$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer File: xDheE4hxRBXstVQDz2F-FoOrtdY.cer (raw, json) Hash identifier: zn8Q/D4WUA+1ReBk84Mow7QDdmSDZ6d6tubCBRvpi2A= Subject key identifier: C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1216 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 30 Jul 2025 06:42:17 +0000 Certificate not after: Thu 30 Jul 2026 06:29:08 +0000 Subordinate resources: IP: 165.99.146.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4630 (0x1216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 30 06:42:17 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=C4385E1388714415ECB55403CF617E1683ABB5D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1c:5c:40:1b:6c:b1:f5:69:a1:aa:e0:4b:3b: a2:43:ab:08:32:60:92:a7:af:4e:29:59:1d:25:67: bb:42:66:d5:d8:50:a6:2d:7c:59:7f:55:2c:66:0f: e1:55:ae:5b:3e:22:f5:fa:b6:c6:48:b8:7a:b5:08: 31:57:f4:0f:34:50:cf:3c:70:d1:5c:db:ee:61:b0: e9:08:29:28:e8:e9:89:bc:56:2d:da:2d:d0:02:53: 76:fc:fa:f0:25:8c:17:16:c9:9d:5a:ef:98:f0:d6: f7:ac:0a:d4:f4:8c:9e:07:4b:4c:20:57:68:88:c2: 1b:ed:4a:d9:6f:05:33:d7:52:4e:3a:f2:1c:2a:68: ef:c4:41:19:1c:99:bc:04:f8:17:48:1b:65:9e:eb: da:7e:c8:c5:2d:3a:03:32:8c:84:4b:c1:42:e4:b9: 5c:6e:47:be:0d:f5:92:f2:2a:4e:ca:56:13:49:09: 2e:a6:da:bc:22:49:f8:be:a1:6f:5a:83:14:13:37: cc:ae:89:17:47:a0:2d:a7:b6:1a:85:f9:eb:3c:51: 59:f3:9d:0f:6b:2e:09:33:2b:32:48:74:2c:ea:d8: f7:f6:e6:9e:32:b3:b3:08:24:54:78:5f:c9:a6:18: 92:82:8d:93:3f:9e:39:f5:10:06:08:22:3f:5e:23: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.146.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:14:85:bd:81:0e:d8:b8:bb:1d:1f:2c:6e:ef:f7:c4:0f:bb: db:8e:d3:b8:c1:29:84:d1:a7:f0:d3:fb:ef:c8:bf:95:dd:05: 15:e2:20:e2:9a:9a:37:4c:54:a9:2d:89:56:4c:24:80:72:be: 24:90:87:61:5e:69:7c:cd:8b:c2:20:5d:93:65:37:a4:bb:92: 01:f6:32:68:93:c0:f8:93:72:f9:9e:5a:19:f1:5d:c5:49:41: d9:8d:ec:82:1b:33:c6:0d:8a:94:e5:29:01:39:43:75:db:d9: e0:6c:b4:47:55:16:66:58:b6:89:39:05:1a:af:2a:d2:59:05: d5:65:dd:c6:72:a8:06:31:7d:ea:50:6c:7c:76:1c:78:d4:96: d2:f6:eb:dd:07:32:3a:d2:2e:5f:b0:82:4c:c7:43:e2:26:2a: a8:32:a3:76:fe:20:9e:de:be:bc:2b:d9:31:4b:53:19:04:73: 37:e7:32:fd:34:c3:50:37:96:28:63:54:dd:20:87:75:00:71: bb:7b:13:a3:d3:82:9c:b3:68:2f:b5:78:16:a0:2e:2f:e4:77: 09:a2:2a:54:ee:18:58:17:02:82:ef:54:59:46:90:b3:16:61: 56:b3:a4:3c:bc:b8:2a:25:dd:0b:71:ec:ab:d9:50:cd:5a:53: 08:9e:e9:a7 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEhYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDczMDA2NDIxN1oXDTI2MDczMDA2MjkwOFowMzEx MC8GA1UEAxMoQzQzODVFMTM4ODcxNDQxNUVDQjU1NDAzQ0Y2MTdFMTY4M0FCQjVE NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN4cXEAbbLH1aaGq4Es7 okOrCDJgkqevTilZHSVnu0Jm1dhQpi18WX9VLGYP4VWuWz4i9fq2xki4erUIMVf0 DzRQzzxw0Vzb7mGw6QgpKOjpibxWLdot0AJTdvz68CWMFxbJnVrvmPDW96wK1PSM ngdLTCBXaIjCG+1K2W8FM9dSTjryHCpo78RBGRyZvAT4F0gbZZ7r2n7IxS06AzKM hEvBQuS5XG5Hvg31kvIqTspWE0kJLqbavCJJ+L6hb1qDFBM3zK6JF0egLae2GoX5 6zxRWfOdD2suCTMrMkh0LOrY9/bmnjKzswgkVHhfyaYYkoKNkz+eOfUQBggiP14j oEMCAwEAAaOCAoswggKHMB0GA1UdDgQWBBTEOF4TiHFEFey1VAPPYX4Wg6u11jAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNzQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjc0L3hE aGVFNGh4UkJYc3RWUUR6MkYtRm9PcnRkWS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGlY5IwDQYJKoZIhvcN AQELBQADggEBADwUhb2BDti4ux0fLG7v98QPu9uO07jBKYTRp/DT++/Iv5XdBRXi IOKamjdMVKktiVZMJIByviSQh2FeaXzNi8IgXZNlN6S7kgH2MmiTwPiTcvmeWhnx XcVJQdmN7IIbM8YNipTlKQE5Q3Xb2eBstEdVFmZYtok5BRqvKtJZBdVl3cZyqAYx fepQbHx2HHjUltL2690HMjrSLl+wgkzHQ+ImKqgyo3b+IJ7evrwr2TFLUxkEczfn Mv00w1A3lihjVN0gh3UAcbt7E6PTgpyzaC+1eBagLi/kdwmiKlTuGFgXAoLvVFlG kLMWYVazpDy8uCol3Qtx7KvZUM1aUwie6ac= -----END CERTIFICATE-----Generated at Wed Aug 13 07:43:35 2025 by rpki-client