$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer File: KPOWmDwzKEL92rYXWVowqDwzNGQ.cer (raw, json) Hash identifier: Bp2YosCmlpfRphqUyoL+Xbz5zdq+iN5Wg+Na7KFqciI= Subject key identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0F98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:38:02 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 136.198.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3992 (0xf98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Apr 15 01:38:02 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=28F396983C332842FDDAB617595A30A83C333464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3c:ce:64:ff:03:11:5a:af:78:c9:6d:a9:67: 2a:0d:ce:af:86:1d:2c:7e:cd:98:db:70:15:21:30: 5e:32:25:f7:dd:9b:89:5b:90:63:a5:1f:f4:fa:ee: 42:c6:b3:9f:30:a1:77:d4:5e:f4:96:dd:bb:04:b1: 69:75:87:2f:36:4b:b6:85:56:51:c0:21:ae:e1:ce: 83:b1:eb:38:30:7c:5e:ef:34:92:b9:ee:d5:c0:04: 77:dd:87:38:74:ec:74:ac:f8:82:ad:86:f8:5e:39: 42:dc:a2:8b:6c:83:db:59:d3:b4:9a:a2:3f:6a:b4: d1:6f:9a:16:77:fe:0d:3f:55:93:78:08:79:5f:72: 75:f6:e0:26:49:d0:61:d1:f3:8f:70:97:7d:76:77: 1a:69:8d:ed:65:18:cc:28:75:67:df:b5:ef:18:ee: 6d:92:1d:0c:87:a7:81:b1:16:da:a6:d2:be:fb:f5: 33:44:55:74:50:ce:46:55:6a:c6:39:54:34:1d:9d: d2:8b:f4:6e:2e:13:d4:6b:c8:e4:11:f8:e9:13:f1: ee:f8:27:08:8e:2e:e6:af:c1:32:1f:e9:c3:de:d5: 1e:24:c4:16:40:58:f0:b0:05:a8:36:6c:20:4d:bf: a6:5d:ae:44:b3:58:f9:15:f8:ff:d6:ca:c4:14:ad: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 136.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 52:c6:e9:11:2c:87:c3:de:09:08:79:4e:9f:4c:b8:7e:58:51: e7:4e:a2:b3:26:f6:be:97:0a:2d:01:8b:2d:f5:69:c1:20:98: 95:1d:95:cd:df:e0:0b:7f:76:de:c3:f1:b6:68:0f:17:ae:99: b4:b8:da:38:b8:a6:2d:1b:43:b6:f7:93:43:40:12:c8:02:cd: ef:8f:26:ea:a8:9e:4e:70:47:c0:ca:23:ed:29:c7:9c:13:36: 03:cd:61:44:99:de:e4:80:4c:5d:04:e5:e0:05:85:a2:e1:cf: a6:01:73:21:36:f3:db:28:c7:a7:33:83:21:dc:0a:40:69:2c: 12:ab:fe:c0:84:05:cb:27:12:94:62:b5:ea:46:db:bc:62:6e: 91:59:39:e6:ae:78:a9:03:76:89:35:53:0b:60:c1:64:7d:fc: e2:aa:53:8b:2a:47:fe:c1:86:62:16:97:91:e1:56:f0:b5:5c: 6e:e3:c9:01:2e:a8:6b:f7:9a:c3:43:5d:38:2b:81:9b:37:31: 47:8a:b8:52:95:a6:01:cd:43:24:c3:64:85:a7:2c:c6:cf:24: 5d:fb:b4:29:c3:eb:18:86:9f:b4:eb:07:3b:dd:6b:af:ea:3c: 0b:5f:8d:7d:da:d2:42:57:9c:64:8d:d5:4f:09:15:44:39:ab: b7:f4:dc:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDQxNTAxMzgwMloXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoMjhGMzk2OTgzQzMzMjg0MkZEREFCNjE3NTk1QTMwQTgzQzMzMzQ2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQ8zmT/AxFar3jJbaln Kg3Or4YdLH7NmNtwFSEwXjIl992biVuQY6Uf9PruQsaznzChd9Re9JbduwSxaXWH LzZLtoVWUcAhruHOg7HrODB8Xu80krnu1cAEd92HOHTsdKz4gq2G+F45Qtyii2yD 21nTtJqiP2q00W+aFnf+DT9Vk3gIeV9ydfbgJknQYdHzj3CXfXZ3GmmN7WUYzCh1 Z9+17xjubZIdDIengbEW2qbSvvv1M0RVdFDORlVqxjlUNB2d0ov0bi4T1GvI5BH4 6RPx7vgnCI4u5q/BMh/pw97VHiTEFkBY8LAFqDZsIE2/pl2uRLNY+RX4/9bKxBSt cHUCAwEAAaOCAogwggKEMB0GA1UdDgQWBBQo85aYPDMoQv3athdZWjCoPDM0ZDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTE2OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTE2OS9LUE9X bUR3ektFTDkycllYV1Zvd3FEd3pOR1EubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiMYwDQYJKoZIhvcNAQEL BQADggEBAFLG6REsh8PeCQh5Tp9MuH5YUedOorMm9r6XCi0Biy31acEgmJUdlc3f 4At/dt7D8bZoDxeumbS42ji4pi0bQ7b3k0NAEsgCze+PJuqonk5wR8DKI+0px5wT NgPNYUSZ3uSATF0E5eAFhaLhz6YBcyE289sox6czgyHcCkBpLBKr/sCEBcsnEpRi tepG27xibpFZOeaueKkDdok1UwtgwWR9/OKqU4sqR/7BhmIWl5HhVvC1XG7jyQEu qGv3msNDXTgrgZs3MUeKuFKVpgHNQyTDZIWnLMbPJF37tCnD6xiGn7TrBzvda6/q PAtfjX3a0kJXnGSN1U8JFUQ5q7f03HA= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:02 2025 by rpki-client on console.sobornost.net