$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/HlQDhj3LO2EY-mJ1hvtV69HYVfE.cer File: HlQDhj3LO2EY-mJ1hvtV69HYVfE.cer (raw, json) Hash identifier: f1ptA4WmZ5RD2eMztUeNh83DUpgENC87o3AfV1evYZU= Subject key identifier: 1E:54:03:86:3D:CB:3B:61:18:FA:62:75:86:FB:55:EB:D1:D8:55:F1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 71BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/HlQDhj3LO2EY-mJ1hvtV69HYVfE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:34:44 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 103.247.88.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 13:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29119 (0x71bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:34:44 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=1E5403863DCB3B6118FA627586FB55EBD1D855F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:5b:cc:c7:b6:46:b0:39:5a:03:a3:90:57: a2:b3:4f:ba:a2:c7:77:72:5f:9f:6d:85:4b:c4:d6: a9:8d:e9:57:55:95:c5:d9:53:9c:eb:be:ab:b5:8b: 6a:0e:35:d1:bd:ea:b4:37:e4:8a:ce:14:49:8a:a6: 8e:20:88:47:54:1a:ce:45:2f:2d:3c:f6:d8:74:62: b3:36:64:28:1b:27:26:00:60:e7:d6:18:5d:35:65: 17:00:fa:d5:d4:23:18:54:8d:4e:63:09:85:73:30: 01:fb:62:ed:fd:90:08:fa:00:53:a6:56:59:03:0d: a0:ca:88:df:bf:b2:10:29:04:48:74:ca:58:f3:7b: 1d:18:da:26:c6:1c:2f:94:40:81:98:ce:6f:7c:1d: a0:af:be:e3:f3:bc:b5:f7:b5:b6:61:22:4f:96:79: cb:78:c5:f6:85:64:2f:67:05:d4:9d:10:22:9f:0c: 30:b1:db:98:71:4f:6b:b6:77:42:c5:50:b4:f3:aa: 26:cc:b4:36:31:5c:14:59:fb:c5:dc:1b:7a:e1:1e: 1d:8b:dd:d1:23:18:58:da:dc:16:78:4d:65:30:49: fe:e7:8e:15:d7:ea:e9:a1:f5:1b:e7:da:8a:ed:66: f7:a8:52:56:38:5d:51:4d:37:35:f7:ac:25:01:ac: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:03:86:3D:CB:3B:61:18:FA:62:75:86:FB:55:EB:D1:D8:55:F1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/HlQDhj3LO2EY-mJ1hvtV69HYVfE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.88.0/22 Signature Algorithm: sha256WithRSAEncryption 79:9c:5a:7f:b7:e6:0f:64:05:54:52:09:ff:4f:fc:89:63:42: c2:28:54:b0:0f:bc:b4:b0:f7:2c:7c:7b:5f:36:08:36:b3:90: 4e:55:d4:78:b3:ea:68:7a:9a:2a:1d:b2:64:67:a0:c6:ca:04: 24:e9:21:e8:be:7d:7f:7e:95:60:68:77:3e:df:d8:c6:13:d3: a8:79:0b:30:51:86:50:3b:78:2b:49:91:36:23:d6:a1:3f:2a: 21:d5:87:b7:a5:f7:e4:84:38:e2:c2:26:3d:d9:aa:d7:0a:7f: f4:a6:7b:f8:76:c7:46:b0:5e:be:31:46:fa:0c:69:a7:ef:87: 7f:bb:3d:7a:30:2e:75:09:d6:a9:e2:78:7d:a1:fb:68:48:55: 8a:18:d0:af:11:ef:e9:27:c6:28:61:15:81:7f:00:c6:15:27: b2:af:ec:1f:9c:80:ac:96:56:0d:e1:3f:17:85:a1:46:2a:92: 6f:9b:4a:53:72:0f:16:ff:43:3b:3d:e1:20:6f:c9:1a:82:10: ac:94:1b:da:7d:6d:90:0d:7a:34:fe:e7:19:2f:4f:d6:b2:a6: 7f:50:19:eb:8a:80:8e:cf:57:78:74:a3:6d:96:db:4c:a6:8b: 86:b9:bd:39:96:cd:a5:16:4a:60:e9:ed:ac:70:c9:5f:bf:65: 89:c9:c5:45 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICcb8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzQ0NFoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoMUU1NDAzODYzRENCM0I2MTE4RkE2Mjc1ODZGQjU1RUJEMUQ4NTVG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9GW8zHtkawOVoDo5BX orNPuqLHd3Jfn22FS8TWqY3pV1WVxdlTnOu+q7WLag410b3qtDfkis4USYqmjiCI R1QazkUvLTz22HRiszZkKBsnJgBg59YYXTVlFwD61dQjGFSNTmMJhXMwAfti7f2Q CPoAU6ZWWQMNoMqI37+yECkESHTKWPN7HRjaJsYcL5RAgZjOb3wdoK++4/O8tfe1 tmEiT5Z5y3jF9oVkL2cF1J0QIp8MMLHbmHFPa7Z3QsVQtPOqJsy0NjFcFFn7xdwb euEeHYvd0SMYWNrcFnhNZTBJ/ueOFdfq6aH1G+faiu1m96hSVjhdUU03NfesJQGs XuUCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQeVAOGPcs7YRj6YnWG+1Xr0dhV8TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81NDEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzU0MS9IbFFEaGoz TE8yRVktbUoxaHZ0VjY5SFlWZkUubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/dYMA0GCSqGSIb3DQEBCwUA A4IBAQB5nFp/t+YPZAVUUgn/T/yJY0LCKFSwD7y0sPcsfHtfNgg2s5BOVdR4s+po epoqHbJkZ6DGygQk6SHovn1/fpVgaHc+39jGE9OoeQswUYZQO3grSZE2I9ahPyoh 1Ye3pffkhDjiwiY92arXCn/0pnv4dsdGsF6+MUb6DGmn74d/uz16MC51Cdap4nh9 oftoSFWKGNCvEe/pJ8YoYRWBfwDGFSeyr+wfnICsllYN4T8XhaFGKpJvm0pTcg8W /0M7PeEgb8kaghCslBvafW2QDXo0/ucZL0/WsqZ/UBnrioCOz1d4dKNtlttMpouG ub05ls2lFkpg6e2scMlfv2WJycVF -----END CERTIFICATE-----Generated at Mon Sep 21 16:05:35 2026 by rpki-client