQoYm0u4rWF1o= Subject key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 30 Jul 2025 06:46:44 +0000 Certificate not after: Thu 30 Jul 2026 06:29:08 +0000 Subordinate resources: IP: 202.213.72.0/21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22023 (0x5607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 30 06:46:44 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:8b:53:16:a5:a7:f2:07:b0:e5:f6:60:f6: 47:31:3c:44:47:38:11:5c:09:13:34:99:93:c4:94: 48:cd:64:49:d7:0e:74:6a:ae:43:a3:0f:74:dc:8c: 42:45:6a:3f:1f:69:63:44:1f:4d:4a:37:63:e5:c9: 42:57:b1:5b:61:64:57:aa:94:0f:ca:9e:8e:6d:98: 4b:ca:38:6f:9f:d6:7e:b5:e1:95:69:13:62:f4:76: 34:53:1f:bb:e4:9e:84:d4:4c:7b:33:21:15:2e:43: 4b:52:86:66:2d:95:6e:a9:40:7d:04:f9:4d:24:cf: 92:a3:b6:9b:da:38:cd:44:05:35:2b:1a:2f:63:ec: a6:78:77:14:92:ed:4c:40:cc:81:e2:60:94:cf:3b: ae:04:12:5b:ca:b7:7f:ca:68:46:1d:97:21:02:6a: b2:3b:4c:3d:ca:cd:5d:72:e6:19:53:9d:cd:af:76: d0:2c:47:66:5f:fc:d3:f9:55:8b:2b:12:52:c8:73: c1:a6:3a:76:2c:1e:58:04:87:eb:78:90:63:7c:ed: f7:5e:c2:6c:8b:71:07:a9:75:41:36:3b:8d:cb:4e: 37:46:c6:2f:3b:4e:23:bd:8f:62:7d:c1:2c:ad:0a: 80:16:0a:25:e4:53:71:80:e8:fb:31:3e:87:45:8d: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.213.72.0/21 Signature Algorithm: sha256WithRSAEncryption 71:30:9c:02:5e:fa:3d:b8:2d:49:47:92:7c:bf:e4:ec:c1:a2: e5:2a:1b:da:5d:d2:41:9a:aa:b1:6e:4b:03:40:88:be:31:0a: f4:13:b9:f0:13:fc:78:5f:98:31:fd:e9:7a:08:72:0e:e0:d9: 90:91:55:d8:86:89:35:97:b5:42:84:8d:9c:79:8a:6d:71:9d: 8f:f4:a6:5a:e3:5c:cb:28:02:84:ff:7d:5b:95:88:99:fe:f7: 25:79:cd:ae:a8:5d:5e:53:1f:39:05:87:c2:31:42:6d:72:37: 80:97:c0:e8:b3:cd:17:09:db:54:83:12:14:49:d0:86:01:b3: 0e:8a:e0:ae:e8:74:41:95:a5:dc:27:11:cc:3a:25:a0:87:d8: bf:6b:1d:08:64:26:6d:a6:f3:00:29:41:b6:93:0b:fa:a0:fd: 14:f2:56:6a:ce:08:99:c1:1c:82:a7:94:53:e5:9e:4b:1c:c7: d4:eb:aa:99:ef:aa:ec:6a:63:a6:e0:88:0e:86:dc:f9:c1:1f: 2a:ee:d3:4c:ce:20:48:07:f4:cc:f0:24:76:37:20:80:88:47: 24:60:0e:85:e3:1c:e7:d1:97:85:97:1b:a0:bf:6c:21:95:6b: 25:a3:16:0c:ed:8b:8a:13:cb:f1:66:99:01:9b:93:b2:e2:2a: 2d:02:c5:7b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICVgcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDczMDA2NDY0NFoXDTI2MDczMDA2MjkwOFowMzEx MC8GA1UEAxMoRTU0RDBBNzMyQ0UxQzY1MTRBMzRBM0QwNkU5MTZCMUM0RkI4QUEw QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMW4i1MWpafyB7Dl9mD2 RzE8REc4EVwJEzSZk8SUSM1kSdcOdGquQ6MPdNyMQkVqPx9pY0QfTUo3Y+XJQlex W2FkV6qUD8qejm2YS8o4b5/WfrXhlWkTYvR2NFMfu+SehNRMezMhFS5DS1KGZi2V bqlAfQT5TSTPkqO2m9o4zUQFNSsaL2Pspnh3FJLtTEDMgeJglM87rgQSW8q3f8po Rh2XIQJqsjtMPcrNXXLmGVOdza920CxHZl/80/lViysSUshzwaY6diweWASH63iQ Y3zt917CbItxB6l1QTY7jctON0bGLztOI72PYn3BLK0KgBYKJeRTcYDo+zE+h0WN 1tECAwEAAaOCAoQwggKAMB0GA1UdDgQWBBTlTQpzLOHGUUo0o9BukWscT7iqCjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC85Ni8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOTYvNVUwS2N5emh4 bEZLTktQUWJwRnJIRS00cWdvLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8rVSDANBgkqhkiG9w0BAQsFAAOC AQEAcTCcAl76PbgtSUeSfL/k7MGi5Sob2l3SQZqqsW5LA0CIvjEK9BO58BP8eF+Y Mf3peghyDuDZkJFV2IaJNZe1QoSNnHmKbXGdj/SmWuNcyygChP99W5WImf73JXnN rqhdXlMfOQWHwjFCbXI3gJfA6LPNFwnbVIMSFEnQhgGzDorgruh0QZWl3CcRzDol oIfYv2sdCGQmbabzAClBtpML+qD9FPJWas4ImcEcgqeUU+WeSxzH1Ouqme+q7Gpj puCIDobc+cEfKu7TTM4gSAf0zPAkdjcggIhHJGAOheMc59GXhZcboL9sIZVrJaMW DO2LihPL8WaZAZuTsuIqLQLFew== -----END CERTIFICATE-----Generated at Mon Aug 11 08:07:32 2025 by rpki-client