$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/SNuJYh0mTFFyPbw1GLoiK8cf2_E.cer File: SNuJYh0mTFFyPbw1GLoiK8cf2_E.cer (raw, json) Hash identifier: rI0ZHS/NklLsTxBEfX0SbxrMD3KQNAQQpWr8WP4T8XI= Subject key identifier: 48:DB:89:62:1D:26:4C:51:72:3D:BC:35:18:BA:22:2B:C7:1F:DB:F1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 484E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/SNuJYh0mTFFyPbw1GLoiK8cf2_E.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:30:27 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 103.10.244.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18510 (0x484e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:30:27 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=48DB89621D264C51723DBC3518BA222BC71FDBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:fa:e1:db:94:69:19:2d:72:33:52:a8:31: f2:20:49:28:9c:b9:7c:64:80:1f:eb:9e:a4:f5:d1: ae:80:3d:39:4a:72:e8:36:15:c0:61:c2:be:59:6b: 85:f7:10:15:02:43:82:e7:b5:a2:ec:51:9e:de:19: 34:37:4a:20:5e:53:21:e5:4f:0a:b6:f0:f5:01:3f: a6:37:90:fb:12:88:91:36:5b:f5:41:f9:af:e0:0c: 1b:de:06:fa:c4:61:7d:78:bd:ec:97:33:c2:9d:4f: 72:6e:0a:88:e4:4a:44:ab:9f:46:53:13:59:d7:f5: 34:4c:37:1d:7e:22:2b:c7:6f:c0:64:1d:61:6d:6e: e5:0e:11:d2:01:5f:2b:e4:cb:aa:dd:bb:6b:23:b9: 6b:20:9a:50:9d:76:6f:ca:eb:e6:e9:c8:be:3f:81: 7b:52:a7:a3:a8:b7:b0:a6:15:25:80:62:d7:bd:3b: 1a:b6:fb:78:bb:de:2c:3d:e1:11:da:9a:c3:aa:4c: 9f:15:4a:3e:82:64:2e:f8:47:11:38:94:a2:80:da: 90:08:49:06:d1:71:9b:db:20:33:4a:7b:b7:2a:37: f6:ea:db:99:45:a9:de:d5:fc:db:ea:b8:7b:63:bd: 59:14:dc:aa:64:d9:23:b8:c0:35:03:2d:d3:2c:42: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DB:89:62:1D:26:4C:51:72:3D:BC:35:18:BA:22:2B:C7:1F:DB:F1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/22042/SNuJYh0mTFFyPbw1GLoiK8cf2_E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.244.0/22 Signature Algorithm: sha256WithRSAEncryption 77:48:45:93:45:c6:ee:b7:91:f3:6e:00:3c:1f:90:65:91:83: 80:4a:30:08:5e:31:4e:4a:55:d4:1a:56:a3:03:67:8b:e5:33: ae:50:b4:2e:0a:d3:94:c9:30:c1:f2:1e:0d:93:54:76:98:61: 5b:3c:59:d2:ef:c9:90:05:bc:eb:55:dc:b8:9e:73:d2:0b:67: a6:6d:b7:78:08:37:50:8d:66:a9:cd:12:1f:8c:62:f2:32:8a: 5f:74:ef:8f:ee:c3:bd:dd:fc:13:98:0c:39:77:1f:ed:03:a7: 15:06:98:51:87:ff:3f:b3:09:ca:0d:5e:7a:89:22:09:34:78: ff:96:19:75:d1:e4:13:93:82:55:50:71:e5:d4:ef:5e:1c:5e: 41:44:bd:4f:3b:67:9e:e6:d0:a3:2a:81:e0:24:2f:43:03:cb: c0:eb:12:43:31:05:5a:3d:03:6c:d9:45:b5:75:18:c1:7e:6a: 94:17:64:cb:b5:ec:c7:fe:af:42:01:40:9e:bd:95:d3:43:a6: 8f:0c:64:ee:92:c9:39:bb:f2:08:f1:01:4c:ff:cd:e5:73:6c: d8:5a:f7:44:47:fa:a5:da:8a:ee:7d:7a:47:0b:9e:8c:ba:ec: 2e:ae:59:8a:4f:07:73:de:8f:55:38:95:c5:f9:8d:7a:3f:28: c0:37:d3:1f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICSE4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzAyN1oXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoNDhEQjg5NjIxRDI2NEM1MTcyM0RCQzM1MThCQTIyMkJDNzFGREJG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCk+uHblGkZLXIzUqgx 8iBJKJy5fGSAH+uepPXRroA9OUpy6DYVwGHCvllrhfcQFQJDgue1ouxRnt4ZNDdK IF5TIeVPCrbw9QE/pjeQ+xKIkTZb9UH5r+AMG94G+sRhfXi97Jczwp1Pcm4KiORK RKufRlMTWdf1NEw3HX4iK8dvwGQdYW1u5Q4R0gFfK+TLqt27ayO5ayCaUJ12b8rr 5unIvj+Be1Kno6i3sKYVJYBi1707Grb7eLveLD3hEdqaw6pMnxVKPoJkLvhHETiU ooDakAhJBtFxm9sgM0p7tyo39urbmUWp3tX82+q4e2O9WRTcqmTZI7jANQMt0yxC aEMCAwEAAaOCAoswggKHMB0GA1UdDgQWBBRI24liHSZMUXI9vDUYuiIrxx/b8TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjIwNDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIyMDQyL1NO dUpZaDBtVEZGeVBidzFHTG9pSzhjZjJfRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnCvQwDQYJKoZIhvcN AQELBQADggEBAHdIRZNFxu63kfNuADwfkGWRg4BKMAheMU5KVdQaVqMDZ4vlM65Q tC4K05TJMMHyHg2TVHaYYVs8WdLvyZAFvOtV3Liec9ILZ6Ztt3gIN1CNZqnNEh+M YvIyil9074/uw73d/BOYDDl3H+0DpxUGmFGH/z+zCcoNXnqJIgk0eP+WGXXR5BOT glVQceXU714cXkFEvU87Z57m0KMqgeAkL0MDy8DrEkMxBVo9A2zZRbV1GMF+apQX ZMu17Mf+r0IBQJ69ldNDpo8MZO6SyTm78gjxAUz/zeVzbNha90RH+qXaiu59ekcL noy67C6uWYpPB3Pej1U4lcX5jXo/KMA30x8= -----END CERTIFICATE-----Generated at Sat Apr 26 08:20:30 2025 by rpki-client