$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer File: l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer (raw, json) Hash identifier: V5pqdrxG0gmnu94QEI608RtU0naYH4e4FdUOwzT/3oM= Subject key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 55C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 30 Jul 2025 06:44:52 +0000 Certificate not after: Thu 30 Jul 2026 06:29:08 +0000 Subordinate resources: IP: 2001:2f0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21957 (0x55c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 30 06:44:52 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:2c:56:40:ef:1b:56:45:1a:b9:05:ca:99: ac:68:6e:70:37:ff:db:c6:95:0b:aa:72:46:b8:ef: b3:5f:d5:ba:0e:6b:ba:d6:8b:d7:82:24:9c:34:ac: 57:98:3a:5a:e6:a8:0d:65:2f:75:36:34:b5:5a:c5: f2:f1:12:6c:9e:ea:ac:2f:16:02:5f:e7:06:ba:10: f5:3f:dd:97:57:fd:7a:64:12:99:a7:1f:08:91:f5: 7f:a9:f6:56:19:d5:a0:e7:04:8f:6f:6c:88:e6:a2: 50:c6:27:2e:e6:c1:00:87:5d:f0:13:39:b8:bb:51: c7:b9:39:19:d5:9f:d2:73:a3:15:55:d7:ac:b0:0e: 87:b6:25:17:1e:62:a7:c4:64:ec:a6:87:64:9b:2e: f2:65:44:6b:a1:67:4a:85:fd:44:8c:23:d8:20:58: 11:f0:18:5a:0c:d1:9a:76:28:26:9b:2d:1d:ed:48: 1b:5c:94:01:ce:bd:3b:79:aa:08:2e:75:aa:7a:02: ed:b3:94:dc:5c:67:f3:58:64:b0:cd:6b:80:ab:d2: 34:32:12:c3:08:7d:0f:40:be:a1:22:01:92:89:24: 58:f6:b6:c0:8d:b3:fe:38:fc:0a:0b:b5:41:b8:00: 7f:2a:2c:4f:9a:00:99:58:49:80:08:21:22:3f:79: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:2f0::/32 Signature Algorithm: sha256WithRSAEncryption 76:03:d8:06:c2:52:80:75:32:07:5f:32:04:9a:b8:d4:98:bb: 13:32:15:fc:a0:ad:32:53:bf:58:4a:b2:d1:bb:dc:48:2a:2c: 7d:33:44:1d:17:3b:1d:d1:c5:7a:d8:90:24:51:27:58:a5:f4: bd:a5:50:94:7f:6e:b4:a3:f7:08:d7:9e:c3:6f:13:7d:2c:cc: be:82:0f:e0:ef:90:4b:c1:91:0e:d5:6f:c7:7c:ef:ec:3c:d9: d9:c9:3b:80:cd:82:9c:57:92:f2:a5:ca:19:81:78:7e:ac:5d: ce:8d:42:cc:48:36:28:1b:5f:46:46:56:e1:7c:08:a6:fd:81: 8f:7b:6f:3c:c8:e9:e3:ce:dc:e0:51:c2:a3:98:5f:78:4b:8e: f1:49:94:b0:62:7d:9e:73:3e:5e:f9:58:68:9e:80:8d:6f:14: 8e:53:28:0b:4b:ab:63:a7:f5:aa:2a:bc:ec:6f:51:9c:86:40: 78:d9:ca:01:50:61:16:0d:f2:0a:8f:5e:db:2d:20:0c:28:72: af:7f:16:30:e7:5b:d7:60:20:c6:25:83:0a:e6:71:bd:87:14: 2a:95:61:9a:14:f1:6d:8d:e9:c0:37:40:25:1e:89:e4:8b:b1: 93:16:03:c4:71:ab:e5:43:18:62:a6:c2:79:98:10:91:34:be: 23:ef:2b:b4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICVcUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDczMDA2NDQ1MloXDTI2MDczMDA2MjkwOFowMzEx MC8GA1UEAxMoOTdGMkI0QjhGRTI1QTBDMEM3RjRENkZENEZBMUJBN0NBRTYxMkEx MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOY4LFZA7xtWRRq5BcqZ rGhucDf/28aVC6pyRrjvs1/Vug5rutaL14IknDSsV5g6WuaoDWUvdTY0tVrF8vES bJ7qrC8WAl/nBroQ9T/dl1f9emQSmacfCJH1f6n2VhnVoOcEj29siOaiUMYnLubB AIdd8BM5uLtRx7k5GdWf0nOjFVXXrLAOh7YlFx5ip8Rk7KaHZJsu8mVEa6FnSoX9 RIwj2CBYEfAYWgzRmnYoJpstHe1IG1yUAc69O3mqCC51qnoC7bOU3Fxn81hksM1r gKvSNDISwwh9D0C+oSIBkokkWPa2wI2z/jj8Cgu1QbgAfyosT5oAmVhJgAghIj95 SucCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSX8rS4/iWgwMf01v1Pobp8rmEqEjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyNjAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjYwL2xf SzB1UDRsb01ESDlOYjlUNkc2Zks1aEtoSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQLwMA0GCSqGSIb3 DQEBCwUAA4IBAQB2A9gGwlKAdTIHXzIEmrjUmLsTMhX8oK0yU79YSrLRu9xIKix9 M0QdFzsd0cV62JAkUSdYpfS9pVCUf260o/cI157DbxN9LMy+gg/g75BLwZEO1W/H fO/sPNnZyTuAzYKcV5LypcoZgXh+rF3OjULMSDYoG19GRlbhfAim/YGPe288yOnj ztzgUcKjmF94S47xSZSwYn2ecz5e+VhonoCNbxSOUygLS6tjp/WqKrzsb1GchkB4 2coBUGEWDfIKj17bLSAMKHKvfxYw51vXYCDGJYMK5nG9hxQqlWGaFPFtjenAN0Al Honki7GTFgPEcavlQxhipsJ5mBCRNL4j7yu0 -----END CERTIFICATE-----Generated at Mon Aug 11 07:35:46 2025 by rpki-client