$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0_4nFVMUwUjdhbciP6DR-P0rJng.cer File: 0_4nFVMUwUjdhbciP6DR-P0rJng.cer (raw, json) Hash identifier: 4H8z6nr89SoQZGh3H16OUq0vdTg59pbfPoK6ajg4VtU= Subject key identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5BBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:44:00 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 2402:5a00::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23483 (0x5bbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:44:00 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=D3FE27155314C148DD85B7223FA0D1F8FD2B2678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:92:71:ff:81:a2:fa:cf:78:b3:00:06:c9: 57:60:2d:c3:c7:5f:67:ff:e2:7c:51:23:ab:6e:53: f1:93:93:3b:19:7d:3a:93:97:4f:5f:00:9c:c1:73: d8:ef:f1:3f:a3:6a:5b:98:3f:4a:34:40:58:40:b6: 78:90:b3:d2:ee:d7:e8:b5:af:78:f5:0a:d9:17:60: 8f:11:32:b7:19:95:b1:32:00:29:80:de:a3:92:bb: 8c:25:21:de:de:f8:56:d7:a3:80:3f:01:dc:78:de: 51:2b:ff:f3:8c:99:08:eb:cc:30:61:db:94:2d:5c: d7:c0:9d:6e:eb:7b:81:ec:ee:1e:f2:32:99:0a:79: 1e:f1:f1:13:fe:9b:1f:14:76:ea:49:c3:8e:3a:27: bc:9e:99:24:32:44:04:23:86:0b:59:98:a9:09:32: a1:a8:34:f3:a8:a2:fd:c2:f2:b3:6c:7e:92:aa:e0: 7c:0f:d9:93:58:f0:7e:63:7a:f3:4f:05:de:df:d4: d6:c4:fa:ce:a9:89:a6:3d:da:a7:8d:3b:3e:81:da: 5c:33:7b:3d:df:12:a2:42:8b:4b:f0:ce:a8:e7:28: 0a:db:79:56:7e:72:18:dd:45:23:85:0b:34:8a:30: b1:ac:6e:39:04:d4:ec:0d:b2:4d:b0:5d:d8:68:a8: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 11:37:a4:c3:08:99:d7:8f:36:2c:68:35:0f:3e:cf:f8:ee:ac: ed:c2:7b:f7:80:9e:f8:ed:4e:d7:99:3e:77:33:e8:94:1e:45: 1d:5a:7d:5f:52:ab:39:98:88:54:18:62:4c:7d:ce:6b:7a:03: e4:1e:f5:e1:25:99:dd:d3:dc:38:d7:b2:49:7d:52:a4:dd:1d: bb:07:f9:03:f6:d1:45:aa:80:cd:64:5e:3e:3b:ad:21:fb:39: dc:f1:8d:89:02:4f:a6:9b:78:49:08:bb:3d:79:32:10:79:9f: 8f:c0:bb:31:92:2a:95:98:92:d8:f5:e0:f6:96:8f:a7:64:c6: b9:b9:69:1c:04:9c:bf:7a:23:e9:16:28:fa:bb:32:07:34:de: bf:d7:cd:18:ca:ed:7c:f6:b1:24:82:4a:49:9d:76:3c:03:92: 8f:f0:20:92:df:5b:b6:91:9d:78:02:ef:0a:bf:1c:29:b3:6a: b8:fc:44:f0:9e:0d:7f:15:f7:a2:64:dc:a2:55:f0:ae:e2:5e: f7:a8:65:3d:7e:0c:3d:f0:17:bc:eb:1b:b7:2e:23:0e:89:ef: 4f:67:5f:87:8a:aa:74:50:f8:ec:cc:65:82:ae:82:80:11:ce: 8c:7f:26:41:4e:38:de:9a:8c:54:b6:5e:4f:22:a7:1d:39:7a: 29:8f:aa:1b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICW7swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxNDQwMFoXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoRDNGRTI3MTU1MzE0QzE0OEREODVCNzIyM0ZBMEQxRjhGRDJCMjY3 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjQknH/gaL6z3izAAbJ V2Atw8dfZ//ifFEjq25T8ZOTOxl9OpOXT18AnMFz2O/xP6NqW5g/SjRAWEC2eJCz 0u7X6LWvePUK2RdgjxEytxmVsTIAKYDeo5K7jCUh3t74VtejgD8B3HjeUSv/84yZ COvMMGHblC1c18Cdbut7gezuHvIymQp5HvHxE/6bHxR26knDjjonvJ6ZJDJEBCOG C1mYqQkyoag086ii/cLys2x+kqrgfA/Zk1jwfmN6808F3t/U1sT6zqmJpj3ap407 PoHaXDN7Pd8SokKLS/DOqOcoCtt5Vn5yGN1FI4ULNIowsaxuOQTU7A2yTbBd2Gio oacCAwEAAaOCAowwggKIMB0GA1UdDgQWBBTT/icVUxTBSN2FtyI/oNH4/SsmeDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTM2LzBf NG5GVk1Vd1VqZGhiY2lQNkRSLVAwckpuZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAloAMA0GCSqGSIb3 DQEBCwUAA4IBAQARN6TDCJnXjzYsaDUPPs/47qztwnv3gJ747U7XmT53M+iUHkUd Wn1fUqs5mIhUGGJMfc5regPkHvXhJZnd09w417JJfVKk3R27B/kD9tFFqoDNZF4+ O60h+znc8Y2JAk+mm3hJCLs9eTIQeZ+PwLsxkiqVmJLY9eD2lo+nZMa5uWkcBJy/ eiPpFij6uzIHNN6/180Yyu189rEkgkpJnXY8A5KP8CCS31u2kZ14Au8Kvxwps2q4 /ETwng1/FfeiZNyiVfCu4l73qGU9fgw98Be86xu3LiMOie9PZ1+Hiqp0UPjszGWC roKAEc6MfyZBTjjemoxUtl5PIqcdOXopj6ob -----END CERTIFICATE-----Generated at Wed Nov 5 15:49:43 2025 by rpki-client