$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer File: F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer (raw, json) Hash identifier: +jiTwDjdLF/q6NPY3tW6XrUB8+5MnefkUL4qLA9jyfY= Subject key identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4982 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:37:09 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 2001:278::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18818 (0x4982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:37:09 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1778E6B176325C05F3A17CD7DAA127F602CE5A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:a1:58:52:a9:f6:1a:20:f8:51:d9:69:a6: 8b:36:c4:2d:4d:f8:82:cb:2d:c3:4d:d0:ba:3e:86: db:aa:26:d1:d4:09:37:f0:04:ed:a0:7b:17:c2:0f: 5b:e2:a3:b4:9c:85:39:c5:d2:07:96:be:c3:6b:6a: 2b:7a:55:d8:ed:ee:cd:3b:56:14:42:71:c9:5b:5c: 78:44:c9:24:c9:20:b7:99:0e:39:35:da:9a:cd:41: c8:20:2b:7b:94:8f:ad:f9:f7:fd:dc:5b:de:ce:f3: 75:7f:dc:3c:d7:bd:79:48:6f:df:9c:6c:40:b7:8b: c7:dc:58:55:2c:1b:5b:31:bf:f4:d7:20:fc:47:be: 3a:3d:2b:d1:8e:10:ca:3f:ae:7d:36:cf:eb:8a:0b: 66:19:c8:bd:0e:9a:fd:75:e2:54:63:d6:09:53:02: b3:67:5e:ce:d9:9d:c8:bf:63:bc:28:4e:c6:28:fb: eb:b8:0a:df:a7:75:83:96:cd:bd:e0:ef:5d:29:2c: b9:65:6d:3c:b9:55:de:69:8b:7d:b3:e0:06:f1:0d: cf:45:1c:e4:c2:46:be:72:00:cf:ee:9c:a8:c7:fa: 9f:e4:0b:41:f0:50:38:05:21:3f:96:53:ff:bf:01: b5:9b:e9:71:70:9b:89:58:cc:a1:bc:3b:26:ab:d5: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:278::/32 Signature Algorithm: sha256WithRSAEncryption 06:8d:de:6b:03:06:a7:a2:22:63:60:6c:95:01:df:37:11:ee: c4:b1:01:35:8f:e2:6a:28:67:cf:a4:99:e8:09:8d:cc:46:2a: 22:73:93:be:44:69:d9:fe:9b:3e:53:7a:23:5c:72:89:e1:ad: e0:54:1e:61:8c:de:bc:76:e9:55:b8:e2:6b:18:86:de:bc:72: 2d:6a:b6:a9:7f:ed:9a:99:5a:b3:c2:11:d4:0c:76:5b:14:df: 65:99:1d:13:41:b7:63:f0:b9:ea:99:6a:13:23:50:af:11:39: e5:9e:ae:88:db:a9:86:20:ef:2f:3c:5e:2e:bc:45:f5:06:93: 9a:43:6b:c6:97:03:87:b0:3f:f7:29:bd:0c:d2:d4:2f:e0:72: 61:71:b4:c4:07:76:93:9a:ae:fe:e0:7a:00:6c:39:98:e3:b9: 88:73:76:cb:78:31:0e:16:00:76:f1:78:f3:de:f6:ee:d3:1e: 19:c5:1c:9e:61:f6:4e:4b:74:fe:64:4e:20:5e:dd:2b:d1:a8: 1b:80:a9:5b:82:42:4f:8c:52:f6:5e:9e:0f:3c:0a:a1:2e:ea: 93:b7:e9:30:f9:7e:54:6e:31:72:2d:68:2b:bc:9e:09:bb:a9: 01:56:54:0d:cc:d7:30:e8:3f:d5:d0:e1:df:22:2c:d8:22:60: 74:6b:b7:50 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICSYIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzcwOVoXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoMTc3OEU2QjE3NjMyNUMwNUYzQTE3Q0Q3REFBMTI3RjYwMkNFNUEw MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3XoVhSqfYaIPhR2Wmm izbELU34gsstw03Quj6G26om0dQJN/AE7aB7F8IPW+KjtJyFOcXSB5a+w2tqK3pV 2O3uzTtWFEJxyVtceETJJMkgt5kOOTXams1ByCAre5SPrfn3/dxb3s7zdX/cPNe9 eUhv35xsQLeLx9xYVSwbWzG/9Ncg/Ee+Oj0r0Y4Qyj+ufTbP64oLZhnIvQ6a/XXi VGPWCVMCs2deztmdyL9jvChOxij767gK36d1g5bNveDvXSksuWVtPLlV3mmLfbPg BvENz0Uc5MJGvnIAz+6cqMf6n+QLQfBQOAUhP5ZT/78BtZvpcXCbiVjMobw7JqvV W/cCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQXeOaxdjJcBfOhfNfaoSf2As5aATAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwMjIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDIyL0Yz am1zWFl5WEFYem9YelgycUVuOWdMT1dnRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQJ4MA0GCSqGSIb3 DQEBCwUAA4IBAQAGjd5rAwanoiJjYGyVAd83Ee7EsQE1j+JqKGfPpJnoCY3MRioi c5O+RGnZ/ps+U3ojXHKJ4a3gVB5hjN68dulVuOJrGIbevHItarapf+2amVqzwhHU DHZbFN9lmR0TQbdj8LnqmWoTI1CvETnlnq6I26mGIO8vPF4uvEX1BpOaQ2vGlwOH sD/3Kb0M0tQv4HJhcbTEB3aTmq7+4HoAbDmY47mIc3bLeDEOFgB28Xjz3vbu0x4Z xRyeYfZOS3T+ZE4gXt0r0agbgKlbgkJPjFL2Xp4PPAqhLuqTt+kw+X5UbjFyLWgr vJ4Ju6kBVlQNzNcw6D/V0OHfIizYImB0a7dQ -----END CERTIFICATE-----Generated at Sat Apr 26 08:22:30 2025 by rpki-client