$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/HlQDhj3LO2EY-mJ1hvtV69HYVfE.cer File: HlQDhj3LO2EY-mJ1hvtV69HYVfE.cer (raw, json) Hash identifier: vKS6Glb4nzhjiDzSPayD8dPK6MIS6kzxYwGYnIrqzFU= Subject key identifier: 1E:54:03:86:3D:CB:3B:61:18:FA:62:75:86:FB:55:EB:D1:D8:55:F1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/HlQDhj3LO2EY-mJ1hvtV69HYVfE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 05 Nov 2025 08:43:56 +0000 Certificate not after: Thu 05 Nov 2026 08:37:34 +0000 Subordinate resources: IP: 103.247.88.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23518 (0x5bde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 5 08:43:56 2025 GMT Not After : Nov 5 08:37:34 2026 GMT Subject: CN=1E5403863DCB3B6118FA627586FB55EBD1D855F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:5b:cc:c7:b6:46:b0:39:5a:03:a3:90:57: a2:b3:4f:ba:a2:c7:77:72:5f:9f:6d:85:4b:c4:d6: a9:8d:e9:57:55:95:c5:d9:53:9c:eb:be:ab:b5:8b: 6a:0e:35:d1:bd:ea:b4:37:e4:8a:ce:14:49:8a:a6: 8e:20:88:47:54:1a:ce:45:2f:2d:3c:f6:d8:74:62: b3:36:64:28:1b:27:26:00:60:e7:d6:18:5d:35:65: 17:00:fa:d5:d4:23:18:54:8d:4e:63:09:85:73:30: 01:fb:62:ed:fd:90:08:fa:00:53:a6:56:59:03:0d: a0:ca:88:df:bf:b2:10:29:04:48:74:ca:58:f3:7b: 1d:18:da:26:c6:1c:2f:94:40:81:98:ce:6f:7c:1d: a0:af:be:e3:f3:bc:b5:f7:b5:b6:61:22:4f:96:79: cb:78:c5:f6:85:64:2f:67:05:d4:9d:10:22:9f:0c: 30:b1:db:98:71:4f:6b:b6:77:42:c5:50:b4:f3:aa: 26:cc:b4:36:31:5c:14:59:fb:c5:dc:1b:7a:e1:1e: 1d:8b:dd:d1:23:18:58:da:dc:16:78:4d:65:30:49: fe:e7:8e:15:d7:ea:e9:a1:f5:1b:e7:da:8a:ed:66: f7:a8:52:56:38:5d:51:4d:37:35:f7:ac:25:01:ac: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:03:86:3D:CB:3B:61:18:FA:62:75:86:FB:55:EB:D1:D8:55:F1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/HlQDhj3LO2EY-mJ1hvtV69HYVfE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.88.0/22 Signature Algorithm: sha256WithRSAEncryption 69:76:e3:c9:28:14:da:5f:ea:89:d2:e9:4c:2f:6a:62:a8:54: 47:5a:26:29:3b:3d:b5:96:0b:4a:5a:5c:eb:8e:42:cc:e8:df: cb:93:c9:9b:01:98:ec:fd:fb:4f:28:78:d2:75:25:b1:59:ab: 04:06:80:1f:76:f6:ae:f3:2c:a3:19:ba:2c:01:aa:4f:90:7a: 13:d1:45:ce:f7:39:e2:ce:3f:bc:84:47:d6:d3:37:7b:0c:ee: 9d:58:f1:95:1d:be:0c:2e:81:b3:f8:7d:df:23:c8:fb:c2:c6: df:d4:0e:23:10:7e:56:3a:8f:4a:cd:fd:ad:7e:c7:9b:f0:e5: 20:f2:22:4c:5d:ec:6b:ea:e8:38:8b:04:84:5d:cc:7d:42:de: 72:73:d2:ce:a9:e4:72:fe:1a:83:cf:6d:99:16:97:ba:aa:e1: 65:67:cf:0b:7b:7d:76:4a:91:bc:f1:2c:f7:33:2b:83:db:36: 2f:ae:17:ec:86:3c:28:d0:d2:f6:c8:ec:2f:db:73:d5:56:c6: c4:88:6d:80:c5:80:a6:68:08:a7:71:e4:3f:3e:b7:b8:5d:28: 40:15:24:59:1a:09:10:91:8e:d6:5b:82:60:a7:fe:e2:8b:84: f3:cd:a4:ba:c2:0b:1b:f0:c0:22:04:64:2a:57:a7:b1:9a:7a: 24:37:f3:27 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICW94wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTEwNTA4NDM1NloXDTI2MTEwNTA4MzczNFowMzEx MC8GA1UEAxMoMUU1NDAzODYzRENCM0I2MTE4RkE2Mjc1ODZGQjU1RUJEMUQ4NTVG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9GW8zHtkawOVoDo5BX orNPuqLHd3Jfn22FS8TWqY3pV1WVxdlTnOu+q7WLag410b3qtDfkis4USYqmjiCI R1QazkUvLTz22HRiszZkKBsnJgBg59YYXTVlFwD61dQjGFSNTmMJhXMwAfti7f2Q CPoAU6ZWWQMNoMqI37+yECkESHTKWPN7HRjaJsYcL5RAgZjOb3wdoK++4/O8tfe1 tmEiT5Z5y3jF9oVkL2cF1J0QIp8MMLHbmHFPa7Z3QsVQtPOqJsy0NjFcFFn7xdwb euEeHYvd0SMYWNrcFnhNZTBJ/ueOFdfq6aH1G+faiu1m96hSVjhdUU03NfesJQGs XuUCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQeVAOGPcs7YRj6YnWG+1Xr0dhV8TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81NDEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzU0MS9IbFFEaGoz TE8yRVktbUoxaHZ0VjY5SFlWZkUubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/dYMA0GCSqGSIb3DQEBCwUA A4IBAQBpduPJKBTaX+qJ0ulML2piqFRHWiYpOz21lgtKWlzrjkLM6N/Lk8mbAZjs /ftPKHjSdSWxWasEBoAfdvau8yyjGbosAapPkHoT0UXO9znizj+8hEfW0zd7DO6d WPGVHb4MLoGz+H3fI8j7wsbf1A4jEH5WOo9Kzf2tfseb8OUg8iJMXexr6ug4iwSE Xcx9Qt5yc9LOqeRy/hqDz22ZFpe6quFlZ88Le312SpG88Sz3MyuD2zYvrhfshjwo 0NL2yOwv23PVVsbEiG2AxYCmaAinceQ/Pre4XShAFSRZGgkQkY7WW4Jgp/7ii4Tz zaS6wgsb8MAiBGQqV6exmnokN/Mn -----END CERTIFICATE-----Generated at Wed Nov 5 22:10:39 2025 by rpki-client