$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/EAxCBmyIKZtIqWr91LWva1mdsfo.cer File: EAxCBmyIKZtIqWr91LWva1mdsfo.cer (raw, json) Hash identifier: n/lxgkcQExn5TPHBytil38dNJ1mkiHFulySnLIgAaJ8= Subject key identifier: 10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 49C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/EAxCBmyIKZtIqWr91LWva1mdsfo.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:38:20 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 2400:8320::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18884 (0x49c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:38:20 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=100C42066C88299B48A96AFDD4B5AF6B599DB1FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:e8:d7:3e:65:a4:57:59:1b:e8:f1:1e:1f: 07:60:23:8e:6c:95:06:fc:3b:6d:51:17:5b:ec:9d: a7:78:70:8a:3b:ea:86:f5:dc:ab:97:58:db:a7:d5: b5:77:ce:29:e5:7f:ba:ed:75:0a:c1:f9:4f:fb:41: 15:8c:6e:1b:d1:7d:33:69:81:5a:af:9d:55:3f:5d: e7:fc:59:a7:4c:81:1e:40:fa:ce:75:c0:4f:06:4e: ce:52:46:85:0c:dd:a5:6b:2f:77:92:02:4d:fd:13: 08:1b:9e:6e:3e:f5:61:6c:b7:5d:aa:c4:97:2e:3e: 41:7c:16:d7:30:0a:54:0f:53:da:1f:85:03:27:72: ae:c6:86:43:c5:9c:97:b1:1a:ba:b5:32:08:fb:7c: 49:56:6b:24:52:92:61:66:93:b2:3d:36:c1:26:99: 0e:01:a5:bc:3b:49:e2:67:5c:ff:a8:fa:76:5f:1f: ed:05:de:f1:92:ee:ce:ad:91:ac:5d:dc:04:df:23: fe:39:41:f8:bc:42:8e:1b:35:aa:a6:fa:5d:e7:8e: 8b:a9:6d:a7:69:76:a9:f3:9a:91:e4:41:a7:dc:c3: 56:48:da:ee:01:67:f6:07:df:94:3a:ac:69:61:e4: 8d:aa:33:62:4c:28:65:98:3d:98:3d:e8:ab:0c:a9: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/EAxCBmyIKZtIqWr91LWva1mdsfo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8320::/32 Signature Algorithm: sha256WithRSAEncryption 72:e2:13:84:39:b3:81:c0:a8:42:7a:b6:3e:e3:e9:d7:de:af: da:bd:59:c6:86:d4:41:6a:34:2c:9f:06:8d:eb:57:60:4c:0a: d1:12:d9:17:cd:77:bd:d6:15:0f:7b:c7:d4:44:29:59:d0:4f: 23:3e:f2:25:59:65:39:2f:72:34:00:b1:ec:c2:5c:aa:c2:82: f2:ca:de:94:69:d4:fd:b3:9c:ae:c6:aa:b7:d9:8f:44:2b:02: 1e:4d:48:75:1d:87:0a:c4:05:bc:95:51:b8:0f:af:51:06:2c: f1:9b:bd:3b:6c:66:58:22:2f:42:ce:b7:7e:77:d3:d5:e5:5c: a8:39:04:08:49:d0:22:7b:25:79:8d:5c:68:ed:0b:e1:26:6e: c4:08:cb:de:fa:f3:6d:42:5a:db:8a:75:14:19:76:bf:27:b7: 67:8c:97:66:de:e6:93:6f:86:57:75:b2:e6:38:8f:24:42:d6: 39:bd:d3:f5:a4:5c:af:20:ae:09:28:4f:4c:9a:3b:1e:91:5b: c5:62:74:cc:4e:a0:d8:9b:15:e6:61:4d:11:2e:17:50:f3:37: ab:72:d2:79:e1:ee:80:29:10:e8:5e:ac:d7:91:5e:a7:0b:ff: 0d:52:37:52:bc:31:c8:9a:0e:d0:cd:91:bc:7d:47:45:4c:3c: 95:a5:f3:6e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICScQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzgyMFoXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoMTAwQzQyMDY2Qzg4Mjk5QjQ4QTk2QUZERDRCNUFGNkI1OTlEQjFG QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALxg6Nc+ZaRXWRvo8R4f B2AjjmyVBvw7bVEXW+ydp3hwijvqhvXcq5dY26fVtXfOKeV/uu11CsH5T/tBFYxu G9F9M2mBWq+dVT9d5/xZp0yBHkD6znXATwZOzlJGhQzdpWsvd5ICTf0TCBuebj71 YWy3XarEly4+QXwW1zAKVA9T2h+FAydyrsaGQ8Wcl7EaurUyCPt8SVZrJFKSYWaT sj02wSaZDgGlvDtJ4mdc/6j6dl8f7QXe8ZLuzq2RrF3cBN8j/jlB+LxCjhs1qqb6 XeeOi6ltp2l2qfOakeRBp9zDVkja7gFn9gfflDqsaWHkjaozYkwoZZg9mD3oqwyp E9MCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQQDEIGbIgpm0ipav3Uta9rWZ2x+jAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0MDQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDA0L0VB eENCbXlJS1p0SXFXcjkxTFd2YTFtZHNmby5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAIMgMA0GCSqGSIb3 DQEBCwUAA4IBAQBy4hOEObOBwKhCerY+4+nX3q/avVnGhtRBajQsnwaN61dgTArR EtkXzXe91hUPe8fURClZ0E8jPvIlWWU5L3I0ALHswlyqwoLyyt6UadT9s5yuxqq3 2Y9EKwIeTUh1HYcKxAW8lVG4D69RBizxm707bGZYIi9Czrd+d9PV5VyoOQQISdAi eyV5jVxo7QvhJm7ECMve+vNtQlrbinUUGXa/J7dnjJdm3uaTb4ZXdbLmOI8kQtY5 vdP1pFyvIK4JKE9MmjsekVvFYnTMTqDYmxXmYU0RLhdQ8zerctJ54e6AKRDoXqzX kV6nC/8NUjdSvDHImg7QzZG8fUdFTDyVpfNu -----END CERTIFICATE-----Generated at Sat Apr 26 08:22:59 2025 by rpki-client