$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/cbl08P003cNUr5YaeOhOUR01GmM.cer File: cbl08P003cNUr5YaeOhOUR01GmM.cer (raw, json) Hash identifier: TUAxdvBJmdokGzHqGdh+/4VWaff5ZAUGFMWYzOq9IX4= Subject key identifier: 71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:37:54 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 85.131.192.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: Oct 15 01:37:54 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=71B974F0FD34DDC354AF961A78E84E511D351A63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:68:69:3e:17:91:99:b7:89:37:72:cf:a7: 60:97:49:d4:fb:6a:00:22:ba:04:ef:57:dc:c7:85: 93:6e:f2:6c:65:8d:3f:6b:c3:b2:18:ba:d9:8f:1c: d2:c1:3a:d5:a1:ad:96:8e:2e:24:86:79:0e:b1:de: f5:93:57:ff:f1:f3:6c:c1:63:38:0f:62:b1:80:40: be:f0:f8:59:0b:3f:30:f6:69:2c:6a:d0:1b:0d:42: b3:89:8c:4e:b1:ab:ed:85:af:bd:d4:91:18:fb:44: 56:8f:12:dd:da:2d:c8:1b:ae:f2:91:98:e5:cc:31: c7:66:7b:30:80:d5:99:65:57:0b:ef:fe:ba:3e:db: 38:9a:eb:22:57:ce:87:9d:47:60:4d:a7:dc:76:57: de:cf:ff:36:09:ff:f8:df:af:31:a0:37:dc:95:7a: 74:4f:1f:72:1e:fd:68:f7:78:4f:c8:d1:5d:4d:5b: 59:4b:b2:5b:e7:42:44:f4:9b:15:b8:7b:bd:b2:2c: cc:b2:f4:ed:c1:93:40:b4:03:69:3a:71:36:84:d9: ed:30:3c:e8:6e:be:ea:f3:1e:67:c0:74:f4:ef:82: fb:d8:d0:4c:48:ff:59:80:36:8e:a5:58:ae:fa:78: 08:1e:8a:79:87:08:26:e1:4c:4a:ec:fc:91:50:56: 1f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 85.131.192.0/18 Signature Algorithm: sha256WithRSAEncryption bb:1a:d2:8e:c8:c6:7b:c9:85:02:47:97:e1:a0:ea:c2:ba:b1: 44:53:71:83:72:ca:a3:02:f2:7c:6e:3e:83:a9:55:79:47:11: ea:f9:06:04:df:50:fb:6a:6f:5e:44:6d:10:af:28:c2:fc:2c: 16:b5:e2:b9:8c:6e:4a:09:af:22:1d:a3:03:89:16:4e:d9:9e: bb:07:88:0b:88:8e:69:6a:e4:f5:25:08:7f:07:7d:a6:0c:1c: d0:29:cc:29:f1:c8:8f:e8:d3:fd:53:e4:e2:6b:25:b5:4a:25: ec:fc:0a:79:de:49:ec:cc:13:88:5d:43:a1:8f:78:bb:20:c9: 1e:2e:5f:5e:db:74:2f:95:00:b3:1d:08:a5:8f:d8:b6:a3:b0: 47:74:a0:1b:15:54:3d:04:9f:8d:31:ac:ad:d7:07:7d:d7:d0: a7:6b:ce:46:1d:37:6f:58:d7:1b:06:a1:8b:26:a1:82:9c:fa: d0:c1:3d:d0:d2:ba:ca:d5:06:c7:1a:f1:78:b2:2c:99:5e:1a: 9a:68:9d:68:99:4b:5f:98:7d:97:8a:42:4c:ee:e1:b9:6e:52: 2a:8c:8e:d6:48:27:5c:50:01:fc:63:e1:e0:a0:f4:73:49:03: 96:2a:e4:79:0d:b4:e1:b1:e4:3e:87:d8:40:96:54:a3:68:20: 85:99:74:58 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI1MTAxNTAxMzc1NFoXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoNzFCOTc0RjBGRDM0RERDMzU0QUY5NjFBNzhFODRFNTExRDM1MUE2 MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOyaGk+F5GZt4k3cs+n YJdJ1PtqACK6BO9X3MeFk27ybGWNP2vDshi62Y8c0sE61aGtlo4uJIZ5DrHe9ZNX //HzbMFjOA9isYBAvvD4WQs/MPZpLGrQGw1Cs4mMTrGr7YWvvdSRGPtEVo8S3dot yBuu8pGY5cwxx2Z7MIDVmWVXC+/+uj7bOJrrIlfOh51HYE2n3HZX3s//Ngn/+N+v MaA33JV6dE8fch79aPd4T8jRXU1bWUuyW+dCRPSbFbh7vbIszLL07cGTQLQDaTpx NoTZ7TA86G6+6vMeZ8B09O+C+9jQTEj/WYA2jqVYrvp4CB6KeYcIJuFMSuz8kVBW H/8CAwEAAaOCAoYwggKCMB0GA1UdDgQWBBRxuXTw/TTdw1Svlhp46E5RHTUaYzAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC85OTAvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzk5MC9jYmwwOFAw MDNjTlVyNVlhZU9oT1VSMDFHbU0ubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGVYPAMA0GCSqGSIb3DQEBCwUA A4IBAQC7GtKOyMZ7yYUCR5fhoOrCurFEU3GDcsqjAvJ8bj6DqVV5RxHq+QYE31D7 am9eRG0QryjC/CwWteK5jG5KCa8iHaMDiRZO2Z67B4gLiI5pauT1JQh/B32mDBzQ Kcwp8ciP6NP9U+TiayW1SiXs/Ap53knszBOIXUOhj3i7IMkeLl9e23QvlQCzHQil j9i2o7BHdKAbFVQ9BJ+NMayt1wd919Cna85GHTdvWNcbBqGLJqGCnPrQwT3Q0rrK 1QbHGvF4siyZXhqaaJ1omUtfmH2XikJM7uG5blIqjI7WSCdcUAH8Y+HgoPRzSQOW KuR5DbThseQ+h9hAllSjaCCFmXRY -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:53 2025 by rpki-client