$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer File: RJV2NHCVBo-WRmvzqO-pg-MncRY.cer (raw, json) Hash identifier: 17Qjrn2ZHlnYZQ6Y5Q1DfQ4lp4JkbbUTC6MNt0cq6SU= Subject key identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 497A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:37:01 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 2401:3600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18810 (0x497a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:37:01 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=449576347095068F96466BF3A8EFA983E3277116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:f6:dc:1f:9a:81:39:15:71:51:97:12:fa: 4d:ee:63:25:5f:ce:12:78:97:2a:bd:ca:90:7b:0e: ae:59:ee:77:31:a3:24:cf:86:51:3c:65:ce:d6:f8: 50:bd:95:b5:e0:e9:cb:3f:c3:32:c5:6e:ad:1a:18: e7:fa:77:5f:c1:05:99:c6:63:91:62:b4:af:9d:5b: 70:41:78:9a:29:3c:fd:60:56:be:fa:2c:c5:d2:53: 26:9a:0b:48:ed:3f:7b:b0:46:13:6c:c3:d4:29:ad: 05:c1:d6:55:e7:17:43:ba:3b:50:26:c9:8c:c2:54: a8:b8:a6:e6:ff:a4:99:de:27:2d:95:d6:1f:91:b5: c8:06:f1:8a:f7:e7:b2:30:36:17:3d:76:da:50:84: bc:45:3f:bb:ab:f1:57:ad:8e:12:df:9a:1f:7e:de: 40:77:40:16:d2:2c:82:d3:6f:ea:38:91:5e:95:42: 70:6c:15:ed:6a:af:ae:6f:46:df:76:8c:62:12:63: bb:ab:e7:01:0a:5a:6b:2c:7c:4b:15:1e:85:ce:99: 62:ff:0d:dc:72:32:21:de:89:8a:0d:e4:4e:cb:1b: d1:c2:16:f8:01:08:b6:8e:13:45:ff:52:ab:9d:b7: 52:cd:88:8c:82:06:38:fd:93:8b:88:71:42:9e:44: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:3600::/32 Signature Algorithm: sha256WithRSAEncryption 9e:f6:36:0f:08:3f:cb:e6:97:46:55:85:5a:54:41:c7:41:67: 87:59:48:6e:68:ef:14:33:2c:e3:b8:80:b1:e8:b1:84:85:72: a6:d8:01:b5:e4:c4:82:ee:4a:a3:ed:ec:5a:24:ce:85:7e:9e: 16:b8:90:f3:44:f3:13:1c:f0:47:c5:45:64:f7:0f:1b:fa:b3: 43:49:d4:ec:31:bf:ff:47:2c:97:d7:08:cf:5c:80:01:cd:12: 1f:46:ee:3d:43:17:4a:ec:f9:4b:74:de:f5:2b:d4:2a:f9:78: 6d:cb:e8:ea:2b:5c:6a:0a:5b:bb:57:e6:cf:0d:17:db:d6:3b: 1c:b9:62:ad:64:5e:f9:be:32:7c:6d:ef:21:06:8c:82:80:15: 0a:76:5f:b7:b7:05:22:d5:a6:b8:ee:c4:c9:61:ff:7c:c6:46: 54:9e:51:22:d8:69:a9:99:79:3c:87:e5:ad:cb:7c:a1:34:de: 1c:62:e7:0f:85:87:fb:37:f8:8c:aa:e5:5c:a7:54:19:a5:bd: 63:92:09:e0:e4:af:ee:e5:da:0d:63:40:c7:65:84:d3:00:c5: 50:cb:7c:d4:2c:48:98:28:df:d1:04:e5:53:8a:24:65:0a:8f: 61:90:88:4c:90:67:34:d3:f3:24:49:f3:09:16:2f:21:51:66: 18:de:1e:92 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICSXowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzcwMVoXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoNDQ5NTc2MzQ3MDk1MDY4Rjk2NDY2QkYzQThFRkE5ODNFMzI3NzEx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrS9twfmoE5FXFRlxL6 Te5jJV/OEniXKr3KkHsOrlnudzGjJM+GUTxlztb4UL2VteDpyz/DMsVurRoY5/p3 X8EFmcZjkWK0r51bcEF4mik8/WBWvvosxdJTJpoLSO0/e7BGE2zD1CmtBcHWVecX Q7o7UCbJjMJUqLim5v+kmd4nLZXWH5G1yAbxivfnsjA2Fz122lCEvEU/u6vxV62O Et+aH37eQHdAFtIsgtNv6jiRXpVCcGwV7Wqvrm9G33aMYhJju6vnAQpaayx8SxUe hc6ZYv8N3HIyId6Jig3kTssb0cIW+AEIto4TRf9Sq523Us2IjIIGOP2Ti4hxQp5E NpUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRElXY0cJUGj5ZGa/Oo76mD4ydxFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTMzL1JK VjJOSENWQm8tV1JtdnpxTy1wZy1NbmNSWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATYAMA0GCSqGSIb3 DQEBCwUAA4IBAQCe9jYPCD/L5pdGVYVaVEHHQWeHWUhuaO8UMyzjuICx6LGEhXKm 2AG15MSC7kqj7exaJM6Ffp4WuJDzRPMTHPBHxUVk9w8b+rNDSdTsMb//RyyX1wjP XIABzRIfRu49QxdK7PlLdN71K9Qq+Xhty+jqK1xqClu7V+bPDRfb1jscuWKtZF75 vjJ8be8hBoyCgBUKdl+3twUi1aa47sTJYf98xkZUnlEi2GmpmXk8h+Wty3yhNN4c YucPhYf7N/iMquVcp1QZpb1jkgng5K/u5doNY0DHZYTTAMVQy3zULEiYKN/RBOVT iiRlCo9hkIhMkGc00/MkSfMJFi8hUWYY3h6S -----END CERTIFICATE-----Generated at Sat Apr 26 08:21:17 2025 by rpki-client