$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer File: DN4GKr07sxFWHKWio8BCa6JP4qc.cer (raw, json) Hash identifier: 7XUdnIoCHVS37BW3ns3xiGYG9/2kuaPQPg9WhBJkkDI= Subject key identifier: 0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 70F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:30:10 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 133.100.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 13:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28918 (0x70f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:30:10 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:87:3e:ce:6f:c7:f7:8f:23:2b:f0:b6:3c: fe:fe:63:a7:bf:e9:c7:d6:b9:8b:74:8c:39:f1:f8: de:d1:ed:32:50:f5:18:42:0e:a7:ae:e6:39:95:43: 24:c5:ac:b1:c6:3d:ce:cd:6e:60:62:ae:30:ef:af: af:35:f9:c2:8d:e3:87:73:ef:ae:42:34:dc:3a:1e: 06:72:8e:08:99:8c:0a:0e:bb:f3:bf:f1:15:a7:82: 70:80:0e:6c:fa:0d:98:cd:28:66:ac:74:53:41:c9: 02:d1:60:2c:cb:b6:79:f6:c4:87:ce:cc:b4:48:76: b5:e7:3f:be:c6:fc:f5:e3:07:b9:9c:49:38:b7:55: ae:9d:08:b8:c0:32:d1:4d:5b:37:05:cf:ee:b6:e7: ae:3a:05:14:36:4a:3e:8e:01:a1:8a:5e:50:f2:1b: 1c:c1:69:cd:ba:3f:a3:1f:3c:77:eb:fc:e0:8c:6f: b2:2e:f4:93:22:4d:53:c5:ee:52:0a:89:cb:65:cc: 25:6b:d4:d7:5c:74:89:29:68:82:be:27:db:9a:e1: 0b:2e:4a:cf:1b:89:01:f5:db:1c:a7:29:be:1c:b3: 45:65:0a:d5:38:45:a8:04:c9:65:25:df:dc:95:5e: 37:3b:a5:2e:df:ae:56:6a:71:a9:cb:ef:38:08:e8: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.100.0.0/16 Signature Algorithm: sha256WithRSAEncryption 60:83:fd:da:20:2d:4a:8a:5a:04:fe:2a:27:af:c5:f1:a8:95: 1d:ed:7c:2d:4b:2b:9c:c7:66:71:be:71:e6:b2:a0:a3:35:3f: 64:7c:52:69:9a:42:19:d6:c4:3a:af:94:5c:5b:48:d8:4b:3e: 72:60:5e:2b:1c:2e:21:a6:99:cf:18:e3:4a:dc:67:e5:43:69: 4d:ad:a1:3a:e5:4e:6d:df:4c:5f:d8:77:a6:0f:8d:89:d7:db: c3:38:da:42:4b:3a:0d:af:42:ac:58:e8:2a:ac:53:f8:ce:4a: 23:81:40:d1:a5:7c:36:60:38:64:e8:3b:fb:4b:54:03:c5:1b: d4:16:fc:f3:60:dd:f6:3a:81:fd:94:74:3f:d6:01:a8:01:fe: a8:53:6a:42:e1:b5:97:2f:b1:45:b5:e3:e9:9b:a5:a9:85:2d: da:de:95:62:06:86:12:73:89:c3:a5:c7:78:5b:25:bf:a8:48: 21:db:d0:e4:82:4a:5f:2b:b5:b9:71:ee:7b:07:58:8a:3d:cd: 96:ea:3f:a6:ee:ef:13:88:2b:ca:b0:83:6a:d1:73:76:af:4d: 50:ad:e4:ad:b7:39:cb:9e:f5:85:8c:b1:4a:b7:c9:ad:e4:96: 36:3a:0e:0b:a4:c3:62:06:db:80:cd:31:31:64:c4:eb:5c:e7: 59:f1:82:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICcPYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzAxMFoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoMENERTA2MkFCRDNCQjMxMTU2MUNBNUEyQTNDMDQyNkJBMjRGRTJB NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKUghz7Ob8f3jyMr8LY8 /v5jp7/px9a5i3SMOfH43tHtMlD1GEIOp67mOZVDJMWsscY9zs1uYGKuMO+vrzX5 wo3jh3PvrkI03DoeBnKOCJmMCg6787/xFaeCcIAObPoNmM0oZqx0U0HJAtFgLMu2 efbEh87MtEh2tec/vsb89eMHuZxJOLdVrp0IuMAy0U1bNwXP7rbnrjoFFDZKPo4B oYpeUPIbHMFpzbo/ox88d+v84Ixvsi70kyJNU8XuUgqJy2XMJWvU11x0iSlogr4n 25rhCy5KzxuJAfXbHKcpvhyzRWUK1ThFqATJZSXf3JVeNzulLt+uVmpxqcvvOAjo oNkCAwEAAaOCAogwggKEMB0GA1UdDgQWBBQM3gYqvTuzEVYcpaKjwEJrok/ipzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTA4MC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTA4MC9ETjRH S3IwN3N4RldIS1dpbzhCQ2E2SlA0cWMubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhWQwDQYJKoZIhvcNAQEL BQADggEBAGCD/dogLUqKWgT+KievxfGolR3tfC1LK5zHZnG+ceayoKM1P2R8Umma QhnWxDqvlFxbSNhLPnJgXiscLiGmmc8Y40rcZ+VDaU2toTrlTm3fTF/Yd6YPjYnX 28M42kJLOg2vQqxY6CqsU/jOSiOBQNGlfDZgOGToO/tLVAPFG9QW/PNg3fY6gf2U dD/WAagB/qhTakLhtZcvsUW14+mbpamFLdrelWIGhhJzicOlx3hbJb+oSCHb0OSC Sl8rtblx7nsHWIo9zZbqP6bu7xOIK8qwg2rRc3avTVCt5K23Ocue9YWMsUq3ya3k ljY6Dgukw2IG24DNMTFkxOtc51nxgp4= -----END CERTIFICATE-----Generated at Mon Sep 21 15:59:14 2026 by rpki-client