$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer File: tXkneacSiViHFmJnxL2een2EyBY.cer (raw, json) Hash identifier: WIatHQVXOtSfdrgjqwrujW6T7hh89omC+p4MJr7/N/o= Subject key identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 55DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 30 Jul 2025 06:45:25 +0000 Certificate not after: Thu 30 Jul 2026 06:29:08 +0000 Subordinate resources: IP: 2401:8b00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21978 (0x55da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 30 06:45:25 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=B5792779A712895887166267C4BD9E7A7D84C816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:ce:7f:14:f8:86:35:d3:e8:21:70:df:79: fa:e0:94:34:49:a4:1b:ed:79:f1:6a:54:09:ed:fa: d0:8b:72:c2:98:d9:bd:92:80:8e:f3:43:7f:f5:5f: cb:69:26:0f:35:35:f1:1f:37:bd:37:1d:ec:09:9f: 66:79:25:37:da:d5:1e:a4:14:70:01:e6:c1:21:e7: 9b:af:ca:29:67:25:1a:ab:d1:aa:43:5b:61:54:98: f6:74:ed:cf:47:82:d8:06:50:4c:27:55:8b:6a:7b: 66:9b:06:31:5c:a7:b1:2b:5b:b3:c1:df:57:69:b3: bf:99:91:ae:e6:b7:a7:a3:31:17:28:79:22:b0:16: f8:3f:87:6e:16:c2:3f:e8:0d:99:86:90:5e:4c:54: 24:a9:5e:f2:e6:40:bb:e6:5f:fb:3b:cd:fd:9e:2a: 4c:42:3c:11:72:bc:91:42:f7:7f:a6:b6:4f:49:d7: 3d:24:ab:ee:2b:6c:c0:01:22:bd:9e:a1:80:4b:23: 79:08:27:36:45:6c:f7:2c:5a:a6:2f:73:cf:21:bf: d2:5e:4f:c1:3d:01:c1:6a:7c:bb:77:34:73:46:b5: 90:31:54:44:39:8b:8b:f0:3d:1d:60:80:1f:e5:31: 9f:7c:38:d4:78:0f:08:e4:c4:11:08:ca:6e:2f:ce: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:8b00::/32 Signature Algorithm: sha256WithRSAEncryption 3f:b1:2d:f9:53:4d:28:2d:02:ec:0a:f6:dc:6c:7a:d2:70:be: 5f:6d:c8:a5:9a:93:44:de:41:83:1f:f0:de:a9:87:47:f4:7a: 5b:40:24:b6:ad:5f:81:a1:28:00:cd:23:ff:ae:14:08:68:86: ac:77:b2:b6:f0:70:4b:28:f9:94:6f:26:9e:cb:43:53:14:29: 0b:f9:82:03:df:46:6d:e0:fa:ff:be:d0:79:e2:0d:92:87:c2: f2:c0:86:9b:e6:12:b0:ff:62:5b:ac:18:bc:80:06:02:0d:ba: a3:88:80:ff:15:48:da:8b:ff:3c:a5:06:09:9f:74:44:55:92: 2a:ef:a9:46:2b:0e:03:e7:79:7c:e1:25:e7:b0:c3:50:0f:75: 68:d7:99:60:eb:34:cd:df:1d:f5:d5:d1:51:3a:77:20:01:bf: 4b:35:aa:30:15:30:b2:13:60:1b:e3:3d:27:a4:92:f9:54:a3: 19:87:91:ba:a2:49:27:20:55:f1:1b:7d:21:cb:0a:4f:04:4c: cc:75:81:c5:fd:70:a8:12:d2:29:e6:98:dd:ea:5a:87:1b:14: ac:73:39:f6:da:dd:6b:ff:e2:71:53:2b:76:0f:03:95:0b:b8: 79:42:72:e7:c8:19:e2:dd:67:a9:10:26:7f:f5:6d:0f:db:78: 1b:70:2f:d1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICVdowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDczMDA2NDUyNVoXDTI2MDczMDA2MjkwOFowMzEx MC8GA1UEAxMoQjU3OTI3NzlBNzEyODk1ODg3MTY2MjY3QzRCRDlFN0E3RDg0Qzgx NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMC4zn8U+IY10+ghcN95 +uCUNEmkG+158WpUCe360ItywpjZvZKAjvNDf/Vfy2kmDzU18R83vTcd7AmfZnkl N9rVHqQUcAHmwSHnm6/KKWclGqvRqkNbYVSY9nTtz0eC2AZQTCdVi2p7ZpsGMVyn sStbs8HfV2mzv5mRrua3p6MxFyh5IrAW+D+HbhbCP+gNmYaQXkxUJKle8uZAu+Zf +zvN/Z4qTEI8EXK8kUL3f6a2T0nXPSSr7itswAEivZ6hgEsjeQgnNkVs9yxapi9z zyG/0l5PwT0BwWp8u3c0c0a1kDFURDmLi/A9HWCAH+Uxn3w41HgPCOTEEQjKbi/O i9ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBS1eSd5pxKJWIcWYmfEvZ56fYTIFjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxOTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTk3L3RY a25lYWNTaVZpSEZtSm54TDJlZW4yRXlCWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAYsAMA0GCSqGSIb3 DQEBCwUAA4IBAQA/sS35U00oLQLsCvbcbHrScL5fbcilmpNE3kGDH/DeqYdH9Hpb QCS2rV+BoSgAzSP/rhQIaIasd7K28HBLKPmUbyaey0NTFCkL+YID30Zt4Pr/vtB5 4g2Sh8LywIab5hKw/2JbrBi8gAYCDbqjiID/FUjai/88pQYJn3REVZIq76lGKw4D 53l84SXnsMNQD3Vo15lg6zTN3x311dFROncgAb9LNaowFTCyE2Ab4z0npJL5VKMZ h5G6okknIFXxG30hywpPBEzMdYHF/XCoEtIp5pjd6lqHGxSsczn22t1r/+JxUyt2 DwOVC7h5QnLnyBni3WepECZ/9W0P23gbcC/R -----END CERTIFICATE-----Generated at Mon Aug 11 07:30:23 2025 by rpki-client