$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/c_ecDnoVC5QkVnFc9SCcgvKWGpY.cer File: c_ecDnoVC5QkVnFc9SCcgvKWGpY.cer (raw, json) Hash identifier: sXlHg2DhNh34ibxslP5o7w89J5ITOjpgOnyp2tMdhTo= Subject key identifier: 73:F7:9C:0E:7A:15:0B:94:24:56:71:5C:F5:20:9C:82:F2:96:1A:96 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 485A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/c_ecDnoVC5QkVnFc9SCcgvKWGpY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:30:39 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 2401:c800::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18522 (0x485a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:30:39 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=73F79C0E7A150B942456715CF5209C82F2961A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7e:fa:71:77:66:52:f7:8c:33:16:9d:bd:46: 64:67:da:38:20:18:13:09:95:c3:3f:7d:be:a4:72: 51:77:cd:b2:71:38:51:4d:e4:ec:88:66:4b:1c:99: a9:4b:b2:ba:b1:9d:52:91:bd:9c:c1:e3:bd:f7:c8: 49:3b:a6:0c:97:c9:63:0c:25:7f:12:20:04:d4:b5: a9:74:da:d2:79:5d:33:2f:b1:02:0b:66:df:f9:43: 18:04:0a:23:b3:8a:34:3d:75:8c:3b:a8:0e:d3:67: 39:98:63:d5:03:c2:95:05:96:f8:61:97:6c:f1:f0: 35:8a:20:5a:39:47:6f:c6:13:3f:a4:dc:f2:57:c8: 55:f6:15:a0:5e:21:a6:45:da:fa:41:8f:a4:fa:fd: 1a:03:a8:14:d7:4c:3e:dd:31:56:2b:64:9a:29:75: a8:4b:61:71:35:cc:0c:b2:e4:70:38:85:94:aa:78: fe:7a:6c:2d:ba:52:99:8c:e7:64:ba:83:0c:52:50: 8b:43:b8:c3:48:ea:44:68:69:3e:9b:14:0a:c9:dc: 5a:7d:35:b0:4a:4e:09:75:2b:5a:3e:36:09:f9:9f: 53:4f:58:39:91:49:dc:f8:78:b7:6a:7f:b4:42:4e: ca:85:97:2a:63:e7:78:e3:f9:65:fb:86:98:5c:71: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F7:9C:0E:7A:15:0B:94:24:56:71:5C:F5:20:9C:82:F2:96:1A:96 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30295/c_ecDnoVC5QkVnFc9SCcgvKWGpY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:c800::/32 Signature Algorithm: sha256WithRSAEncryption 8e:7b:e9:bb:38:b9:1f:95:1c:c6:13:9a:e2:ed:b6:2f:65:e1: 7c:5b:2e:6d:e5:cc:a7:68:d8:7b:d2:0e:6e:e9:f9:0a:b0:9e: 14:aa:cb:ff:f1:5e:55:f9:e3:44:a6:d0:cf:a1:5e:bb:d7:f1: 61:bd:39:a3:b4:8c:83:6c:04:80:80:63:d5:8a:86:d7:f2:86: 5d:47:8a:c5:3d:d1:d1:86:c9:4d:18:87:46:42:ce:54:9e:d6: 56:f0:0a:33:34:71:fe:32:18:cd:0b:52:c4:57:75:98:cf:fa: 27:a9:83:a0:32:23:20:be:f9:f1:bc:f4:c3:d4:71:43:cf:b3: a5:de:36:b8:60:22:0d:09:47:de:d1:d6:9e:9a:aa:38:02:bb: 95:7d:88:ce:3e:2b:40:e8:d2:8e:50:6f:4e:a1:b3:fb:6e:04: 97:91:86:1f:58:87:6a:9b:b6:4e:0a:7c:b0:63:74:07:f1:f2: 88:7a:d3:85:7d:fb:c0:24:a9:df:20:95:ad:46:2f:44:07:f0: e2:4c:02:1f:08:0e:ec:46:6a:ca:03:3b:c7:c5:23:fc:c2:29: dd:14:6e:eb:f7:fe:57:51:bd:72:f0:d8:b2:7a:91:55:3a:37: c1:0e:9c:2b:9f:34:22:31:b0:69:ed:50:47:96:08:99:51:ce: 5e:bd:05:1e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICSFowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzAzOVoXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoNzNGNzlDMEU3QTE1MEI5NDI0NTY3MTVDRjUyMDlDODJGMjk2MUE5 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOp++nF3ZlL3jDMWnb1G ZGfaOCAYEwmVwz99vqRyUXfNsnE4UU3k7IhmSxyZqUuyurGdUpG9nMHjvffISTum DJfJYwwlfxIgBNS1qXTa0nldMy+xAgtm3/lDGAQKI7OKND11jDuoDtNnOZhj1QPC lQWW+GGXbPHwNYogWjlHb8YTP6Tc8lfIVfYVoF4hpkXa+kGPpPr9GgOoFNdMPt0x Vitkmil1qEthcTXMDLLkcDiFlKp4/npsLbpSmYznZLqDDFJQi0O4w0jqRGhpPpsU CsncWn01sEpOCXUrWj42CfmfU09YOZFJ3Ph4t2p/tEJOyoWXKmPneOP5ZfuGmFxx DqECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRz95wOehULlCRWcVz1IJyC8pYaljAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyOTUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjk1L2Nf ZWNEbm9WQzVRa1ZuRmM5U0NjZ3ZLV0dwWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAcgAMA0GCSqGSIb3 DQEBCwUAA4IBAQCOe+m7OLkflRzGE5ri7bYvZeF8Wy5t5cynaNh70g5u6fkKsJ4U qsv/8V5V+eNEptDPoV671/FhvTmjtIyDbASAgGPViobX8oZdR4rFPdHRhslNGIdG Qs5UntZW8AozNHH+MhjNC1LEV3WYz/onqYOgMiMgvvnxvPTD1HFDz7Ol3ja4YCIN CUfe0daemqo4AruVfYjOPitA6NKOUG9OobP7bgSXkYYfWIdqm7ZOCnywY3QH8fKI etOFffvAJKnfIJWtRi9EB/DiTAIfCA7sRmrKAzvHxSP8windFG7r9/5XUb1y8Niy epFVOjfBDpwrnzQiMbBp7VBHlgiZUc5evQUe -----END CERTIFICATE-----Generated at Sat Apr 26 08:19:34 2025 by rpki-client