$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/HYQYqs44Xjp3O3jgLuqB5JPfl6I.cer File: HYQYqs44Xjp3O3jgLuqB5JPfl6I.cer (raw, json) Hash identifier: eFePAwKdWdgWdfxTi43uBTgbRdzefOJNlzbNxOUK+tQ= Subject key identifier: 1D:84:18:AA:CE:38:5E:3A:77:3B:78:E0:2E:EA:81:E4:93:DF:97:A2 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 777B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30334/HYQYqs44Xjp3O3jgLuqB5JPfl6I.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30334/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:41:39 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 2403:3200::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30587 (0x777b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:41:39 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=1D8418AACE385E3A773B78E02EEA81E493DF97A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:f8:e4:09:b8:57:e5:68:4e:09:ec:68:c4: bd:40:50:06:71:1b:3b:9a:f0:d2:6d:c5:61:f1:12: 7f:30:e9:0c:3f:59:2b:22:8d:e4:56:2a:34:a5:3d: 70:e5:81:8c:13:22:64:52:08:53:f6:a7:03:a5:e9: 0e:fc:eb:ad:5c:8e:a4:69:0a:bb:bb:05:1a:43:30: 52:70:a2:a4:30:32:d2:15:a2:d8:19:62:dd:6d:59: 84:df:2d:92:77:4d:a7:92:28:fd:a1:89:93:ef:e3: 2b:d7:7b:61:75:33:d4:90:ab:7d:31:52:54:8e:f1: c7:f0:6e:97:a2:af:e5:75:9c:83:d4:ac:b5:1b:db: f3:70:2d:df:eb:6f:d6:72:51:a7:8a:03:ab:dc:3f: df:e3:35:fd:f5:a5:79:45:f8:98:e9:e8:5d:80:9a: b5:6d:f2:55:6d:6b:50:ed:1a:71:9b:9d:ed:a6:b4: 3f:78:f0:c6:bb:b8:be:29:8c:ac:f8:28:28:77:0a: 32:cd:04:7c:a4:f1:f3:16:bf:bb:67:16:47:50:55: 4b:b3:b9:be:58:ba:88:05:8e:f0:2b:1f:2d:d4:f2: 25:17:7f:3f:d2:14:d4:f7:34:39:7f:b5:f9:63:ac: 57:0b:1e:d6:d9:58:35:41:95:ac:54:82:35:c0:33: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:84:18:AA:CE:38:5E:3A:77:3B:78:E0:2E:EA:81:E4:93:DF:97:A2 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30334/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30334/HYQYqs44Xjp3O3jgLuqB5JPfl6I.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:3200::/32 Signature Algorithm: sha256WithRSAEncryption 66:c7:89:e0:ed:f7:24:68:89:37:3d:d7:ab:ae:5f:bd:57:a5: fe:0c:bb:d8:97:2d:fa:f8:c3:0e:51:d0:b8:9e:d9:ee:4d:af: 95:44:65:1f:0e:08:9e:90:a8:46:02:35:67:af:1e:2a:4c:78: 4d:89:be:ca:7f:db:f6:16:65:36:0a:8e:11:9b:b0:4d:e3:49: 8c:46:20:ff:12:20:1d:6a:ee:80:6e:34:24:64:6d:be:e8:12: 12:bf:ca:1c:39:5a:eb:38:1a:f7:94:fe:4d:f7:b5:3c:c8:64: 5e:78:cc:58:a1:3a:9e:4f:0c:e4:4b:a8:f8:f5:a3:7a:b2:2f: 92:94:12:71:b7:48:5b:69:bf:88:a8:45:43:9d:9d:48:86:cd: 69:60:db:a5:36:d3:2c:44:f4:12:5a:5d:e3:2e:e5:4c:a0:14: 90:ed:db:e1:1b:26:6d:e8:f6:df:10:4f:ed:51:a5:8a:53:85: 9d:f4:1f:33:a7:26:6d:dc:59:02:11:d2:eb:5c:08:38:cb:d6: 2a:31:20:bb:ad:24:1c:c5:e3:48:86:8b:e9:9e:1c:4a:1d:52: 25:2c:b4:8d:80:f7:c3:e2:3e:aa:cd:42:bf:4f:18:6f:9d:34: f6:c4:91:ac:56:e4:73:d9:61:52:31:77:a7:c2:89:de:a3:d6: e1:fb:85:35 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICd3swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxNDEzOVoXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoMUQ4NDE4QUFDRTM4NUUzQTc3M0I3OEUwMkVFQTgxRTQ5M0RGOTdB MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJWW+OQJuFflaE4J7GjE vUBQBnEbO5rw0m3FYfESfzDpDD9ZKyKN5FYqNKU9cOWBjBMiZFIIU/anA6XpDvzr rVyOpGkKu7sFGkMwUnCipDAy0hWi2Bli3W1ZhN8tkndNp5Io/aGJk+/jK9d7YXUz 1JCrfTFSVI7xx/Bul6Kv5XWcg9SstRvb83At3+tv1nJRp4oDq9w/3+M1/fWleUX4 mOnoXYCatW3yVW1rUO0acZud7aa0P3jwxru4vimMrPgoKHcKMs0EfKTx8xa/u2cW R1BVS7O5vli6iAWO8CsfLdTyJRd/P9IU1Pc0OX+1+WOsVwse1tlYNUGVrFSCNcAz tdsCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQdhBiqzjheOnc7eOAu6oHkk9+XojAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMzQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzM0L0hZ UVlxczQ0WGpwM08zamdMdXFCNUpQZmw2SS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAzIAMA0GCSqGSIb3 DQEBCwUAA4IBAQBmx4ng7fckaIk3Pderrl+9V6X+DLvYly36+MMOUdC4ntnuTa+V RGUfDgiekKhGAjVnrx4qTHhNib7Kf9v2FmU2Co4Rm7BN40mMRiD/EiAdau6AbjQk ZG2+6BISv8ocOVrrOBr3lP5N97U8yGReeMxYoTqeTwzkS6j49aN6si+SlBJxt0hb ab+IqEVDnZ1Ihs1pYNulNtMsRPQSWl3jLuVMoBSQ7dvhGyZt6PbfEE/tUaWKU4Wd 9B8zpyZt3FkCEdLrXAg4y9YqMSC7rSQcxeNIhovpnhxKHVIlLLSNgPfD4j6qzUK/ TxhvnTT2xJGsVuRz2WFSMXenwoneo9bh+4U1 -----END CERTIFICATE-----Generated at Sun Nov 15 16:59:25 2026 by rpki-client