$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer File: nVpUDBIv0McM5REXAET_ZYDXYxs.cer (raw, json) Hash identifier: VfJIa+LwIiizMdfwY9Vv3mvh2G3mR9BQmCxbPy5IjqY= Subject key identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 49BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:38:11 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 2404:c700::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18875 (0x49bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:38:11 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9D5A540C122FD0C70CE511170044FF6580D7631B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:7b:90:b4:f9:ee:d8:08:d8:90:27:f3:d7: 28:e1:88:62:06:c6:df:3f:dd:f6:61:07:f8:5f:77: b2:ab:60:08:88:aa:17:e1:f7:25:63:ee:ab:35:83: c7:27:5c:58:5b:91:a6:cc:9f:c5:80:10:dc:df:b4: 7e:43:e4:e2:52:fb:14:3f:11:34:39:f5:c4:d1:bc: 62:2f:2a:c9:4b:d8:33:b8:7d:c6:a6:b5:4d:7f:a4: 0b:de:8f:c2:d8:46:04:3a:26:81:a8:8d:1e:11:3d: 22:51:f8:57:15:72:f8:6a:c7:a8:fa:ba:e9:a8:69: ed:12:7c:19:21:f3:bd:9c:34:74:de:e5:31:5d:55: 5b:bb:36:8a:c7:49:b1:da:07:8b:70:89:0e:ca:bc: 9e:2d:8d:ef:f6:8f:b0:47:1c:b1:6e:51:ec:7e:9d: c1:82:51:bd:0c:40:24:b9:bb:fb:2d:21:de:7c:c8: b7:8d:dc:2c:2d:cb:59:2d:7f:02:23:1d:04:59:f5: 65:c6:0a:ac:c6:2c:59:3b:41:cc:bf:e3:c7:d5:27: e7:db:07:8a:8b:b5:ca:dd:47:74:b0:a1:49:99:c0: 8c:0b:f1:4b:19:41:31:82:5c:c2:71:db:61:6f:8e: 06:ef:b8:75:7c:0f:65:73:59:0b:4c:55:6f:e4:f7: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:c700::/32 Signature Algorithm: sha256WithRSAEncryption 42:84:04:5c:fb:76:85:9a:b5:4e:78:cc:c8:6c:a4:dd:6a:49: 2e:66:a2:34:46:72:2e:06:00:c3:a1:64:7a:26:46:55:43:e0: 76:da:d2:c7:e8:f9:61:d9:7b:dc:83:ec:bf:1c:d5:6e:f5:8d: 2d:13:e4:fa:2d:33:f5:b8:47:34:2a:f6:39:a6:8d:4d:ed:95: 8f:fe:ec:70:88:f3:56:fa:a6:8b:c1:bd:fa:2b:96:4a:8a:e5: 6d:00:a4:0f:95:23:21:b0:02:a3:15:43:56:f3:d1:a4:27:db: da:30:c2:70:11:fe:92:a7:3d:ee:2c:bb:41:8f:84:7b:4c:f8: b5:cd:ee:dd:dd:29:ce:49:95:f0:fe:36:7e:e9:86:89:29:4b: 59:51:05:b5:98:f7:b1:ca:55:94:89:3f:f5:c0:89:f5:89:66: 74:8e:11:11:65:3e:0e:9f:7d:6d:e0:23:bc:2c:21:fb:d4:ee: 11:97:0b:5d:d3:76:67:69:8b:f0:57:d2:40:0b:3b:05:6f:57: 79:19:ca:d9:05:92:af:ae:55:d7:68:4b:6a:03:11:fa:ff:c9: 6e:a2:0b:c5:ca:93:50:70:10:2e:f1:3e:78:7f:90:79:68:06: 8c:b2:b6:82:66:10:f8:0f:88:41:84:4f:b9:f9:e4:60:a4:0f: 04:fe:91:46 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICSbswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzgxMVoXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoOUQ1QTU0MEMxMjJGRDBDNzBDRTUxMTE3MDA0NEZGNjU4MEQ3NjMx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIJe5C0+e7YCNiQJ/PX KOGIYgbG3z/d9mEH+F93sqtgCIiqF+H3JWPuqzWDxydcWFuRpsyfxYAQ3N+0fkPk 4lL7FD8RNDn1xNG8Yi8qyUvYM7h9xqa1TX+kC96PwthGBDomgaiNHhE9IlH4VxVy +GrHqPq66ahp7RJ8GSHzvZw0dN7lMV1VW7s2isdJsdoHi3CJDsq8ni2N7/aPsEcc sW5R7H6dwYJRvQxAJLm7+y0h3nzIt43cLC3LWS1/AiMdBFn1ZcYKrMYsWTtBzL/j x9Un59sHiou1yt1HdLChSZnAjAvxSxlBMYJcwnHbYW+OBu+4dXwPZXNZC0xVb+T3 QOkCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSdWlQMEi/QxwzlERcARP9lgNdjGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjM2L25W cFVEQkl2ME1jTTVSRVhBRVRfWllEWFl4cy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBMcAMA0GCSqGSIb3 DQEBCwUAA4IBAQBChARc+3aFmrVOeMzIbKTdakkuZqI0RnIuBgDDoWR6JkZVQ+B2 2tLH6Plh2Xvcg+y/HNVu9Y0tE+T6LTP1uEc0KvY5po1N7ZWP/uxwiPNW+qaLwb36 K5ZKiuVtAKQPlSMhsAKjFUNW89GkJ9vaMMJwEf6Spz3uLLtBj4R7TPi1ze7d3SnO SZXw/jZ+6YaJKUtZUQW1mPexylWUiT/1wIn1iWZ0jhERZT4On31t4CO8LCH71O4R lwtd03ZnaYvwV9JACzsFb1d5GcrZBZKvrlXXaEtqAxH6/8luogvFypNQcBAu8T54 f5B5aAaMsraCZhD4D4hBhE+5+eRgpA8E/pFG -----END CERTIFICATE-----Generated at Sat Apr 26 08:23:48 2025 by rpki-client