$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/8NnrOG2rUNE2q5ZLz1f0dZy37U0.cer File: 8NnrOG2rUNE2q5ZLz1f0dZy37U0.cer (raw, json) Hash identifier: oyqYpf6ABJsMrLTsnWaV+zSBxoAReYcmzpRKb/Vvm9w= Subject key identifier: F0:D9:EB:38:6D:AB:50:D1:36:AB:96:4B:CF:57:F4:75:9C:B7:ED:4D Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 72E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38016/8NnrOG2rUNE2q5ZLz1f0dZy37U0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38016/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:40:53 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 133.140.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 13:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29415 (0x72e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:40:53 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=F0D9EB386DAB50D136AB964BCF57F4759CB7ED4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:bb:09:d4:98:7a:19:08:68:66:89:43:2f: bc:34:19:30:51:a8:a1:55:5e:87:e0:f1:e6:18:b8: 61:59:b1:42:5b:0f:59:e5:e9:90:1b:e7:76:5b:c4: e8:8f:21:a5:f5:ff:e7:d9:91:7f:e8:3a:e1:b4:aa: c5:c2:83:70:4b:8d:1d:14:53:eb:39:74:af:f9:4b: d0:19:3f:00:99:f1:1f:e8:65:0d:61:b2:61:f7:ee: a5:6d:1a:90:2b:3e:6e:6b:d5:e9:b4:32:16:ad:2d: b1:57:66:98:5b:5a:74:05:29:f1:21:e1:3d:91:f0: 4b:18:0d:93:3b:d0:e0:b4:ec:18:1c:2a:78:59:c2: be:68:a7:95:b7:4a:67:12:68:4c:d5:5a:c8:b6:e7: c2:69:f4:d3:0b:c7:f4:b7:bb:05:5b:36:ba:e3:03: 70:b3:bf:38:e6:46:18:da:ea:c6:0a:0f:46:f7:c4: df:cb:6c:a5:3a:bc:7f:37:a3:58:3c:f1:42:fe:7e: 6b:78:9c:97:b7:b2:87:b6:35:e7:ac:93:ed:6d:a5: 2d:e0:89:23:b6:c4:30:72:83:56:dd:c8:c3:3b:ce: dd:ad:04:1b:f0:b1:d0:03:fd:92:27:e9:3f:76:51: 74:40:5f:80:28:0b:73:8a:cb:f2:30:5f:6c:ce:d7: 7a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:EB:38:6D:AB:50:D1:36:AB:96:4B:CF:57:F4:75:9C:B7:ED:4D X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38016/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38016/8NnrOG2rUNE2q5ZLz1f0dZy37U0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption 15:18:9f:c9:8a:92:65:9e:4e:d6:1b:39:bd:51:7b:14:b7:45: 0f:ae:60:37:dc:1c:f0:d6:da:e2:a1:78:1a:02:6c:37:fe:84: c3:51:61:80:44:01:e2:ec:22:68:79:c3:7e:8f:2e:b8:40:44: ad:d6:39:c1:a3:26:50:8c:58:46:47:d2:69:21:96:2a:d4:57: 51:bd:1c:18:97:3b:c5:85:ae:0c:88:cb:4e:cb:75:7d:4a:44: 5d:53:48:76:bf:00:55:29:8c:02:8a:85:2a:64:48:21:c7:ed: fc:e6:c8:25:52:15:37:a7:c6:d0:ce:87:b6:ae:88:98:76:26: b8:ed:cc:f7:74:01:6f:10:bd:d0:45:f0:54:05:0c:5f:d3:dc: ae:3e:bf:57:d1:c4:05:80:46:26:39:b6:62:e1:45:38:48:fc: fb:b1:be:2f:af:23:00:eb:11:b3:04:cc:b8:03:99:01:96:62: 3f:f0:37:eb:2b:3c:6e:77:59:4f:84:ec:67:41:3d:a9:db:95: 8d:6c:03:87:e2:60:bb:ba:94:fd:51:0b:fd:2a:18:ef:e1:de: d9:ad:00:1a:f9:c0:5c:c7:30:fd:40:bd:81:e0:f2:f7:34:91: 34:60:b6:76:93:65:8c:19:b3:41:a6:0a:4a:73:61:c0:ab:c6: df:a9:99:8e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICcucwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxNDA1M1oXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoRjBEOUVCMzg2REFCNTBEMTM2QUI5NjRCQ0Y1N0Y0NzU5Q0I3RUQ0 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMU1uwnUmHoZCGhmiUMv vDQZMFGooVVeh+Dx5hi4YVmxQlsPWeXpkBvndlvE6I8hpfX/59mRf+g64bSqxcKD cEuNHRRT6zl0r/lL0Bk/AJnxH+hlDWGyYffupW0akCs+bmvV6bQyFq0tsVdmmFta dAUp8SHhPZHwSxgNkzvQ4LTsGBwqeFnCvminlbdKZxJoTNVayLbnwmn00wvH9Le7 BVs2uuMDcLO/OOZGGNrqxgoPRvfE38tspTq8fzejWDzxQv5+a3icl7eyh7Y156yT 7W2lLeCJI7bEMHKDVt3IwzvO3a0EG/Cx0AP9kifpP3ZRdEBfgCgLc4rL8jBfbM7X emUCAwEAAaOCAoowggKGMB0GA1UdDgQWBBTw2es4batQ0TarlkvPV/R1nLftTTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzgwMTYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzM4MDE2LzhO bnJPRzJyVU5FMnE1Wkx6MWYwZFp5MzdVMC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCFjDANBgkqhkiG9w0B AQsFAAOCAQEAFRifyYqSZZ5O1hs5vVF7FLdFD65gN9wc8Nba4qF4GgJsN/6Ew1Fh gEQB4uwiaHnDfo8uuEBErdY5waMmUIxYRkfSaSGWKtRXUb0cGJc7xYWuDIjLTst1 fUpEXVNIdr8AVSmMAoqFKmRIIcft/ObIJVIVN6fG0M6Htq6ImHYmuO3M93QBbxC9 0EXwVAUMX9Pcrj6/V9HEBYBGJjm2YuFFOEj8+7G+L68jAOsRswTMuAOZAZZiP/A3 6ys8bndZT4TsZ0E9qduVjWwDh+Jgu7qU/VEL/SoY7+He2a0AGvnAXMcw/UC9geDy 9zSRNGC2dpNljBmzQaYKSnNhwKvG36mZjg== -----END CERTIFICATE-----Generated at Mon Sep 21 16:32:15 2026 by rpki-client