$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer File: zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer (raw, json) Hash identifier: JCqDNyotkBWVpbg1wzTuqynkH/koM/3jx6+6rQBSoLQ= Subject key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 30 Jul 2025 06:38:43 +0000 Certificate not after: Thu 30 Jul 2026 06:29:08 +0000 Subordinate resources: IP: 202.55.136.0/22 IP: 202.73.64.0/19 IP: 202.233.0.0/18 IP: 210.166.192.0/20 IP: 223.223.164.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21828 (0x5544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 30 06:38:43 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:a6:2b:53:a0:36:ec:70:b0:06:00:88:1f: 04:99:37:8d:bf:03:45:e8:7d:50:33:c3:ca:6b:3a: b1:8a:39:e4:02:72:e6:d5:6a:53:bc:08:2b:eb:60: 74:e2:15:7e:0c:d5:6f:a9:0e:a8:d5:1e:83:75:30: 0f:db:04:56:6e:01:9e:50:15:63:28:40:5f:16:0e: e8:9d:69:a4:ea:37:56:fc:21:31:99:1e:ad:c5:4a: 48:15:8c:66:b9:4c:f8:e1:d5:2b:f9:c7:f2:24:58: dc:8e:22:33:b5:2d:43:62:44:62:bd:22:c8:94:ce: 0a:8c:1e:d5:21:5e:98:d1:3f:ae:b1:c8:12:99:ac: a3:0d:5b:d0:28:a4:f2:a1:c3:cf:de:a0:7c:8f:a5: f6:0b:f5:9c:6d:23:bd:38:87:60:a6:c8:67:27:ff: 1a:8c:74:6b:ba:c1:d6:8f:d4:7f:5c:c7:cf:bb:b4: 8d:de:3f:69:52:b2:51:2c:6c:fb:73:3f:13:90:2e: 05:67:50:6b:75:32:a0:a1:12:c3:6d:2e:5e:23:26: 19:f1:66:fa:f1:e0:f0:cc:63:4b:6c:ac:bd:b9:a4: 01:2a:32:49:ee:36:19:cd:30:14:d6:91:a3:fd:42: c1:1a:82:b0:a1:a1:77:6e:78:97:98:72:96:cf:01: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.55.136.0/22 202.73.64.0/19 202.233.0.0/18 210.166.192.0/20 223.223.164.0/22 Signature Algorithm: sha256WithRSAEncryption 40:63:b5:14:63:bd:40:3d:86:d1:a9:7b:ff:c9:40:3b:a2:7e: 0b:e2:77:03:8d:50:fb:64:df:fe:36:64:8a:f8:ab:e6:d5:ab: 9d:c1:36:ab:ca:cf:65:10:9f:dd:a2:83:d8:61:53:34:1e:ba: ce:3d:da:e2:83:7f:93:84:56:35:ff:cf:f5:19:b0:e9:87:40: 9a:99:50:58:75:52:24:84:95:6b:18:9b:f7:9a:34:65:1d:9c: e2:31:2d:b8:30:90:4b:35:d8:71:8a:a3:39:c3:7b:4e:55:96: ca:a3:0c:45:38:71:bf:f1:ed:51:71:f4:5d:65:99:20:aa:0c: a6:5b:a1:ce:2e:57:a0:55:7c:06:06:c8:8b:9d:3a:0a:9e:4f: 3d:fa:cf:ca:9d:e1:95:d9:ff:e2:44:69:c6:5c:ef:e5:41:0a: b2:c6:18:ba:78:00:f5:0d:da:ba:9e:73:f6:c1:a8:25:f7:dc: 22:e5:2c:31:e1:4f:1a:a6:c6:31:45:6e:fc:70:85:1c:6a:30: 14:db:dc:f6:9c:2a:57:df:c3:40:a7:81:d3:86:33:85:06:cf: 34:87:5f:35:aa:5b:57:3d:fc:de:09:7f:58:65:d2:aa:99:2e: 87:74:d0:a7:e8:17:2e:69:0a:3d:0a:b0:a1:57:cd:b1:bc:e4: f0:0d:41:95 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICVUQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDczMDA2Mzg0M1oXDTI2MDczMDA2MjkwOFowMzEx MC8GA1UEAxMoQ0Q1RTIzMUVCRjQ0QzdBNDAzOUEyRjc4RTgzNEI2Q0YzRDZBRkEx NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJgapitToDbscLAGAIgf BJk3jb8DReh9UDPDyms6sYo55AJy5tVqU7wIK+tgdOIVfgzVb6kOqNUeg3UwD9sE Vm4BnlAVYyhAXxYO6J1ppOo3VvwhMZkercVKSBWMZrlM+OHVK/nH8iRY3I4iM7Ut Q2JEYr0iyJTOCowe1SFemNE/rrHIEpmsow1b0Cik8qHDz96gfI+l9gv1nG0jvTiH YKbIZyf/Gox0a7rB1o/Uf1zHz7u0jd4/aVKyUSxs+3M/E5AuBWdQa3UyoKESw20u XiMmGfFm+vHg8MxjS2ysvbmkASoySe42Gc0wFNaRo/1CwRqCsKGhd254l5hyls8B 4G0CAwEAAaOCApwwggKYMB0GA1UdDgQWBBTNXiMev0THpAOaL3joNLbPPWr6FDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MS8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTEvelY0akhyOUV4 NlFEbWk5NDZEUzJ6ejFxLWhRLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAso3iAMEBcpJQAMEBsrpAAMEBNKm wAMEAt/fpDANBgkqhkiG9w0BAQsFAAOCAQEAQGO1FGO9QD2G0al7/8lAO6J+C+J3 A41Q+2Tf/jZkivir5tWrncE2q8rPZRCf3aKD2GFTNB66zj3a4oN/k4RWNf/P9Rmw 6YdAmplQWHVSJISVaxib95o0ZR2c4jEtuDCQSzXYcYqjOcN7TlWWyqMMRThxv/Ht UXH0XWWZIKoMpluhzi5XoFV8BgbIi506Cp5PPfrPyp3hldn/4kRpxlzv5UEKssYY ungA9Q3aup5z9sGoJffcIuUsMeFPGqbGMUVu/HCFHGowFNvc9pwqV9/DQKeB04Yz hQbPNIdfNapbVz383gl/WGXSqpkuh3TQp+gXLmkKPQqwoVfNsbzk8A1BlQ== -----END CERTIFICATE-----Generated at Mon Aug 11 04:24:06 2025 by rpki-client