$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/E0OpitJ8sYmBuPP9GKTVc6gu14s.cer File: E0OpitJ8sYmBuPP9GKTVc6gu14s.cer (raw, json) Hash identifier: lRLgs+SZerLhwqUFprdy2Re1hWT2bf/PKH37macMrDM= Subject key identifier: 13:43:A9:8A:D2:7C:B1:89:81:B8:F3:FD:18:A4:D5:73:A8:2E:D7:8B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/E0OpitJ8sYmBuPP9GKTVc6gu14s.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 30 Jul 2025 06:39:44 +0000 Certificate not after: Thu 30 Jul 2026 06:29:08 +0000 Subordinate resources: IP: 2400:b1a0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21860 (0x5564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 30 06:39:44 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=1343A98AD27CB18981B8F3FD18A4D573A82ED78B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:a9:f5:2d:8d:29:b3:34:e3:11:8f:f5:55: bf:d1:2a:b0:7b:08:5f:f7:d9:88:99:32:cf:2b:89: d3:f7:89:65:33:b6:0b:da:cb:e7:d0:d1:25:17:8b: f1:0a:e5:75:f8:6a:f7:75:49:3e:25:0a:e6:74:30: da:62:9c:8a:43:7e:3b:44:34:1a:5c:1b:3c:38:51: eb:05:8e:d4:72:52:0d:2e:4f:e2:46:7b:cb:66:0c: 41:20:f2:65:ab:57:94:df:0f:09:7b:60:b2:66:34: 4b:22:7d:b5:e8:b7:95:76:af:8e:91:fe:18:f3:3c: 3a:d3:ff:1a:e6:0b:4a:19:3b:68:b8:b6:6c:09:a9: e6:66:32:f8:0a:73:5e:97:5f:ac:82:58:19:84:6d: 4a:3a:0d:5d:d6:a6:91:4f:1a:a9:47:4d:4e:da:4b: d0:55:78:8d:74:fa:63:47:fa:15:da:3f:1e:40:70: e8:88:74:a2:b2:16:5f:60:b9:c9:b3:a9:b7:4c:a4: cd:cf:d9:24:e6:41:90:a8:ef:38:36:f8:48:0c:7d: fa:63:70:64:ea:a7:fe:7a:52:cd:b3:e1:3b:a6:a3: 66:3b:02:e5:d9:7b:70:04:02:45:c0:0a:8c:bc:f7: 63:69:34:47:b7:50:ee:39:b6:bc:2a:23:4a:0a:8e: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:43:A9:8A:D2:7C:B1:89:81:B8:F3:FD:18:A4:D5:73:A8:2E:D7:8B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30408/E0OpitJ8sYmBuPP9GKTVc6gu14s.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:b1a0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:13:78:e9:11:e8:53:ba:8a:8e:80:79:4b:5b:44:9c:69:e9: 1e:7d:cd:bf:6e:7c:60:ab:35:2e:70:d8:71:1f:de:7a:22:be: 86:45:cb:30:0c:44:1a:f3:9d:8a:62:b6:63:c6:8c:62:51:cb: f7:37:71:8d:a6:a3:e8:bb:fc:2c:5a:f6:42:fb:98:74:91:9d: 31:c1:f0:fc:b1:48:e6:7c:a5:37:4d:af:0c:a8:4c:f9:fb:ac: 12:b8:6e:81:ee:6c:f3:5f:6f:23:dc:c4:49:34:22:18:94:1b: af:8b:0a:48:db:6b:e2:ba:5e:0b:39:c6:cf:82:30:20:2b:8a: 89:24:77:29:c1:48:64:b2:65:86:7e:16:b2:83:f7:47:a9:e0: 48:fd:d9:32:cd:bb:ca:b3:db:e4:67:ce:48:2f:68:59:3a:96: 12:70:ef:fb:ba:73:88:0a:ad:56:ee:f2:66:5c:11:dd:32:a0: 98:bd:74:ba:6a:18:39:82:36:f3:03:38:a2:4c:8b:9f:ed:ec: 94:f0:3d:64:da:bc:ec:f2:48:90:31:e3:f3:31:2a:07:23:04: fa:c7:4e:6e:eb:55:df:a0:4e:4d:90:09:18:d5:c8:fc:5e:08: 10:d3:18:c2:8c:c7:bd:84:51:3d:53:f5:c5:df:8a:58:f0:69: c0:f1:a4:81 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICVWQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDczMDA2Mzk0NFoXDTI2MDczMDA2MjkwOFowMzEx MC8GA1UEAxMoMTM0M0E5OEFEMjdDQjE4OTgxQjhGM0ZEMThBNEQ1NzNBODJFRDc4 QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANJCqfUtjSmzNOMRj/VV v9EqsHsIX/fZiJkyzyuJ0/eJZTO2C9rL59DRJReL8Qrldfhq93VJPiUK5nQw2mKc ikN+O0Q0GlwbPDhR6wWO1HJSDS5P4kZ7y2YMQSDyZatXlN8PCXtgsmY0SyJ9tei3 lXavjpH+GPM8OtP/GuYLShk7aLi2bAmp5mYy+ApzXpdfrIJYGYRtSjoNXdamkU8a qUdNTtpL0FV4jXT6Y0f6Fdo/HkBw6Ih0orIWX2C5ybOpt0ykzc/ZJOZBkKjvODb4 SAx9+mNwZOqn/npSzbPhO6ajZjsC5dl7cAQCRcAKjLz3Y2k0R7dQ7jm2vCojSgqO wscCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQTQ6mK0nyxiYG48/0YpNVzqC7XizAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0MDgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDA4L0Uw T3BpdEo4c1ltQnVQUDlHS1RWYzZndTE0cy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkALGgMA0GCSqGSIb3 DQEBCwUAA4IBAQA7E3jpEehTuoqOgHlLW0Scaekefc2/bnxgqzUucNhxH956Ir6G RcswDEQa852KYrZjxoxiUcv3N3GNpqPou/wsWvZC+5h0kZ0xwfD8sUjmfKU3Ta8M qEz5+6wSuG6B7mzzX28j3MRJNCIYlBuviwpI22viul4LOcbPgjAgK4qJJHcpwUhk smWGfhayg/dHqeBI/dkyzbvKs9vkZ85IL2hZOpYScO/7unOICq1W7vJmXBHdMqCY vXS6ahg5gjbzAziiTIuf7eyU8D1k2rzs8kiQMePzMSoHIwT6x05u61XfoE5NkAkY 1cj8XggQ0xjCjMe9hFE9U/XF34pY8GnA8aSB -----END CERTIFICATE-----Generated at Mon Aug 11 07:36:53 2025 by rpki-client