$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer File: ENGH2x2fTTa03kSL5DdnEpp512Q.cer (raw, json) Hash identifier: BWmtDXeKV8r0wmd3M0pmRVFe2BUD0aC2uH99HN86nTQ= Subject key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 742E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 Oct 2026 01:35:41 +0000 Certificate not after: Fri 15 Oct 2027 01:30:02 +0000 Subordinate resources: IP: 103.113.56.0/22 IP: 202.226.0.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 15:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29742 (0x742e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:35:41 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:23:e7:03:9f:6c:49:6e:00:05:77:25:18: 30:d5:90:f4:a4:f2:02:d5:75:c5:a9:12:47:50:ed: 49:78:c1:30:fe:cc:df:f2:90:92:34:a1:98:b0:4e: 97:3d:24:ab:64:de:19:18:19:f5:3e:9b:d7:23:6c: da:cf:cf:c0:d3:16:01:72:eb:9b:2a:af:10:f2:58: 89:69:b9:c9:2f:ef:f2:fa:f7:6d:51:49:d1:52:fc: 55:6d:9d:b2:27:e8:4e:79:9d:7a:20:09:91:7e:2c: 34:d9:98:35:dd:70:19:c9:f0:a0:ee:10:1c:bf:3f: bf:4a:f4:18:30:c1:20:b7:28:90:63:72:78:ba:7a: 86:36:c0:16:98:95:54:87:00:12:1a:63:55:fd:b6: 87:d2:2c:c4:1f:2a:25:11:d1:f0:7c:56:4e:d4:14: c4:7a:82:0f:07:dd:c4:9b:c6:b2:4c:03:91:1c:70: 4b:83:e8:b2:b2:12:c0:d3:44:92:70:ca:53:d6:d7: d1:99:93:33:a9:48:64:82:32:81:c4:b1:17:f2:ea: 48:a5:17:6d:95:69:39:0c:82:4d:21:34:00:54:6a: 44:2f:fb:15:07:92:02:ee:0c:52:85:dd:3c:ea:73: d5:52:5c:7a:d1:3f:a8:2a:85:5b:72:27:bd:93:ae: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.56.0/22 202.226.0.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:60:ca:90:52:f0:0a:a3:40:86:f7:57:c0:b9:be:ca:7d:33: 84:62:a7:63:44:98:73:d4:ca:45:03:9f:d7:bb:8b:d0:f3:af: 9d:80:7a:48:86:62:b0:86:20:d0:3b:48:c5:d8:90:a7:e5:2d: 07:52:d0:d5:8e:33:27:a6:a0:d9:ef:95:4b:47:c1:e8:78:44: ca:49:85:1c:ea:06:cf:aa:87:5e:21:73:fa:fe:13:df:a4:4c: 23:f2:3f:46:c6:a0:59:f1:50:3e:69:60:1b:68:06:f4:38:cf: 81:e6:07:d0:9d:5d:95:60:55:3e:86:5e:ea:18:9e:47:2a:8f: d8:f3:bf:94:bd:86:a6:d3:d2:17:ee:03:66:43:c6:46:13:e4: 74:8c:79:90:a3:c0:ca:79:25:ba:f7:51:2e:f5:6e:63:6a:63: ca:93:e1:7b:d4:c5:0a:93:6f:37:d8:3f:cc:b6:f9:85:43:8d: fe:e5:4e:84:fd:fb:4c:8a:7d:78:11:ec:63:05:df:fa:35:2d: b6:c4:70:24:f9:88:a6:f8:52:38:83:4f:b9:02:7c:f1:76:6a: 26:96:8b:11:61:8d:80:ed:cf:da:82:a5:8f:94:7e:39:d3:8d: 6a:fe:7d:b0:af:04:72:f4:88:68:c8:a7:39:c0:5c:5d:bf:92: b2:c6:e7:68 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICdC4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTAxNTAxMzU0MVoXDTI3MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoMTBEMTg3REIxRDlGNEQzNkI0REU0NDhCRTQzNzY3MTI5QTc5RDc2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRXI+cDn2xJbgAFdyUY MNWQ9KTyAtV1xakSR1DtSXjBMP7M3/KQkjShmLBOlz0kq2TeGRgZ9T6b1yNs2s/P wNMWAXLrmyqvEPJYiWm5yS/v8vr3bVFJ0VL8VW2dsifoTnmdeiAJkX4sNNmYNd1w GcnwoO4QHL8/v0r0GDDBILcokGNyeLp6hjbAFpiVVIcAEhpjVf22h9IsxB8qJRHR 8HxWTtQUxHqCDwfdxJvGskwDkRxwS4PosrISwNNEknDKU9bX0ZmTM6lIZIIygcSx F/LqSKUXbZVpOQyCTSE0AFRqRC/7FQeSAu4MUoXdPOpz1VJcetE/qCqFW3InvZOu WrUCAwEAAaOCApEwggKNMB0GA1UdDgQWBBQQ0YfbHZ9NNrTeRIvkN2cSmnnXZDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwNjQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDY0L0VO R0gyeDJmVFRhMDNrU0w1RGRuRXBwNTEyUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAJncTgDBALK4gAwDQYJ KoZIhvcNAQELBQADggEBACtgypBS8AqjQIb3V8C5vsp9M4Rip2NEmHPUykUDn9e7 i9Dzr52AekiGYrCGINA7SMXYkKflLQdS0NWOMyemoNnvlUtHweh4RMpJhRzqBs+q h14hc/r+E9+kTCPyP0bGoFnxUD5pYBtoBvQ4z4HmB9CdXZVgVT6GXuoYnkcqj9jz v5S9hqbT0hfuA2ZDxkYT5HSMeZCjwMp5Jbr3US71bmNqY8qT4XvUxQqTbzfYP8y2 +YVDjf7lToT9+0yKfXgR7GMF3/o1LbbEcCT5iKb4UjiDT7kCfPF2aiaWixFhjYDt z9qCpY+UfjnTjWr+fbCvBHL0iGjIpznAXF2/krLG52g= -----END CERTIFICATE-----Generated at Sat Nov 7 12:01:29 2026 by rpki-client