$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/EAxCBmyIKZtIqWr91LWva1mdsfo.cer File: EAxCBmyIKZtIqWr91LWva1mdsfo.cer (raw, json) Hash identifier: kkIzp3NurRw352KAjTBOdEgeLslxIzbxuOD22mnMSBY= Subject key identifier: 10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 670B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/EAxCBmyIKZtIqWr91LWva1mdsfo.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Apr 2026 01:37:50 +0000 Certificate not after: Thu 15 Apr 2027 01:30:02 +0000 Subordinate resources: IP: 2400:8320::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26379 (0x670b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:37:50 2026 GMT Not After : Apr 15 01:30:02 2027 GMT Subject: CN=100C42066C88299B48A96AFDD4B5AF6B599DB1FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:e8:d7:3e:65:a4:57:59:1b:e8:f1:1e:1f: 07:60:23:8e:6c:95:06:fc:3b:6d:51:17:5b:ec:9d: a7:78:70:8a:3b:ea:86:f5:dc:ab:97:58:db:a7:d5: b5:77:ce:29:e5:7f:ba:ed:75:0a:c1:f9:4f:fb:41: 15:8c:6e:1b:d1:7d:33:69:81:5a:af:9d:55:3f:5d: e7:fc:59:a7:4c:81:1e:40:fa:ce:75:c0:4f:06:4e: ce:52:46:85:0c:dd:a5:6b:2f:77:92:02:4d:fd:13: 08:1b:9e:6e:3e:f5:61:6c:b7:5d:aa:c4:97:2e:3e: 41:7c:16:d7:30:0a:54:0f:53:da:1f:85:03:27:72: ae:c6:86:43:c5:9c:97:b1:1a:ba:b5:32:08:fb:7c: 49:56:6b:24:52:92:61:66:93:b2:3d:36:c1:26:99: 0e:01:a5:bc:3b:49:e2:67:5c:ff:a8:fa:76:5f:1f: ed:05:de:f1:92:ee:ce:ad:91:ac:5d:dc:04:df:23: fe:39:41:f8:bc:42:8e:1b:35:aa:a6:fa:5d:e7:8e: 8b:a9:6d:a7:69:76:a9:f3:9a:91:e4:41:a7:dc:c3: 56:48:da:ee:01:67:f6:07:df:94:3a:ac:69:61:e4: 8d:aa:33:62:4c:28:65:98:3d:98:3d:e8:ab:0c:a9: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/EAxCBmyIKZtIqWr91LWva1mdsfo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8320::/32 Signature Algorithm: sha256WithRSAEncryption 0f:e9:b2:70:28:72:40:8c:59:e2:36:44:ab:4b:ea:7a:ad:53: a7:ae:ef:7c:f0:bf:35:c9:da:96:7b:f4:b4:76:28:8e:23:54: 81:00:25:63:8a:37:d5:73:b7:0b:d8:1c:73:d9:ef:cd:0c:72: 32:f9:d0:d7:bc:b9:91:fd:37:79:8f:eb:81:e5:1b:41:48:b6: 08:15:3b:fd:0d:29:d0:5b:bc:a8:4f:0f:6f:97:a3:e0:84:89: f0:42:d9:d6:24:63:74:55:09:e7:04:54:71:e2:31:e2:7d:20: ac:e6:e0:23:46:bd:ff:cc:d0:01:2a:b0:50:94:db:33:03:3d: f2:3f:fa:85:5b:62:27:ab:39:2b:ee:c4:36:2f:54:93:6a:69: d7:ce:82:98:b2:c7:41:3d:11:f7:f3:54:dc:5e:90:12:79:36: fc:68:a3:8d:49:d3:a2:7a:e3:cf:44:3c:53:a0:6e:28:3d:9b: 49:22:74:3d:da:50:7b:f9:cc:21:98:08:5c:c6:3e:52:7e:ee: 34:f1:4c:df:a6:21:05:92:03:04:28:5b:27:48:5e:fe:a0:97: ce:cd:d4:13:9e:ac:88:0a:e6:a4:dc:02:83:48:57:be:28:29: fa:16:9b:29:dd:71:73:2c:41:98:f5:a7:f9:4c:3f:5e:5a:72: ad:be:30:fd -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICZwswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDQxNTAxMzc1MFoXDTI3MDQxNTAxMzAwMlowMzEx MC8GA1UEAxMoMTAwQzQyMDY2Qzg4Mjk5QjQ4QTk2QUZERDRCNUFGNkI1OTlEQjFG QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALxg6Nc+ZaRXWRvo8R4f B2AjjmyVBvw7bVEXW+ydp3hwijvqhvXcq5dY26fVtXfOKeV/uu11CsH5T/tBFYxu G9F9M2mBWq+dVT9d5/xZp0yBHkD6znXATwZOzlJGhQzdpWsvd5ICTf0TCBuebj71 YWy3XarEly4+QXwW1zAKVA9T2h+FAydyrsaGQ8Wcl7EaurUyCPt8SVZrJFKSYWaT sj02wSaZDgGlvDtJ4mdc/6j6dl8f7QXe8ZLuzq2RrF3cBN8j/jlB+LxCjhs1qqb6 XeeOi6ltp2l2qfOakeRBp9zDVkja7gFn9gfflDqsaWHkjaozYkwoZZg9mD3oqwyp E9MCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQQDEIGbIgpm0ipav3Uta9rWZ2x+jAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0MDQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDA0L0VB eENCbXlJS1p0SXFXcjkxTFd2YTFtZHNmby5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAIMgMA0GCSqGSIb3 DQEBCwUAA4IBAQAP6bJwKHJAjFniNkSrS+p6rVOnru988L81ydqWe/S0diiOI1SB ACVjijfVc7cL2Bxz2e/NDHIy+dDXvLmR/Td5j+uB5RtBSLYIFTv9DSnQW7yoTw9v l6PghInwQtnWJGN0VQnnBFRx4jHifSCs5uAjRr3/zNABKrBQlNszAz3yP/qFW2In qzkr7sQ2L1STamnXzoKYssdBPRH381TcXpASeTb8aKONSdOieuPPRDxToG4oPZtJ InQ92lB7+cwhmAhcxj5Sfu408UzfpiEFkgMEKFsnSF7+oJfOzdQTnqyICuak3AKD SFe+KCn6Fpsp3XFzLEGY9af5TD9eWnKtvjD9 -----END CERTIFICATE-----Generated at Fri Apr 17 05:36:35 2026 by rpki-client