$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer File: KPOWmDwzKEL92rYXWVowqDwzNGQ.cer (raw, json) Hash identifier: f+fs3hoyZFDgaldkA3YsuY4e0DQ/WV1/1MAN4ueKmFc= Subject key identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1135 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:37:21 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 136.198.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 18:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4405 (0x1135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jun 15 01:37:21 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=28F396983C332842FDDAB617595A30A83C333464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3c:ce:64:ff:03:11:5a:af:78:c9:6d:a9:67: 2a:0d:ce:af:86:1d:2c:7e:cd:98:db:70:15:21:30: 5e:32:25:f7:dd:9b:89:5b:90:63:a5:1f:f4:fa:ee: 42:c6:b3:9f:30:a1:77:d4:5e:f4:96:dd:bb:04:b1: 69:75:87:2f:36:4b:b6:85:56:51:c0:21:ae:e1:ce: 83:b1:eb:38:30:7c:5e:ef:34:92:b9:ee:d5:c0:04: 77:dd:87:38:74:ec:74:ac:f8:82:ad:86:f8:5e:39: 42:dc:a2:8b:6c:83:db:59:d3:b4:9a:a2:3f:6a:b4: d1:6f:9a:16:77:fe:0d:3f:55:93:78:08:79:5f:72: 75:f6:e0:26:49:d0:61:d1:f3:8f:70:97:7d:76:77: 1a:69:8d:ed:65:18:cc:28:75:67:df:b5:ef:18:ee: 6d:92:1d:0c:87:a7:81:b1:16:da:a6:d2:be:fb:f5: 33:44:55:74:50:ce:46:55:6a:c6:39:54:34:1d:9d: d2:8b:f4:6e:2e:13:d4:6b:c8:e4:11:f8:e9:13:f1: ee:f8:27:08:8e:2e:e6:af:c1:32:1f:e9:c3:de:d5: 1e:24:c4:16:40:58:f0:b0:05:a8:36:6c:20:4d:bf: a6:5d:ae:44:b3:58:f9:15:f8:ff:d6:ca:c4:14:ad: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 136.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 60:77:1d:82:e3:82:dd:b4:e8:a0:cc:dc:fe:14:57:8a:1b:3b: 34:c8:d9:ee:76:2b:2f:86:54:29:4b:88:ef:5f:bf:f0:91:90: 31:76:85:4b:b5:98:eb:6c:94:fd:5a:ca:b6:5e:48:85:ba:18: 24:e0:dd:58:60:82:3b:fe:6c:21:35:85:a1:c1:20:02:7d:9e: c5:1a:f4:fa:75:b5:a3:03:70:c2:d5:50:a9:87:9b:64:76:7a: a6:2e:fe:fc:3b:c0:25:02:4c:bb:79:3d:87:eb:5c:b9:a8:62: 25:dc:11:23:bf:7d:25:9c:42:c7:d7:5c:54:61:b0:33:32:01: 9b:7d:32:73:06:a3:de:e2:ee:71:4a:3f:36:77:39:20:fd:96: 0c:14:20:06:66:40:ca:a5:24:fb:0a:f0:4a:c9:d2:4c:b6:10: 76:db:9a:b1:df:79:d3:87:4d:6d:74:20:9e:8d:1c:3b:26:2d: cf:ff:3d:ad:87:f2:48:0c:fd:44:e7:c0:37:15:c1:72:2e:e1: 2e:d8:76:57:21:10:1a:8b:1d:dc:3a:c1:d0:a6:93:2f:a5:1a: b3:64:a7:d1:a9:9f:15:98:f0:02:89:db:ee:8e:6a:50:15:de: 88:7c:94:66:85:88:56:ac:90:b6:38:23:b4:e8:a7:fa:61:5a: a4:fc:c8:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICETUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDYxNTAxMzcyMVoXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoMjhGMzk2OTgzQzMzMjg0MkZEREFCNjE3NTk1QTMwQTgzQzMzMzQ2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQ8zmT/AxFar3jJbaln Kg3Or4YdLH7NmNtwFSEwXjIl992biVuQY6Uf9PruQsaznzChd9Re9JbduwSxaXWH LzZLtoVWUcAhruHOg7HrODB8Xu80krnu1cAEd92HOHTsdKz4gq2G+F45Qtyii2yD 21nTtJqiP2q00W+aFnf+DT9Vk3gIeV9ydfbgJknQYdHzj3CXfXZ3GmmN7WUYzCh1 Z9+17xjubZIdDIengbEW2qbSvvv1M0RVdFDORlVqxjlUNB2d0ov0bi4T1GvI5BH4 6RPx7vgnCI4u5q/BMh/pw97VHiTEFkBY8LAFqDZsIE2/pl2uRLNY+RX4/9bKxBSt cHUCAwEAAaOCAogwggKEMB0GA1UdDgQWBBQo85aYPDMoQv3athdZWjCoPDM0ZDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTE2OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTE2OS9LUE9X bUR3ektFTDkycllYV1Zvd3FEd3pOR1EubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiMYwDQYJKoZIhvcNAQEL BQADggEBAGB3HYLjgt206KDM3P4UV4obOzTI2e52Ky+GVClLiO9fv/CRkDF2hUu1 mOtslP1ayrZeSIW6GCTg3Vhggjv+bCE1haHBIAJ9nsUa9Pp1taMDcMLVUKmHm2R2 eqYu/vw7wCUCTLt5PYfrXLmoYiXcESO/fSWcQsfXXFRhsDMyAZt9MnMGo97i7nFK PzZ3OSD9lgwUIAZmQMqlJPsK8ErJ0ky2EHbbmrHfedOHTW10IJ6NHDsmLc//Pa2H 8kgM/UTnwDcVwXIu4S7YdlchEBqLHdw6wdCmky+lGrNkp9GpnxWY8AKJ2+6OalAV 3oh8lGaFiFaskLY4I7Top/phWqT8yD4= -----END CERTIFICATE-----Generated at Mon Jun 23 02:10:53 2025 by rpki-client