$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer File: KPOWmDwzKEL92rYXWVowqDwzNGQ.cer (raw, json) Hash identifier: /BVMfBuwQ8vyYOmMs6uzWZ2anPWRqLXxgs/6FnMGkj4= Subject key identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 120E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 30 Jul 2025 06:41:22 +0000 Certificate not after: Thu 30 Jul 2026 06:29:08 +0000 Subordinate resources: IP: 136.198.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4622 (0x120e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 30 06:41:22 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=28F396983C332842FDDAB617595A30A83C333464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3c:ce:64:ff:03:11:5a:af:78:c9:6d:a9:67: 2a:0d:ce:af:86:1d:2c:7e:cd:98:db:70:15:21:30: 5e:32:25:f7:dd:9b:89:5b:90:63:a5:1f:f4:fa:ee: 42:c6:b3:9f:30:a1:77:d4:5e:f4:96:dd:bb:04:b1: 69:75:87:2f:36:4b:b6:85:56:51:c0:21:ae:e1:ce: 83:b1:eb:38:30:7c:5e:ef:34:92:b9:ee:d5:c0:04: 77:dd:87:38:74:ec:74:ac:f8:82:ad:86:f8:5e:39: 42:dc:a2:8b:6c:83:db:59:d3:b4:9a:a2:3f:6a:b4: d1:6f:9a:16:77:fe:0d:3f:55:93:78:08:79:5f:72: 75:f6:e0:26:49:d0:61:d1:f3:8f:70:97:7d:76:77: 1a:69:8d:ed:65:18:cc:28:75:67:df:b5:ef:18:ee: 6d:92:1d:0c:87:a7:81:b1:16:da:a6:d2:be:fb:f5: 33:44:55:74:50:ce:46:55:6a:c6:39:54:34:1d:9d: d2:8b:f4:6e:2e:13:d4:6b:c8:e4:11:f8:e9:13:f1: ee:f8:27:08:8e:2e:e6:af:c1:32:1f:e9:c3:de:d5: 1e:24:c4:16:40:58:f0:b0:05:a8:36:6c:20:4d:bf: a6:5d:ae:44:b3:58:f9:15:f8:ff:d6:ca:c4:14:ad: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 136.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:90:fa:48:1e:3d:6a:90:f0:f2:95:b2:63:be:95:be:f2:8a: f8:83:a6:91:d6:3c:7c:14:9c:ae:3f:a9:f6:c3:08:52:f0:6d: 93:b1:af:46:60:aa:c6:84:cf:0c:7e:dd:96:be:49:f1:e9:97: f1:25:2a:93:15:55:37:fc:15:82:be:05:df:2d:fd:28:2e:b4: c3:a7:12:65:0f:56:d9:76:7c:09:30:32:45:44:36:45:22:c4: 7f:04:dc:0c:b8:d6:c2:e8:bb:32:70:09:67:59:38:dc:3d:e4: 02:dd:c5:b3:23:5d:89:5e:aa:71:04:68:da:f6:e7:41:f1:be: a7:6f:05:dc:cd:6a:d3:06:d8:5c:f6:48:e0:37:02:14:79:ca: a7:76:5f:e4:7d:d8:2c:64:28:d9:54:86:80:e8:b4:5c:98:9c: a2:f2:22:e7:be:c4:21:f1:df:27:f0:06:cd:fc:cc:be:9d:3c: 1e:39:85:61:ef:bf:8b:00:fb:48:7b:ec:8e:ee:1d:f7:75:74: ab:36:0a:7e:44:44:70:bc:e9:dd:fa:06:2e:80:db:d4:73:9c: ef:d0:a6:a6:12:fb:1a:ad:96:e3:71:a4:b2:0f:9a:c7:76:5b: 9d:66:59:ea:b0:76:4b:7e:ab:34:e4:4b:4c:ad:4a:b3:6b:95: 51:89:cf:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICEg4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDczMDA2NDEyMloXDTI2MDczMDA2MjkwOFowMzEx MC8GA1UEAxMoMjhGMzk2OTgzQzMzMjg0MkZEREFCNjE3NTk1QTMwQTgzQzMzMzQ2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQ8zmT/AxFar3jJbaln Kg3Or4YdLH7NmNtwFSEwXjIl992biVuQY6Uf9PruQsaznzChd9Re9JbduwSxaXWH LzZLtoVWUcAhruHOg7HrODB8Xu80krnu1cAEd92HOHTsdKz4gq2G+F45Qtyii2yD 21nTtJqiP2q00W+aFnf+DT9Vk3gIeV9ydfbgJknQYdHzj3CXfXZ3GmmN7WUYzCh1 Z9+17xjubZIdDIengbEW2qbSvvv1M0RVdFDORlVqxjlUNB2d0ov0bi4T1GvI5BH4 6RPx7vgnCI4u5q/BMh/pw97VHiTEFkBY8LAFqDZsIE2/pl2uRLNY+RX4/9bKxBSt cHUCAwEAAaOCAogwggKEMB0GA1UdDgQWBBQo85aYPDMoQv3athdZWjCoPDM0ZDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTE2OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTE2OS9LUE9X bUR3ektFTDkycllYV1Zvd3FEd3pOR1EubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiMYwDQYJKoZIhvcNAQEL BQADggEBABGQ+kgePWqQ8PKVsmO+lb7yiviDppHWPHwUnK4/qfbDCFLwbZOxr0Zg qsaEzwx+3Za+SfHpl/ElKpMVVTf8FYK+Bd8t/SgutMOnEmUPVtl2fAkwMkVENkUi xH8E3Ay41sLouzJwCWdZONw95ALdxbMjXYleqnEEaNr250HxvqdvBdzNatMG2Fz2 SOA3AhR5yqd2X+R92CxkKNlUhoDotFyYnKLyIue+xCHx3yfwBs38zL6dPB45hWHv v4sA+0h77I7uHfd1dKs2Cn5ERHC86d36Bi6A29RznO/QpqYS+xqtluNxpLIPmsd2 W51mWeqwdkt+qzTkS0ytSrNrlVGJz1M= -----END CERTIFICATE-----Generated at Wed Aug 13 07:58:27 2025 by rpki-client