$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer File: zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer (raw, json) Hash identifier: gJGoXijJL8DHVBEhUDakWmGH8MEL6FJfT/yKcKCM3Xg= Subject key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:34:52 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 202.55.136.0/22 IP: 202.73.64.0/19 IP: 202.233.0.0/18 IP: 210.166.192.0/20 IP: 223.223.164.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18697 (0x4909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:34:52 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:a6:2b:53:a0:36:ec:70:b0:06:00:88:1f: 04:99:37:8d:bf:03:45:e8:7d:50:33:c3:ca:6b:3a: b1:8a:39:e4:02:72:e6:d5:6a:53:bc:08:2b:eb:60: 74:e2:15:7e:0c:d5:6f:a9:0e:a8:d5:1e:83:75:30: 0f:db:04:56:6e:01:9e:50:15:63:28:40:5f:16:0e: e8:9d:69:a4:ea:37:56:fc:21:31:99:1e:ad:c5:4a: 48:15:8c:66:b9:4c:f8:e1:d5:2b:f9:c7:f2:24:58: dc:8e:22:33:b5:2d:43:62:44:62:bd:22:c8:94:ce: 0a:8c:1e:d5:21:5e:98:d1:3f:ae:b1:c8:12:99:ac: a3:0d:5b:d0:28:a4:f2:a1:c3:cf:de:a0:7c:8f:a5: f6:0b:f5:9c:6d:23:bd:38:87:60:a6:c8:67:27:ff: 1a:8c:74:6b:ba:c1:d6:8f:d4:7f:5c:c7:cf:bb:b4: 8d:de:3f:69:52:b2:51:2c:6c:fb:73:3f:13:90:2e: 05:67:50:6b:75:32:a0:a1:12:c3:6d:2e:5e:23:26: 19:f1:66:fa:f1:e0:f0:cc:63:4b:6c:ac:bd:b9:a4: 01:2a:32:49:ee:36:19:cd:30:14:d6:91:a3:fd:42: c1:1a:82:b0:a1:a1:77:6e:78:97:98:72:96:cf:01: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.55.136.0/22 202.73.64.0/19 202.233.0.0/18 210.166.192.0/20 223.223.164.0/22 Signature Algorithm: sha256WithRSAEncryption 62:a9:3f:3c:ae:bf:ab:f5:0b:91:56:71:5a:a7:de:de:e1:08: 1c:20:3e:43:e0:f9:d9:7b:ae:fb:a3:5d:a5:00:8e:9b:60:79: 3f:17:67:1e:62:1d:f7:10:78:95:43:44:2d:f8:28:32:8a:62: 42:ad:57:29:49:d9:44:61:59:cf:29:b0:2f:f5:cb:8e:8f:16: 98:c2:0f:72:0e:4c:5f:d3:a5:94:37:35:af:93:d3:9f:4d:a4: ce:70:74:61:87:d1:cf:b2:d8:cb:54:d8:24:61:e4:59:68:f6: 09:71:d3:04:9c:b1:a4:6c:1c:5e:bf:2e:df:da:56:a8:58:f2: ba:5d:75:23:86:e7:b2:f1:9d:91:be:41:c5:7f:16:d7:c2:81: bc:4d:b9:ab:2a:de:f8:8d:cc:49:07:97:70:3b:97:c1:c1:16: 54:69:95:17:5c:e7:5d:46:83:3c:3c:63:45:31:21:79:9a:21: 2e:c9:ac:6f:c3:35:79:53:12:4e:d8:60:79:00:f3:ec:ce:f9: 3d:16:ff:b9:bf:0b:0c:05:d4:e3:07:6a:63:cd:40:7c:6f:13: 07:bd:2e:25:ed:a4:1c:75:5e:78:15:e7:eb:7c:db:1d:f1:2f: 04:dc:7e:d7:e9:aa:f8:54:b7:c1:d3:03:6a:a5:f5:b0:65:9a: fb:0c:1a:53 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICSQkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDQxNTAxMzQ1MloXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoQ0Q1RTIzMUVCRjQ0QzdBNDAzOUEyRjc4RTgzNEI2Q0YzRDZBRkEx NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJgapitToDbscLAGAIgf BJk3jb8DReh9UDPDyms6sYo55AJy5tVqU7wIK+tgdOIVfgzVb6kOqNUeg3UwD9sE Vm4BnlAVYyhAXxYO6J1ppOo3VvwhMZkercVKSBWMZrlM+OHVK/nH8iRY3I4iM7Ut Q2JEYr0iyJTOCowe1SFemNE/rrHIEpmsow1b0Cik8qHDz96gfI+l9gv1nG0jvTiH YKbIZyf/Gox0a7rB1o/Uf1zHz7u0jd4/aVKyUSxs+3M/E5AuBWdQa3UyoKESw20u XiMmGfFm+vHg8MxjS2ysvbmkASoySe42Gc0wFNaRo/1CwRqCsKGhd254l5hyls8B 4G0CAwEAAaOCApwwggKYMB0GA1UdDgQWBBTNXiMev0THpAOaL3joNLbPPWr6FDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MS8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTEvelY0akhyOUV4 NlFEbWk5NDZEUzJ6ejFxLWhRLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAso3iAMEBcpJQAMEBsrpAAMEBNKm wAMEAt/fpDANBgkqhkiG9w0BAQsFAAOCAQEAYqk/PK6/q/ULkVZxWqfe3uEIHCA+ Q+D52Xuu+6NdpQCOm2B5PxdnHmId9xB4lUNELfgoMopiQq1XKUnZRGFZzymwL/XL jo8WmMIPcg5MX9OllDc1r5PTn02kznB0YYfRz7LYy1TYJGHkWWj2CXHTBJyxpGwc Xr8u39pWqFjyul11I4bnsvGdkb5BxX8W18KBvE25qyre+I3MSQeXcDuXwcEWVGmV F1znXUaDPDxjRTEheZohLsmsb8M1eVMSTthgeQDz7M75PRb/ub8LDAXU4wdqY81A fG8TB70uJe2kHHVeeBXn63zbHfEvBNx+1+mq+FS3wdMDaqX1sGWa+wwaUw== -----END CERTIFICATE-----Generated at Sat Apr 26 08:16:49 2025 by rpki-client