$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer File: YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer (raw, json) Hash identifier: QjMojYZMlDYR+FmfirNR5usE0hZ265yu7nzr5L4713M= Subject key identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 11E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 30 Jul 2025 06:35:34 +0000 Certificate not after: Thu 30 Jul 2026 06:29:08 +0000 Subordinate resources: IP: 166.119.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4580 (0x11e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 30 06:35:34 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=60D43E3EFDB63A2F244F0E3C388C68D93EC25865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:8e:46:5c:04:6a:fb:78:41:bd:61:66:bf: aa:6c:5a:a4:09:a4:98:63:b6:33:72:ea:0a:3f:6b: 17:0c:38:83:3b:14:ce:2c:a2:57:75:b2:08:25:dd: 10:ec:f0:43:39:b9:8a:9c:e7:86:ef:de:73:32:a2: a4:7f:c5:bd:a5:f2:21:23:48:cd:b8:a9:65:23:92: fa:43:b7:18:b2:ca:b9:71:3d:0c:32:8a:7b:76:cb: f4:7b:d4:de:54:ab:89:2a:f7:f1:3e:17:f0:7f:93: f2:6d:cd:84:8b:a8:eb:e9:4a:e0:8c:fb:ba:61:34: b1:3b:a9:92:75:c4:9c:f8:43:80:26:e3:a6:92:94: d3:04:60:99:8c:96:42:52:a2:d4:b0:14:7a:97:89: f2:c5:21:fd:e1:b9:51:71:94:12:f9:5d:98:e4:b0: 25:7d:f4:ee:de:56:53:9c:1e:f2:07:18:89:6b:1a: 49:47:8e:a8:96:9f:a1:bf:a8:36:78:ee:2c:da:ce: f1:08:36:26:a7:f8:65:e4:7d:fa:fe:b3:eb:3e:53: 14:e9:e7:e0:03:32:5b:10:58:50:f3:be:db:ca:49: f8:03:dc:cd:68:44:a9:9c:33:af:8b:cd:e7:5d:35: f3:10:bc:fd:39:76:35:8e:40:ee:a2:c7:39:bc:2a: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.119.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:84:b8:1f:21:17:1e:dd:e7:85:6b:29:d2:25:96:fd:f6:7b: df:a5:90:4f:2c:ef:d3:b8:4b:e9:d9:74:4b:7f:09:8d:b1:53: cd:c7:80:84:26:c2:ab:60:60:08:26:90:bd:bc:42:ec:6a:68: e4:c8:19:23:70:90:a1:08:3d:58:c5:21:81:af:49:7b:82:24: 4c:56:4f:63:67:40:3a:c1:c8:fb:53:76:e6:fc:82:c9:c2:76: 0c:dd:9f:7b:ee:9e:f0:3b:2f:43:ef:1e:5f:31:d4:4e:26:e9: aa:00:46:59:fd:10:4e:ff:9e:5d:0f:c8:e5:04:92:b1:39:47: ec:dd:ec:73:82:06:d7:5f:ba:fc:e8:a9:8b:a4:24:25:c8:2a: 07:ae:38:5f:f5:12:8a:a1:4b:65:ed:73:60:3a:cb:4c:dc:a8: 3d:fb:e6:ff:8a:ab:44:68:30:be:78:1c:e8:c8:a5:af:96:b2: 45:09:de:ea:e7:38:95:82:95:68:ce:58:40:bb:1a:d3:dc:5b: 61:3e:8e:09:f7:29:5e:43:81:4e:95:41:6b:83:2c:d5:40:65: b7:8f:85:07:be:b2:25:8e:40:15:8d:03:7b:5f:df:f2:80:bc: c4:dd:47:8e:c5:60:9d:2e:9e:31:54:77:a4:56:75:d9:40:53: f3:7d:cc:e0 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICEeQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDczMDA2MzUzNFoXDTI2MDczMDA2MjkwOFowMzEx MC8GA1UEAxMoNjBENDNFM0VGREI2M0EyRjI0NEYwRTNDMzg4QzY4RDkzRUMyNTg2 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFZjkZcBGr7eEG9YWa/ qmxapAmkmGO2M3LqCj9rFww4gzsUziyiV3WyCCXdEOzwQzm5ipznhu/eczKipH/F vaXyISNIzbipZSOS+kO3GLLKuXE9DDKKe3bL9HvU3lSriSr38T4X8H+T8m3NhIuo 6+lK4Iz7umE0sTupknXEnPhDgCbjppKU0wRgmYyWQlKi1LAUepeJ8sUh/eG5UXGU EvldmOSwJX307t5WU5we8gcYiWsaSUeOqJafob+oNnjuLNrO8Qg2Jqf4ZeR9+v6z 6z5TFOnn4AMyWxBYUPO+28pJ+APczWhEqZwzr4vN51018xC8/Tl2NY5A7qLHObwq pj8CAwEAAaOCAoowggKGMB0GA1UdDgQWBBRg1D4+/bY6LyRPDjw4jGjZPsJYZTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxODYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTg2L1lO US1QdjIyT2k4a1R3NDhPSXhvMlQ3Q1dHVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCmdzANBgkqhkiG9w0B AQsFAAOCAQEAS4S4HyEXHt3nhWsp0iWW/fZ736WQTyzv07hL6dl0S38JjbFTzceA hCbCq2BgCCaQvbxC7Gpo5MgZI3CQoQg9WMUhga9Je4IkTFZPY2dAOsHI+1N25vyC ycJ2DN2fe+6e8DsvQ+8eXzHUTibpqgBGWf0QTv+eXQ/I5QSSsTlH7N3sc4IG11+6 /Oipi6QkJcgqB644X/USiqFLZe1zYDrLTNyoPfvm/4qrRGgwvngc6Milr5ayRQne 6uc4lYKVaM5YQLsa09xbYT6OCfcpXkOBTpVBa4Ms1UBlt4+FB76yJY5AFY0De1/f 8oC8xN1HjsVgnS6eMVR3pFZ12UBT833M4A== -----END CERTIFICATE-----Generated at Wed Aug 13 07:59:37 2025 by rpki-client