$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer File: Ab5k6lGElpjv90IvaTdI0tKCnPY.cer (raw, json) Hash identifier: 1/Cs8ryG+iELnZ87bZBs/uSRv09WFUgbQHIr0VizVSM= Subject key identifier: 01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 76DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:38:19 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 61.122.224.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 13:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30428 (0x76dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:38:19 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=01BE64EA51849698EFF7422F693748D2D2829CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:87:cd:ed:ca:27:13:9e:9f:5a:5f:96:22: f8:15:01:26:72:80:2d:47:1b:5d:a8:fb:b0:d3:10: c4:33:5f:65:5f:e2:05:71:f3:74:01:7e:ff:e0:cc: 11:2f:06:4a:ea:ae:47:8b:1d:4a:63:4f:3c:9f:0b: cc:28:71:b5:12:1c:d7:02:84:37:47:64:96:d2:8b: 2a:49:73:cb:04:ab:41:57:5d:ba:a5:68:68:f0:69: 5a:47:27:a5:9b:3d:bd:bc:98:74:df:0e:99:2a:c5: f9:ec:16:1c:f0:8b:01:6b:7c:45:eb:ba:b0:a2:0b: 01:0b:b2:62:73:09:62:1d:c0:55:a7:5e:4e:f1:90: a0:86:ef:79:1c:cd:3d:e6:9b:19:64:86:0d:60:74: 86:81:78:c8:da:e0:ef:52:15:e1:67:e2:a0:06:af: 69:93:c1:78:80:78:5d:a4:a5:80:af:db:c0:5b:1c: 7b:4a:62:73:2f:fc:fe:34:0b:55:bd:e8:2d:20:97: 0d:13:2a:90:05:54:09:44:7d:8d:10:11:0e:de:50: d0:6a:74:a6:88:c4:cf:68:b5:72:82:31:fb:f3:fd: 5d:7e:74:ba:96:3e:d4:77:00:d5:76:cb:f1:0b:1c: 04:a4:94:13:64:e3:15:1f:26:ed:cd:ff:70:08:a9: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.122.224.0/20 Signature Algorithm: sha256WithRSAEncryption 26:21:cf:e3:df:06:3d:a8:e2:62:b2:e6:5e:48:27:ed:bc:90: 92:4b:64:f5:47:95:c7:65:4e:02:84:80:f6:89:84:bb:c0:f9: 49:e5:fb:41:92:3e:b8:24:b6:47:5c:af:06:12:02:b8:96:c0: 7f:3c:45:1b:28:5b:71:8f:dd:30:6c:17:ac:03:2e:dd:ed:3b: 05:9c:b6:c4:55:d5:3e:89:e6:61:d4:c0:af:1c:9e:e7:f4:e6: eb:91:01:33:6a:01:43:a5:32:6e:a3:49:9d:8a:c3:54:94:48: e1:2e:e5:d9:1d:3e:40:37:03:c2:f5:9f:8f:1b:81:27:33:07: dc:33:1c:35:8a:e1:27:3e:1a:15:00:5a:82:29:2a:7c:69:86: ca:ed:e4:28:48:9a:41:07:fd:3c:ef:2e:18:79:c4:66:a0:01: e9:b2:c3:36:d1:c4:06:1f:34:63:0c:8b:f2:62:a4:46:d3:e5: b9:e3:c7:6d:d6:23:f1:78:92:9e:04:bd:fb:50:f0:e6:d3:4f: 9b:14:73:3c:7d:96:5c:e1:c7:2a:5f:c3:e9:f4:0c:51:51:9d: bb:ce:41:4d:56:39:ac:d0:b5:fe:58:5f:fb:77:a5:94:1a:aa: e7:b6:11:8c:97:97:c0:0b:5a:c6:60:ca:d6:12:85:63:87:02: 5d:72:9a:1d -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICdtwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxMzgxOVoXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoMDFCRTY0RUE1MTg0OTY5OEVGRjc0MjJGNjkzNzQ4RDJEMjgyOUNG NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2eh83tyicTnp9aX5Yi +BUBJnKALUcbXaj7sNMQxDNfZV/iBXHzdAF+/+DMES8GSuquR4sdSmNPPJ8LzChx tRIc1wKEN0dkltKLKklzywSrQVdduqVoaPBpWkcnpZs9vbyYdN8OmSrF+ewWHPCL AWt8Reu6sKILAQuyYnMJYh3AVadeTvGQoIbveRzNPeabGWSGDWB0hoF4yNrg71IV 4WfioAavaZPBeIB4XaSlgK/bwFsce0picy/8/jQLVb3oLSCXDRMqkAVUCUR9jRAR Dt5Q0Gp0pojEz2i1coIx+/P9XX50upY+1HcA1XbL8QscBKSUE2TjFR8m7c3/cAip qCUCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQBvmTqUYSWmO/3Qi9pN0jS0oKc9jAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC80OTEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzQ5MS9BYjVrNmxH RWxwanY5MEl2YVRkSTB0S0NuUFkubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPXrgMA0GCSqGSIb3DQEBCwUA A4IBAQAmIc/j3wY9qOJisuZeSCftvJCSS2T1R5XHZU4ChID2iYS7wPlJ5ftBkj64 JLZHXK8GEgK4lsB/PEUbKFtxj90wbBesAy7d7TsFnLbEVdU+ieZh1MCvHJ7n9Obr kQEzagFDpTJuo0mdisNUlEjhLuXZHT5ANwPC9Z+PG4EnMwfcMxw1iuEnPhoVAFqC KSp8aYbK7eQoSJpBB/087y4YecRmoAHpssM20cQGHzRjDIvyYqRG0+W548dt1iPx eJKeBL37UPDm00+bFHM8fZZc4ccqX8Pp9AxRUZ27zkFNVjms0LX+WF/7d6WUGqrn thGMl5fAC1rGYMrWEoVjhwJdcpod -----END CERTIFICATE-----Generated at Sun Nov 15 15:39:35 2026 by rpki-client