$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/HlQDhj3LO2EY-mJ1hvtV69HYVfE.cer File: HlQDhj3LO2EY-mJ1hvtV69HYVfE.cer (raw, json) Hash identifier: wPke9F/lEQFmg9ATK4+vHM1IXzXMIASK/xR9J5zZvO8= Subject key identifier: 1E:54:03:86:3D:CB:3B:61:18:FA:62:75:86:FB:55:EB:D1:D8:55:F1 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 75A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/HlQDhj3LO2EY-mJ1hvtV69HYVfE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:31:02 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 103.247.88.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30117 (0x75a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:31:02 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=1E5403863DCB3B6118FA627586FB55EBD1D855F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:5b:cc:c7:b6:46:b0:39:5a:03:a3:90:57: a2:b3:4f:ba:a2:c7:77:72:5f:9f:6d:85:4b:c4:d6: a9:8d:e9:57:55:95:c5:d9:53:9c:eb:be:ab:b5:8b: 6a:0e:35:d1:bd:ea:b4:37:e4:8a:ce:14:49:8a:a6: 8e:20:88:47:54:1a:ce:45:2f:2d:3c:f6:d8:74:62: b3:36:64:28:1b:27:26:00:60:e7:d6:18:5d:35:65: 17:00:fa:d5:d4:23:18:54:8d:4e:63:09:85:73:30: 01:fb:62:ed:fd:90:08:fa:00:53:a6:56:59:03:0d: a0:ca:88:df:bf:b2:10:29:04:48:74:ca:58:f3:7b: 1d:18:da:26:c6:1c:2f:94:40:81:98:ce:6f:7c:1d: a0:af:be:e3:f3:bc:b5:f7:b5:b6:61:22:4f:96:79: cb:78:c5:f6:85:64:2f:67:05:d4:9d:10:22:9f:0c: 30:b1:db:98:71:4f:6b:b6:77:42:c5:50:b4:f3:aa: 26:cc:b4:36:31:5c:14:59:fb:c5:dc:1b:7a:e1:1e: 1d:8b:dd:d1:23:18:58:da:dc:16:78:4d:65:30:49: fe:e7:8e:15:d7:ea:e9:a1:f5:1b:e7:da:8a:ed:66: f7:a8:52:56:38:5d:51:4d:37:35:f7:ac:25:01:ac: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:03:86:3D:CB:3B:61:18:FA:62:75:86:FB:55:EB:D1:D8:55:F1 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/541/HlQDhj3LO2EY-mJ1hvtV69HYVfE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.88.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:b3:d7:8b:52:65:e0:ba:8e:38:34:17:fb:59:30:fd:07:b3: 36:e2:a8:47:98:63:34:c2:d9:c8:99:ae:f1:b9:85:fc:7d:6c: 5e:98:40:b7:f6:0c:91:c1:17:04:cd:1b:af:86:5a:f0:e9:28: b8:38:8a:35:16:28:b6:18:cc:87:2b:e2:62:53:cc:d5:b9:22: af:15:c4:ae:74:6c:8a:02:f0:ed:7f:05:f7:d9:60:00:ba:49: 87:6f:24:04:70:a9:e5:93:8a:d9:ca:8c:16:71:3e:b2:e9:f6: f1:24:c6:56:92:cf:14:c1:cc:0b:5c:4e:59:23:a1:f5:7b:80: 86:2c:16:a5:93:e5:d0:0a:31:11:cb:69:b1:12:0b:95:45:09: 22:13:ff:84:21:fb:70:9c:36:5e:5b:94:68:38:18:a7:b6:f7: cf:d9:75:fb:3f:46:70:ae:e4:8b:af:97:06:42:dd:ca:3f:71: b8:d8:e8:ad:c3:df:5c:02:40:b1:ec:24:ef:4e:97:c0:50:67: 18:bd:67:ec:d6:9d:74:3c:41:3a:6d:85:06:7d:0e:ee:4b:b2: 41:80:a0:d4:7d:90:09:58:57:01:a5:8d:91:7e:27:3b:36:37: 56:dc:f4:72:8c:90:65:5e:77:cc:46:e6:65:b2:04:0c:11:b3: b2:9e:9d:9e -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICdaUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxMzEwMloXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoMUU1NDAzODYzRENCM0I2MTE4RkE2Mjc1ODZGQjU1RUJEMUQ4NTVG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9GW8zHtkawOVoDo5BX orNPuqLHd3Jfn22FS8TWqY3pV1WVxdlTnOu+q7WLag410b3qtDfkis4USYqmjiCI R1QazkUvLTz22HRiszZkKBsnJgBg59YYXTVlFwD61dQjGFSNTmMJhXMwAfti7f2Q CPoAU6ZWWQMNoMqI37+yECkESHTKWPN7HRjaJsYcL5RAgZjOb3wdoK++4/O8tfe1 tmEiT5Z5y3jF9oVkL2cF1J0QIp8MMLHbmHFPa7Z3QsVQtPOqJsy0NjFcFFn7xdwb euEeHYvd0SMYWNrcFnhNZTBJ/ueOFdfq6aH1G+faiu1m96hSVjhdUU03NfesJQGs XuUCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBQeVAOGPcs7YRj6YnWG+1Xr0dhV8TAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81NDEvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzU0MS9IbFFEaGoz TE8yRVktbUoxaHZ0VjY5SFlWZkUubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/dYMA0GCSqGSIb3DQEBCwUA A4IBAQCds9eLUmXguo44NBf7WTD9B7M24qhHmGM0wtnIma7xuYX8fWxemEC39gyR wRcEzRuvhlrw6Si4OIo1Fii2GMyHK+JiU8zVuSKvFcSudGyKAvDtfwX32WAAukmH byQEcKnlk4rZyowWcT6y6fbxJMZWks8UwcwLXE5ZI6H1e4CGLBalk+XQCjERy2mx EguVRQkiE/+EIftwnDZeW5RoOBintvfP2XX7P0ZwruSLr5cGQt3KP3G42Oitw99c AkCx7CTvTpfAUGcYvWfs1p10PEE6bYUGfQ7uS7JBgKDUfZAJWFcBpY2Rfic7NjdW 3PRyjJBlXnfMRuZlsgQMEbOynp2e -----END CERTIFICATE-----Generated at Sun Nov 15 16:34:55 2026 by rpki-client