$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer File: Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer (raw, json) Hash identifier: 9MVIrck8VlbXVcl98dtM1QTMtHfUXYy2drrXwQ7RSHI= Subject key identifier: 67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 493D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:35:57 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 2405:8500::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18749 (0x493d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:35:57 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=675815DB7349C2ACFBC48AA75306520050C26248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:40:e6:6b:c6:85:0d:0e:6d:bf:b3:31:a7: c6:c7:40:94:06:99:eb:94:ed:ad:df:6d:bc:e7:5b: 80:9c:d4:04:45:38:e9:13:10:fd:70:9a:f1:6f:24: 34:38:d6:08:9c:b6:81:25:45:58:c6:67:14:69:8a: b7:ee:c6:68:4f:69:d0:b8:24:88:94:27:06:10:99: 54:aa:f0:5f:f0:59:21:b3:07:36:78:cc:29:f0:ad: 4a:d1:ad:40:0b:f4:32:79:e9:68:df:d4:ac:3f:29: 98:a6:cf:7d:1a:94:cb:8c:17:fa:43:4b:e7:18:5f: 45:00:df:9c:79:77:e1:84:3b:b3:ef:85:4c:63:ad: 11:e3:56:64:90:7b:b7:c3:e3:6a:88:59:87:88:11: de:8c:a1:c1:e5:55:63:e4:0a:25:7f:76:8b:5c:5e: 35:f3:1d:65:e7:ed:8a:c3:b1:50:19:d2:da:b3:78: 4c:6f:55:af:53:a6:3b:9f:38:0d:a9:30:65:5d:35: 86:94:e8:80:65:da:cb:16:32:81:0d:20:31:8d:51: b5:6e:6a:29:30:0d:b8:b3:3d:5b:3b:c8:db:62:bf: bf:26:97:f3:93:e3:fb:f1:5a:10:b3:3a:b1:92:23: 58:8c:d5:bf:ed:9e:d2:cb:35:0c:3d:06:45:36:b3: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:8500::/32 Signature Algorithm: sha256WithRSAEncryption 98:f8:9f:1f:21:85:43:90:06:2a:49:3e:a8:c7:a3:47:2c:e3: 13:91:56:0a:64:7b:e7:ab:89:cf:cc:a2:59:4e:1f:5c:7a:1c: 4c:dd:e7:ca:44:30:92:ff:7d:59:ba:49:54:b4:18:c9:8e:6b: b5:e5:e3:96:77:12:63:8b:ae:aa:ec:eb:cc:96:fb:de:6b:88: f9:3f:18:1e:6f:6b:0f:b8:d1:fb:17:95:fc:64:40:62:98:cb: df:1a:35:ee:31:ab:ff:61:9a:e0:53:fd:52:d0:f3:0d:3e:75: a8:74:35:b4:94:ed:76:a2:38:d3:29:82:cc:34:d7:de:b1:45: 7a:d6:55:cd:9a:57:36:29:ad:11:64:fb:ca:68:51:7a:62:78: 26:ed:5d:cf:89:17:60:7f:f2:b9:74:21:72:70:a2:cb:92:8a: 9c:1a:9a:69:a8:27:5f:f4:81:4a:3f:66:08:21:76:7c:65:a0: ca:37:bd:00:9d:57:eb:14:54:ea:57:60:eb:2a:23:f9:6f:3d: 64:9b:56:cb:ff:eb:a2:0f:2f:2e:b5:60:f0:85:22:d4:52:58: b9:a8:23:2b:03:84:87:55:13:23:0e:54:34:27:c4:7f:a9:9d: a8:c9:bd:16:1d:1b:82:88:28:ec:da:47:02:eb:47:86:a5:69: 96:92:d8:0f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICST0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzU1N1oXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoNjc1ODE1REI3MzQ5QzJBQ0ZCQzQ4QUE3NTMwNjUyMDA1MEMyNjI0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/gQOZrxoUNDm2/szGn xsdAlAaZ65Ttrd9tvOdbgJzUBEU46RMQ/XCa8W8kNDjWCJy2gSVFWMZnFGmKt+7G aE9p0LgkiJQnBhCZVKrwX/BZIbMHNnjMKfCtStGtQAv0MnnpaN/UrD8pmKbPfRqU y4wX+kNL5xhfRQDfnHl34YQ7s++FTGOtEeNWZJB7t8PjaohZh4gR3oyhweVVY+QK JX92i1xeNfMdZeftisOxUBnS2rN4TG9Vr1OmO584DakwZV01hpTogGXayxYygQ0g MY1RtW5qKTANuLM9WzvI22K/vyaX85Pj+/FaELM6sZIjWIzVv+2e0ss1DD0GRTaz +pECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRnWBXbc0nCrPvEiqdTBlIAUMJiSDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzNTkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzU5L1ox Z1YyM05Kd3F6N3hJcW5Vd1pTQUZEQ1lrZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBYUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCY+J8fIYVDkAYqST6ox6NHLOMTkVYKZHvnq4nPzKJZTh9cehxM 3efKRDCS/31ZuklUtBjJjmu15eOWdxJji66q7OvMlvvea4j5Pxgeb2sPuNH7F5X8 ZEBimMvfGjXuMav/YZrgU/1S0PMNPnWodDW0lO12ojjTKYLMNNfesUV61lXNmlc2 Ka0RZPvKaFF6Yngm7V3PiRdgf/K5dCFycKLLkoqcGpppqCdf9IFKP2YIIXZ8ZaDK N70AnVfrFFTqV2DrKiP5bz1km1bL/+uiDy8utWDwhSLUUli5qCMrA4SHVRMjDlQ0 J8R/qZ2oyb0WHRuCiCjs2kcC60eGpWmWktgP -----END CERTIFICATE-----Generated at Sat Apr 26 08:22:11 2025 by rpki-client