$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer File: 4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer (raw, json) Hash identifier: g9ELAAHAiaJuHIUS12ZatBHpZk8lXnL/BxvgVrJmEkU= Subject key identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:38:47 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 193.82.64.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: Apr 15 01:38:47 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=E20E6DF43A3F020ADB675A21F3A91AC4D8F35867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:a8:18:8c:c9:cc:6e:78:8d:b7:d7:c7:e7: bd:b6:24:1d:e8:65:40:c5:45:59:80:2f:4c:41:82: 4d:dc:10:7d:00:31:5b:8d:cc:b1:a6:88:30:8e:5d: a2:2a:78:00:d0:f2:66:7f:f7:7e:df:72:d5:b1:ec: bb:70:3c:db:6b:24:7e:f7:23:3c:c1:4c:f0:07:e4: 9b:e4:59:b2:22:7f:f3:70:df:43:6f:b3:48:75:a4: 60:a5:f1:23:52:18:67:e9:49:a9:fa:76:d5:0b:f6: 40:c4:2c:0b:81:1f:99:a4:0d:1b:09:6f:5c:ac:52: 94:a3:6d:64:cf:df:4c:e2:28:87:be:a7:44:58:fb: 5f:38:64:5e:e8:2a:8d:df:ac:b7:d3:21:2d:4b:fc: a5:7f:fc:68:16:72:6a:66:e1:86:e0:f0:50:f4:64: 5b:d8:6f:b4:99:dc:f8:ce:e6:f4:68:21:71:6f:19: 00:c5:38:ec:9e:59:fd:69:d1:2b:17:42:2e:c9:f1: b6:6e:6f:78:d0:cd:24:7b:df:75:77:bd:79:ef:43: 0d:bf:e2:13:ed:14:dc:48:cc:88:46:be:bf:39:42: 2d:74:6a:22:a6:43:0d:ad:ec:8d:30:1f:77:6f:ad: 37:d2:10:23:f4:1e:ab:a8:c2:d8:22:24:38:2b:90: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.82.64.0/19 Signature Algorithm: sha256WithRSAEncryption 24:63:16:fa:60:f2:18:4b:70:70:2b:90:37:1e:d8:24:3b:b8: df:b1:93:ff:eb:9f:d5:a6:be:47:8b:e1:c4:f8:8f:94:1e:fb: 05:54:c4:71:b8:25:d2:e2:33:2d:f8:7e:d9:f4:a6:dd:54:2a: 96:c0:48:0e:7a:d8:0d:5f:70:60:b5:ac:bf:bf:bf:61:d3:1b: d3:d9:a0:98:2f:fa:f1:b8:07:22:f0:91:b6:86:e7:ea:80:c2: d3:b1:b8:d4:83:aa:05:20:0c:05:e8:99:70:d1:10:d9:02:69: 2c:84:08:2b:a0:28:39:45:d4:d4:76:a8:1b:76:1c:54:68:e3: a9:c0:0c:14:ca:42:e4:e8:a6:e4:de:7b:ff:9c:a6:4b:14:d7: 72:72:05:e6:21:fc:1d:06:92:99:93:66:03:f9:fa:b3:50:d8: 2f:4b:00:bb:44:d3:64:52:ac:86:0d:4b:07:46:65:ab:ff:75: 0d:57:ac:91:8b:ac:cf:61:82:2c:44:5a:fe:69:58:23:98:10: 87:da:13:00:86:ef:f2:c5:78:cb:6a:b1:af:87:d3:5c:e4:ab: 12:03:87:aa:07:19:3c:a1:c3:17:5e:e0:d8:f2:f0:a9:33:52: 98:13:2c:a6:15:ed:15:5b:cb:86:f8:19:9d:99:b2:98:8d:a8: 8c:4c:f1:37 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI1MDQxNTAxMzg0N1oXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoRTIwRTZERjQzQTNGMDIwQURCNjc1QTIxRjNBOTFBQzREOEYzNTg2 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ5dqBiMycxueI2318fn vbYkHehlQMVFWYAvTEGCTdwQfQAxW43MsaaIMI5doip4ANDyZn/3ft9y1bHsu3A8 22skfvcjPMFM8Afkm+RZsiJ/83DfQ2+zSHWkYKXxI1IYZ+lJqfp21Qv2QMQsC4Ef maQNGwlvXKxSlKNtZM/fTOIoh76nRFj7XzhkXugqjd+st9MhLUv8pX/8aBZyambh huDwUPRkW9hvtJnc+M7m9GghcW8ZAMU47J5Z/WnRKxdCLsnxtm5veNDNJHvfdXe9 ee9DDb/iE+0U3EjMiEa+vzlCLXRqIqZDDa3sjTAfd2+tN9IQI/Qeq6jC2CIkOCuQ vnECAwEAAaOCAoYwggKCMB0GA1UdDgQWBBTiDm30Oj8CCttnWiHzqRrE2PNYZzAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MjQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUyNC80ZzV0OURv X0FncmJaMW9oODZrYXhOanpXR2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwVJAMA0GCSqGSIb3DQEBCwUA A4IBAQAkYxb6YPIYS3BwK5A3HtgkO7jfsZP/65/Vpr5Hi+HE+I+UHvsFVMRxuCXS 4jMt+H7Z9KbdVCqWwEgOetgNX3Bgtay/v79h0xvT2aCYL/rxuAci8JG2hufqgMLT sbjUg6oFIAwF6Jlw0RDZAmkshAgroCg5RdTUdqgbdhxUaOOpwAwUykLk6Kbk3nv/ nKZLFNdycgXmIfwdBpKZk2YD+fqzUNgvSwC7RNNkUqyGDUsHRmWr/3UNV6yRi6zP YYIsRFr+aVgjmBCH2hMAhu/yxXjLarGvh9Nc5KsSA4eqBxk8ocMXXuDY8vCpM1KY EyymFe0VW8uG+BmdmbKYjaiMTPE3 -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:41 2025 by rpki-client on console.sobornost.net