$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer File: 9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer (raw, json) Hash identifier: dH7EVCFn95jqyhq7R2PcSIosYANw6eeRwUo3W+5b50w= Subject key identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0FA1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 03:34:48 +0000 Certificate not after: Wed 15 Apr 2026 03:30:48 +0000 Subordinate resources: IP: 157.66.72.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4001 (0xfa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Apr 15 03:34:48 2025 GMT Not After : Apr 15 03:30:48 2026 GMT Subject: CN=F7FCBB98375357213F81D24BE1E19A8C64EBDD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:d5:b4:5e:1e:a5:ac:77:60:c3:c1:d6:b2: a0:27:36:f9:c7:8a:10:fd:7e:44:d4:4d:7a:8a:5f: b7:89:8f:41:3b:0d:1b:34:72:d3:51:a1:26:4f:01: 0c:f4:95:b7:73:8a:86:be:27:c5:84:62:2d:05:3b: 1a:67:e4:9b:5f:de:e4:8d:7e:d3:bf:96:ee:7b:ed: e3:7d:44:35:8d:60:00:dc:1c:3c:65:c5:e6:60:78: 07:6b:ba:1d:81:92:2a:92:44:79:10:5f:68:73:84: fd:d2:06:9c:f0:d8:9f:d9:d6:b4:5e:f2:80:42:76: 58:79:84:d0:25:0a:4f:ce:8a:4f:c6:b3:d3:40:be: 45:ae:e8:b0:b9:cd:1e:bd:b6:73:a4:52:ee:59:6e: 91:8d:e5:1e:bf:f9:ca:97:8a:14:45:40:d1:49:fe: 43:0c:7a:db:59:41:cb:d7:25:27:14:db:f3:fe:dd: 07:5c:34:cd:0d:c5:44:af:53:a5:14:e6:e7:f9:c5: a3:07:14:ea:79:34:d0:92:fd:19:2e:18:dc:5f:c8: 8c:cd:7f:ee:9d:b6:38:1c:b7:10:30:31:81:a7:a9: b8:0c:7d:47:d4:1e:15:0e:6f:fa:95:d3:18:aa:bc: 4f:8e:bf:e7:4e:3a:46:90:c3:65:ff:3b:d2:3c:2c: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.72.0/23 Signature Algorithm: sha256WithRSAEncryption 80:21:d1:a4:09:6b:8c:51:ae:5e:e2:39:09:44:ae:74:20:14: 13:84:60:31:7b:74:d3:d8:fc:4a:c6:ac:97:d1:7d:d5:01:42: 3f:bf:6c:87:cb:e3:c4:b1:fa:1b:bb:22:3d:c0:6f:73:19:4a: 0a:ea:0f:db:de:e9:40:42:52:18:b5:a9:c9:38:04:8a:b3:43: cc:a1:ec:5e:72:fe:06:10:bf:67:9f:b0:5e:00:ea:74:d8:8a: 4e:9b:af:12:d8:bf:4d:28:0b:45:f1:5d:98:8c:69:f5:e9:e9: 63:c5:2d:69:07:1b:8d:77:70:ba:81:48:75:6c:de:02:00:b9: ea:2d:01:ff:b7:8a:9c:38:e2:30:93:69:d1:75:6b:30:0d:b6: 4d:6c:33:51:dc:7c:2f:70:ac:83:85:d2:b9:f6:49:13:2d:8c: 41:92:70:9a:46:b0:fe:07:ac:2f:3e:14:d2:e7:97:97:f6:0b: 7b:88:97:16:cb:7d:ab:19:31:1c:a4:2f:38:b1:3b:71:2c:2b: 2a:81:9d:d3:b5:ae:71:22:c4:16:e2:fd:1f:de:b3:7f:19:e4: 19:06:04:11:8e:30:bc:d9:d1:9a:dc:0e:16:b8:ad:f3:e4:6c: e7:53:89:a0:29:3b:d5:b0:31:0e:95:db:33:58:26:56:ee:2c: fe:d6:fc:6b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICD6EwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDQxNTAzMzQ0OFoXDTI2MDQxNTAzMzA0OFowMzEx MC8GA1UEAxMoRjdGQ0JCOTgzNzUzNTcyMTNGODFEMjRCRTFFMTlBOEM2NEVCREQw QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANG91bReHqWsd2DDwday oCc2+ceKEP1+RNRNeopft4mPQTsNGzRy01GhJk8BDPSVt3OKhr4nxYRiLQU7Gmfk m1/e5I1+07+W7nvt431ENY1gANwcPGXF5mB4B2u6HYGSKpJEeRBfaHOE/dIGnPDY n9nWtF7ygEJ2WHmE0CUKT86KT8az00C+Ra7osLnNHr22c6RS7llukY3lHr/5ypeK FEVA0Un+Qwx621lBy9clJxTb8/7dB1w0zQ3FRK9TpRTm5/nFowcU6nk00JL9GS4Y 3F/IjM1/7p22OBy3EDAxgaepuAx9R9QeFQ5v+pXTGKq8T46/5046RpDDZf870jws JfsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBT3/LuYN1NXIT+B0kvh4ZqMZOvdCzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNTcvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjU3Lzlf eTdtRGRUVnlFX2dkSkw0ZUdhakdUcjNRcy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQkgwDQYJKoZIhvcN AQELBQADggEBAIAh0aQJa4xRrl7iOQlErnQgFBOEYDF7dNPY/ErGrJfRfdUBQj+/ bIfL48Sx+hu7Ij3Ab3MZSgrqD9ve6UBCUhi1qck4BIqzQ8yh7F5y/gYQv2efsF4A 6nTYik6brxLYv00oC0XxXZiMafXp6WPFLWkHG413cLqBSHVs3gIAueotAf+3ipw4 4jCTadF1azANtk1sM1HcfC9wrIOF0rn2SRMtjEGScJpGsP4HrC8+FNLnl5f2C3uI lxbLfasZMRykLzixO3EsKyqBndO1rnEixBbi/R/es38Z5BkGBBGOMLzZ0ZrcDha4 rfPkbOdTiaApO9WwMQ6V2zNYJlbuLP7W/Gs= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:01 2025 by rpki-client on console.sobornost.net