$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer File: gcATaiDHNuoCKbzbtbWtDP420oY.cer (raw, json) Hash identifier: 9k/YR86MifCEktQPJtKFaa0ASMBUoXycP0PB+XsA7/Q= Subject key identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 48AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:32:02 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 61.195.44.0/22 IP: 103.173.104.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18602 (0x48aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:32:02 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:62:86:db:87:1a:fa:d4:ce:99:f0:4c:68: 52:64:1a:11:af:da:7c:73:5f:11:5f:3b:db:ca:b8: f0:73:28:3e:b6:13:42:29:6f:7d:3e:1b:4a:45:c5: c6:f7:cf:2c:52:c5:03:66:38:3e:e8:7c:5b:d6:1c: 77:4c:17:02:dd:21:7c:e6:2d:69:60:5c:b4:04:c7: a5:02:26:6e:86:2e:c0:2c:1b:8e:aa:74:9d:b2:2b: 33:f1:9a:f6:f9:7d:c5:6e:01:f6:77:c9:5c:a2:cd: bc:df:75:cd:11:4d:ac:66:c8:df:a1:5d:4e:48:06: ff:19:1a:7f:0b:ef:04:14:4b:af:c6:5e:ce:27:52: 08:92:53:a4:e7:c4:40:6e:49:38:fd:e8:6c:66:d2: 72:c8:27:c7:cc:ca:6b:89:65:4a:d6:ca:3b:3d:7b: 2f:e2:53:65:7a:fa:fb:45:74:7d:11:68:42:88:0f: 3d:6b:f7:a0:73:0d:63:36:25:f5:ab:5b:38:84:c4: a1:1f:47:65:66:29:93:10:7b:da:c4:3c:d8:2c:c7: bb:df:cc:34:a0:ab:72:cf:44:07:fe:dd:53:03:8e: d3:02:d4:5d:9e:8f:85:45:ae:cc:ec:db:9d:1a:75: 28:b5:48:1f:9c:04:19:6e:ee:d0:95:75:2b:69:f5: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.44.0/22 103.173.104.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:ff:13:69:f5:2e:8f:88:85:ee:4b:0e:ac:8b:42:67:bf:81: b1:8f:df:a5:e0:41:6f:66:ff:c8:f3:ad:cf:0c:0a:9a:88:13: 25:65:5f:4f:5e:6b:13:c9:38:75:35:c2:8e:7a:78:b3:e0:81: 66:d4:f1:50:28:ac:2c:d7:d2:67:5b:ba:d9:c2:39:11:b1:7c: 5a:4e:04:ed:40:9b:51:76:b3:4a:ae:d3:6a:42:00:cc:f3:5a: 41:bf:c1:07:e8:1d:e2:ac:85:3d:bb:17:c1:d8:2b:ea:fb:be: a1:43:71:23:65:c9:c7:e9:3a:53:28:11:02:63:17:08:11:72: a0:9e:5a:19:89:78:b6:fd:d7:60:51:21:61:1c:ba:d6:0e:62: 1c:28:19:c0:52:14:5e:3d:d3:73:1b:d0:2e:bb:1b:de:3e:d7: 4c:33:51:01:81:d4:58:58:1f:da:d5:a6:2e:c3:90:16:8e:0f: 5a:07:01:7b:66:e4:3f:c5:67:5c:e5:cf:20:ba:de:18:d4:50: 93:a6:fa:ab:88:4e:cf:68:30:ba:4a:eb:01:d7:a3:16:f9:a3: 68:63:dd:00:88:a9:30:60:eb:b6:85:1e:53:34:c0:21:5d:91: 1f:b4:d4:2f:40:9d:ba:65:05:f1:36:a9:cb:f4:d6:31:fe:f4: f5:f3:7a:c9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICSKowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzIwMloXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoODFDMDEzNkEyMEM3MzZFQTAyMjlCQ0RCQjVCNUFEMENGRTM2RDI4 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALL1Yobbhxr61M6Z8Exo UmQaEa/afHNfEV8728q48HMoPrYTQilvfT4bSkXFxvfPLFLFA2Y4Puh8W9Ycd0wX At0hfOYtaWBctATHpQImboYuwCwbjqp0nbIrM/Ga9vl9xW4B9nfJXKLNvN91zRFN rGbI36FdTkgG/xkafwvvBBRLr8ZezidSCJJTpOfEQG5JOP3obGbScsgnx8zKa4ll StbKOz17L+JTZXr6+0V0fRFoQogPPWv3oHMNYzYl9atbOITEoR9HZWYpkxB72sQ8 2CzHu9/MNKCrcs9EB/7dUwOO0wLUXZ6PhUWuzOzbnRp1KLVIH5wEGW7u0JV1K2n1 JxsCAwEAAaOCApEwggKNMB0GA1UdDgQWBBSBwBNqIMc26gIpvNu1ta0M/jbShjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxNjgvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTY4L2dj QVRhaURITnVvQ0tiemJ0Yld0RFA0MjBvWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAI9wywDBAFnrWgwDQYJ KoZIhvcNAQELBQADggEBAB3/E2n1Lo+Ihe5LDqyLQme/gbGP36XgQW9m/8jzrc8M CpqIEyVlX09eaxPJOHU1wo56eLPggWbU8VAorCzX0mdbutnCORGxfFpOBO1Am1F2 s0qu02pCAMzzWkG/wQfoHeKshT27F8HYK+r7vqFDcSNlycfpOlMoEQJjFwgRcqCe WhmJeLb912BRIWEcutYOYhwoGcBSFF4903Mb0C67G94+10wzUQGB1FhYH9rVpi7D kBaOD1oHAXtm5D/FZ1zlzyC63hjUUJOm+quITs9oMLpK6wHXoxb5o2hj3QCIqTBg 67aFHlM0wCFdkR+01C9AnbplBfE2qcv01jH+9PXzesk= -----END CERTIFICATE-----Generated at Sat Apr 26 08:22:30 2025 by rpki-client