$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer File: qd58EzgSN8W4mNWiTyyabLPBlxs.cer (raw, json) Hash identifier: jZr5q61kXU7nL1DZnaB9/6r3ZRXMFo6FkPU5cTl/o1c= Subject key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4943 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:36:02 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 49.128.24.0/21 IP: 49.128.96.0/22 IP: 203.201.52.0/22 IP: 211.15.112.0/20 IP: 211.19.224.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18755 (0x4943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:36:02 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f4:ee:dc:28:65:f0:e1:9f:86:cd:9f:f1:32: 34:37:97:d6:7b:9f:7b:02:ed:d3:42:c6:72:28:fa: 7a:68:c9:85:6c:f4:00:62:17:42:06:76:39:42:0d: 25:0a:d2:d3:a9:72:e0:10:87:59:a5:03:86:18:60: 79:4c:e3:78:89:6c:05:5e:82:f4:69:9f:46:d0:62: 03:23:9c:6d:48:40:02:f9:fe:c6:cd:c0:be:20:45: a5:3a:3a:58:6c:41:f3:e1:54:5a:00:f6:8d:88:35: 78:e3:75:af:33:d9:e0:a2:ad:1c:24:52:f8:99:f4: 31:9f:d2:d5:1a:33:a1:c8:eb:5f:bc:f5:45:1d:47: 95:65:80:5f:b4:48:9f:34:87:97:5c:af:d8:15:17: 39:2b:71:61:79:ea:fe:2c:34:18:29:f0:1d:66:fd: 42:20:67:c4:a4:d7:02:c2:10:6d:4b:3c:9e:e8:ff: bd:5d:27:db:42:f2:83:67:21:70:37:f9:71:8d:2a: 2f:d9:26:80:87:78:21:f3:e3:44:9f:ed:f8:14:a2: 12:83:3d:58:95:2a:a0:6a:0c:d6:ad:62:96:b4:aa: 49:17:1e:49:37:d1:e9:2e:d5:b0:30:a4:8c:da:6f: 86:70:74:d4:ac:c8:b8:4c:29:6f:52:92:bb:a3:18: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.24.0/21 49.128.96.0/22 203.201.52.0/22 211.15.112.0/20 211.19.224.0/19 Signature Algorithm: sha256WithRSAEncryption 46:70:c2:3f:54:19:c1:7c:32:1a:78:1d:0d:d5:77:01:88:9c: 96:96:6c:d4:e2:27:d1:12:35:20:4a:76:67:4e:c5:d1:78:a0: 48:c2:74:63:3e:97:2c:65:7b:76:40:4c:ee:1c:74:2d:dc:7f: 5a:bd:6c:5b:36:6e:b6:da:af:2a:5f:6c:49:27:0f:42:e4:d3: 8f:90:a8:b5:36:4f:d9:79:5a:46:3a:67:2f:8b:46:6f:cb:15: 8a:c9:e3:93:5a:6f:d0:03:f9:62:c8:88:c0:83:a5:61:86:7e: 5c:5c:97:32:9e:21:81:c4:03:52:95:78:35:82:c8:7f:d0:d7: 8f:1a:fd:18:6c:53:b7:d3:bf:aa:b8:98:16:b4:a6:1a:20:a7: 20:62:f2:6d:f4:65:2b:05:43:66:86:91:8c:c3:a2:0d:a0:a5: 48:82:39:c8:1b:21:39:db:3a:31:f2:a4:30:24:80:ac:98:cb: 25:2f:91:82:e2:96:9f:f4:6c:f2:f6:13:69:df:f9:ed:f1:68: f2:6b:4b:2f:fb:5c:e1:b4:38:6b:63:7b:78:e7:72:43:9f:74: a2:82:12:f1:d9:b5:29:7d:a0:3f:45:f7:a8:89:d3:b3:34:59: 27:21:a9:bb:92:54:05:17:9b:61:6b:82:ab:b6:2b:9e:aa:65: 65:2c:be:a1 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICSUMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzYwMloXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoQTlERTdDMTMzODEyMzdDNUI4OThENUEyNEYyQzlBNkNCM0MxOTcx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO307twoZfDhn4bNn/Ey NDeX1nufewLt00LGcij6emjJhWz0AGIXQgZ2OUINJQrS06ly4BCHWaUDhhhgeUzj eIlsBV6C9GmfRtBiAyOcbUhAAvn+xs3AviBFpTo6WGxB8+FUWgD2jYg1eON1rzPZ 4KKtHCRS+Jn0MZ/S1RozocjrX7z1RR1HlWWAX7RInzSHl1yv2BUXOStxYXnq/iw0 GCnwHWb9QiBnxKTXAsIQbUs8nuj/vV0n20Lyg2chcDf5cY0qL9kmgId4IfPjRJ/t +BSiEoM9WJUqoGoM1q1ilrSqSRceSTfR6S7VsDCkjNpvhnB01KzIuEwpb1KSu6MY Y1MCAwEAAaOCAp4wggKaMB0GA1UdDgQWBBSp3nwTOBI3xbiY1aJPLJpss8GXGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NTcvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg1Ny9xZDU4RXpn U044VzRtTldpVHl5YWJMUEJseHMubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDMYAYAwQCMYBgAwQCy8k0AwQE 0w9wAwQF0xPgMA0GCSqGSIb3DQEBCwUAA4IBAQBGcMI/VBnBfDIaeB0N1XcBiJyW lmzU4ifREjUgSnZnTsXReKBIwnRjPpcsZXt2QEzuHHQt3H9avWxbNm622q8qX2xJ Jw9C5NOPkKi1Nk/ZeVpGOmcvi0ZvyxWKyeOTWm/QA/liyIjAg6Vhhn5cXJcyniGB xANSlXg1gsh/0NePGv0YbFO307+quJgWtKYaIKcgYvJt9GUrBUNmhpGMw6INoKVI gjnIGyE52zox8qQwJICsmMslL5GC4paf9Gzy9hNp3/nt8Wjya0sv+1zhtDhrY3t4 53JDn3SighLx2bUpfaA/RfeoidOzNFknIam7klQFF5tha4KrtiueqmVlLL6h -----END CERTIFICATE-----Generated at Sat Apr 26 08:24:14 2025 by rpki-client