$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer File: gcATaiDHNuoCKbzbtbWtDP420oY.cer (raw, json) Hash identifier: GcHFFEeRIP84vVqdjA9w4vogb0bnSQ+DIcShkzoRzfs= Subject key identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:39:17 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 61.195.44.0/22 IP: 103.173.104.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23346 (0x5b32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:39:17 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:62:86:db:87:1a:fa:d4:ce:99:f0:4c:68: 52:64:1a:11:af:da:7c:73:5f:11:5f:3b:db:ca:b8: f0:73:28:3e:b6:13:42:29:6f:7d:3e:1b:4a:45:c5: c6:f7:cf:2c:52:c5:03:66:38:3e:e8:7c:5b:d6:1c: 77:4c:17:02:dd:21:7c:e6:2d:69:60:5c:b4:04:c7: a5:02:26:6e:86:2e:c0:2c:1b:8e:aa:74:9d:b2:2b: 33:f1:9a:f6:f9:7d:c5:6e:01:f6:77:c9:5c:a2:cd: bc:df:75:cd:11:4d:ac:66:c8:df:a1:5d:4e:48:06: ff:19:1a:7f:0b:ef:04:14:4b:af:c6:5e:ce:27:52: 08:92:53:a4:e7:c4:40:6e:49:38:fd:e8:6c:66:d2: 72:c8:27:c7:cc:ca:6b:89:65:4a:d6:ca:3b:3d:7b: 2f:e2:53:65:7a:fa:fb:45:74:7d:11:68:42:88:0f: 3d:6b:f7:a0:73:0d:63:36:25:f5:ab:5b:38:84:c4: a1:1f:47:65:66:29:93:10:7b:da:c4:3c:d8:2c:c7: bb:df:cc:34:a0:ab:72:cf:44:07:fe:dd:53:03:8e: d3:02:d4:5d:9e:8f:85:45:ae:cc:ec:db:9d:1a:75: 28:b5:48:1f:9c:04:19:6e:ee:d0:95:75:2b:69:f5: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.44.0/22 103.173.104.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:d3:f8:42:e9:14:27:ab:b6:5e:91:c4:7f:54:15:a8:cd:84: 50:e1:86:8d:2d:92:17:e2:3f:fc:a2:7e:8b:7f:9d:8e:b1:ee: b7:da:39:1d:3b:6d:ed:8f:43:cc:f2:95:eb:c8:56:5a:ce:70: 1f:6c:35:18:66:29:25:d0:b8:3f:00:4b:96:d9:ba:de:68:4c: 0f:0b:93:fb:d9:20:8e:3a:24:10:52:f1:59:34:a3:51:88:b8: 9a:36:28:a6:67:9a:84:52:67:05:8d:63:7d:8c:23:73:d2:6e: 43:e7:9b:d6:b5:06:0f:3a:2a:e2:02:1b:90:b5:b0:d4:7d:12: 0b:1f:c4:9e:eb:1f:73:a6:20:14:50:6e:64:c3:ac:ca:35:fa: 2e:22:68:82:fb:7e:5e:fa:8c:22:57:9c:d4:7f:da:f7:6c:a3: 83:2d:a0:36:48:c9:3c:a0:fa:08:be:7c:d0:37:a6:cb:a4:bc: 2e:3d:1e:1b:a7:3d:cd:9e:67:a6:80:5c:cb:11:8d:06:c9:a9: 9f:a7:f3:38:93:c1:08:83:5f:a0:cb:20:7f:5c:6f:f4:be:f5: f9:6f:74:db:f1:d4:21:fb:a1:4e:02:20:a6:73:c7:e8:fb:d9: 0f:3f:b1:69:a1:9d:dd:b4:67:d8:97:7c:5b:2e:c7:1e:22:a9: d8:2a:94:67 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICWzIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxMzkxN1oXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoODFDMDEzNkEyMEM3MzZFQTAyMjlCQ0RCQjVCNUFEMENGRTM2RDI4 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALL1Yobbhxr61M6Z8Exo UmQaEa/afHNfEV8728q48HMoPrYTQilvfT4bSkXFxvfPLFLFA2Y4Puh8W9Ycd0wX At0hfOYtaWBctATHpQImboYuwCwbjqp0nbIrM/Ga9vl9xW4B9nfJXKLNvN91zRFN rGbI36FdTkgG/xkafwvvBBRLr8ZezidSCJJTpOfEQG5JOP3obGbScsgnx8zKa4ll StbKOz17L+JTZXr6+0V0fRFoQogPPWv3oHMNYzYl9atbOITEoR9HZWYpkxB72sQ8 2CzHu9/MNKCrcs9EB/7dUwOO0wLUXZ6PhUWuzOzbnRp1KLVIH5wEGW7u0JV1K2n1 JxsCAwEAAaOCApEwggKNMB0GA1UdDgQWBBSBwBNqIMc26gIpvNu1ta0M/jbShjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxNjgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTY4L2dj QVRhaURITnVvQ0tiemJ0Yld0RFA0MjBvWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAI9wywDBAFnrWgwDQYJ KoZIhvcNAQELBQADggEBAD7T+ELpFCertl6RxH9UFajNhFDhho0tkhfiP/yifot/ nY6x7rfaOR07be2PQ8zylevIVlrOcB9sNRhmKSXQuD8AS5bZut5oTA8Lk/vZII46 JBBS8Vk0o1GIuJo2KKZnmoRSZwWNY32MI3PSbkPnm9a1Bg86KuICG5C1sNR9Egsf xJ7rH3OmIBRQbmTDrMo1+i4iaIL7fl76jCJXnNR/2vdso4MtoDZIyTyg+gi+fNA3 psukvC49HhunPc2eZ6aAXMsRjQbJqZ+n8ziTwQiDX6DLIH9cb/S+9flvdNvx1CH7 oU4CIKZzx+j72Q8/sWmhnd20Z9iXfFsuxx4iqdgqlGc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:32:43 2025 by rpki-client