$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer File: 9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer (raw, json) Hash identifier: cvv3R8ZkTahq9gu8eToh0PJFWj8UcbBXDCb9wdTkjLg= Subject key identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:43:19 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 157.66.72.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4441 (0x1159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jun 15 01:43:19 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=F7FCBB98375357213F81D24BE1E19A8C64EBDD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:d5:b4:5e:1e:a5:ac:77:60:c3:c1:d6:b2: a0:27:36:f9:c7:8a:10:fd:7e:44:d4:4d:7a:8a:5f: b7:89:8f:41:3b:0d:1b:34:72:d3:51:a1:26:4f:01: 0c:f4:95:b7:73:8a:86:be:27:c5:84:62:2d:05:3b: 1a:67:e4:9b:5f:de:e4:8d:7e:d3:bf:96:ee:7b:ed: e3:7d:44:35:8d:60:00:dc:1c:3c:65:c5:e6:60:78: 07:6b:ba:1d:81:92:2a:92:44:79:10:5f:68:73:84: fd:d2:06:9c:f0:d8:9f:d9:d6:b4:5e:f2:80:42:76: 58:79:84:d0:25:0a:4f:ce:8a:4f:c6:b3:d3:40:be: 45:ae:e8:b0:b9:cd:1e:bd:b6:73:a4:52:ee:59:6e: 91:8d:e5:1e:bf:f9:ca:97:8a:14:45:40:d1:49:fe: 43:0c:7a:db:59:41:cb:d7:25:27:14:db:f3:fe:dd: 07:5c:34:cd:0d:c5:44:af:53:a5:14:e6:e7:f9:c5: a3:07:14:ea:79:34:d0:92:fd:19:2e:18:dc:5f:c8: 8c:cd:7f:ee:9d:b6:38:1c:b7:10:30:31:81:a7:a9: b8:0c:7d:47:d4:1e:15:0e:6f:fa:95:d3:18:aa:bc: 4f:8e:bf:e7:4e:3a:46:90:c3:65:ff:3b:d2:3c:2c: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.72.0/23 Signature Algorithm: sha256WithRSAEncryption 27:dd:c3:6b:0b:61:cb:65:ee:98:7a:f8:25:d0:72:49:e2:12: 94:da:54:d3:86:45:08:d1:3d:d3:25:d6:f1:ec:61:00:6f:c9: 0c:f6:8f:d7:a8:e6:f1:39:3d:0c:20:00:d3:5d:00:f4:c2:ba: e5:93:70:a5:80:01:8b:31:80:f3:83:6f:ab:ec:ee:be:60:05: 14:10:02:2b:ab:ec:d8:c1:73:68:ca:a7:b7:b5:61:a2:4d:d6: 5b:fc:a0:39:cb:79:e2:ef:3f:fc:a9:4c:88:b6:d3:d9:cb:f1: b1:0e:18:52:22:bf:0e:8e:37:2d:cd:e9:70:ed:0d:3d:53:0d: 27:e1:68:dc:ea:34:4f:a0:19:71:95:0a:cc:0e:36:b1:53:24: 71:fb:80:f2:02:d8:13:7a:3b:eb:97:02:ac:b6:ae:8f:6e:cf: 68:6f:2b:b4:41:cf:e5:93:ed:9b:0f:ef:2f:b8:cd:e3:80:03: 7b:f7:46:53:71:8a:94:0b:13:a5:8e:ba:b3:9c:a3:d2:d1:87: 1b:be:54:cc:72:47:27:d3:6a:a3:a0:25:5b:68:e1:6d:13:ed: f8:11:0c:11:50:09:0f:2b:95:67:4e:27:53:ce:49:3f:ce:27: 01:a3:95:c4:94:80:85:c2:85:88:78:92:f3:8a:e8:51:4d:a9: 9c:ed:80:8e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEVkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDYxNTAxNDMxOVoXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoRjdGQ0JCOTgzNzUzNTcyMTNGODFEMjRCRTFFMTlBOEM2NEVCREQw QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANG91bReHqWsd2DDwday oCc2+ceKEP1+RNRNeopft4mPQTsNGzRy01GhJk8BDPSVt3OKhr4nxYRiLQU7Gmfk m1/e5I1+07+W7nvt431ENY1gANwcPGXF5mB4B2u6HYGSKpJEeRBfaHOE/dIGnPDY n9nWtF7ygEJ2WHmE0CUKT86KT8az00C+Ra7osLnNHr22c6RS7llukY3lHr/5ypeK FEVA0Un+Qwx621lBy9clJxTb8/7dB1w0zQ3FRK9TpRTm5/nFowcU6nk00JL9GS4Y 3F/IjM1/7p22OBy3EDAxgaepuAx9R9QeFQ5v+pXTGKq8T46/5046RpDDZf870jws JfsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBT3/LuYN1NXIT+B0kvh4ZqMZOvdCzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjU3Lzlf eTdtRGRUVnlFX2dkSkw0ZUdhakdUcjNRcy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQkgwDQYJKoZIhvcN AQELBQADggEBACfdw2sLYctl7ph6+CXQckniEpTaVNOGRQjRPdMl1vHsYQBvyQz2 j9eo5vE5PQwgANNdAPTCuuWTcKWAAYsxgPODb6vs7r5gBRQQAiur7NjBc2jKp7e1 YaJN1lv8oDnLeeLvP/ypTIi209nL8bEOGFIivw6ONy3N6XDtDT1TDSfhaNzqNE+g GXGVCswONrFTJHH7gPIC2BN6O+uXAqy2ro9uz2hvK7RBz+WT7ZsP7y+4zeOAA3v3 RlNxipQLE6WOurOco9LRhxu+VMxyRyfTaqOgJVto4W0T7fgRDBFQCQ8rlWdOJ1PO ST/OJwGjlcSUgIXChYh4kvOK6FFNqZztgI4= -----END CERTIFICATE-----Generated at Mon Jun 23 16:10:40 2025 by rpki-client