$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer File: ivQg8ZIA4Rvkro2RTroqy0KRe24.cer (raw, json) Hash identifier: JMAPNmrIEi3iMV67DDMAnk2bcT0Y/zf14/KJOX41iCw= Subject key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:37:32 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 103.40.128.0/22 IP: 202.140.192.0/19 IP: 219.100.132.0/22 IP: 220.152.96.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18839 (0x4997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:37:32 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:3f:61:7a:77:16:e2:83:a2:e3:0f:a1:09: 92:4c:52:9a:b5:de:72:f7:fe:c0:db:b9:39:d4:fb: cf:33:db:f5:b3:7d:8a:24:71:f1:7f:fa:fc:7e:b7: 19:52:f3:82:0f:83:cc:9a:ec:91:6d:9b:b4:ae:b1: 1e:84:a0:a9:95:8f:7e:aa:01:31:59:91:97:46:4d: 1e:9e:ba:f0:94:ee:dd:a6:74:37:47:21:41:11:fe: 8b:86:84:f6:ec:fe:c7:df:88:71:2d:b6:fa:67:3e: 37:57:c7:85:dc:a4:e9:81:3f:d4:5d:d6:22:02:b2: 77:ab:99:5c:c1:ab:fa:8d:50:f3:05:04:60:86:03: 81:5e:af:f4:dc:2b:4b:8f:a4:f4:d7:a0:e2:01:cc: 1e:99:d3:80:10:f1:77:40:2a:3d:70:05:a3:5e:c8: e5:11:88:55:54:67:fb:37:4d:cc:a4:e1:4b:4b:f3: c8:56:4b:c9:4d:44:83:9a:03:fc:7e:2e:b1:4e:8d: d6:4c:9b:c1:3e:52:d1:aa:c5:b2:ff:28:7a:24:f8: f3:bb:b5:4f:a1:7f:35:c0:a7:63:e9:ef:9a:23:50: 2c:28:f4:3d:80:2c:ab:33:e9:ca:92:e2:df:d7:c9: e9:40:d5:96:6c:40:7d:3b:c8:04:ca:d3:98:56:4f: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.128.0/22 202.140.192.0/19 219.100.132.0/22 220.152.96.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:ed:09:aa:44:62:cc:1f:27:eb:73:6b:af:57:40:a4:dd:5f: 2c:60:2d:2b:ae:96:75:01:cf:7a:a9:18:7e:2f:88:f0:21:31: 4b:75:01:b8:ac:b0:f2:5b:26:a1:68:41:d6:72:aa:f9:07:f8: 43:75:29:2b:60:0a:0c:84:ea:bb:9c:5f:1f:39:fb:b6:cc:0e: 48:87:a8:a2:7f:e1:fd:2a:3d:be:84:a2:2f:7b:ff:2d:58:5f: cb:24:5a:f9:ce:b0:fc:0a:12:a8:a2:cc:01:ec:3b:b9:c2:9b: 63:98:be:2b:c7:9b:ef:73:e9:38:19:06:5e:d5:f3:70:8e:60: c3:4c:b0:ab:d4:7c:5b:af:89:a8:43:02:41:e2:60:8a:ac:e8: 21:cd:d8:57:77:f4:81:c4:97:f2:55:6f:fa:03:d8:01:b8:51: 4d:46:25:76:30:2c:a3:52:b3:04:f4:bf:df:0f:80:2e:88:0c: cb:46:ff:52:51:d0:34:d0:3c:d7:bc:d9:44:f1:3f:8c:1e:99: 34:8d:4e:9a:47:b3:8d:02:db:03:53:94:c6:2c:bf:9a:f5:f1: 12:17:11:ee:6e:a3:c6:d6:bf:99:4c:44:42:33:a1:49:2c:c6: 9f:c1:fa:32:43:ad:87:0e:1a:3e:a5:44:10:b7:90:8b:e8:9c: f8:b6:65:d4 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICSZcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzczMloXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoOEFGNDIwRjE5MjAwRTExQkU0QUU4RDkxNEVCQTJBQ0I0MjkxN0I2 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANKaP2F6dxbig6LjD6EJ kkxSmrXecvf+wNu5OdT7zzPb9bN9iiRx8X/6/H63GVLzgg+DzJrskW2btK6xHoSg qZWPfqoBMVmRl0ZNHp668JTu3aZ0N0chQRH+i4aE9uz+x9+IcS22+mc+N1fHhdyk 6YE/1F3WIgKyd6uZXMGr+o1Q8wUEYIYDgV6v9NwrS4+k9Neg4gHMHpnTgBDxd0Aq PXAFo17I5RGIVVRn+zdNzKThS0vzyFZLyU1Eg5oD/H4usU6N1kybwT5S0arFsv8o eiT487u1T6F/NcCnY+nvmiNQLCj0PYAsqzPpypLi39fJ6UDVlmxAfTvIBMrTmFZP 550CAwEAAaOCApgwggKUMB0GA1UdDgQWBBSK9CDxkgDhG+SujZFOuirLQpF7bjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84ODQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg4NC9pdlFnOFpJ QTRSdmtybzJSVHJvcXkwS1JlMjQubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCZyiAAwQFyozAAwQC22SEAwQE 3JhgMA0GCSqGSIb3DQEBCwUAA4IBAQA+7QmqRGLMHyfrc2uvV0Ck3V8sYC0rrpZ1 Ac96qRh+L4jwITFLdQG4rLDyWyahaEHWcqr5B/hDdSkrYAoMhOq7nF8fOfu2zA5I h6iif+H9Kj2+hKIve/8tWF/LJFr5zrD8ChKooswB7Du5wptjmL4rx5vvc+k4GQZe 1fNwjmDDTLCr1Hxbr4moQwJB4mCKrOghzdhXd/SBxJfyVW/6A9gBuFFNRiV2MCyj UrME9L/fD4AuiAzLRv9SUdA00DzXvNlE8T+MHpk0jU6aR7ONAtsDU5TGLL+a9fES FxHubqPG1r+ZTERCM6FJLMafwfoyQ62HDho+pUQQt5CL6Jz4tmXU -----END CERTIFICATE-----Generated at Sat Apr 26 08:23:17 2025 by rpki-client