$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer File: M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer (raw, json) Hash identifier: SP5IrD+mUlS65hh7YfLi0uZlIGF/Frr1xbHSiGjWs6w= Subject key identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 61D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Feb 2026 01:30:08 +0000 Certificate not after: Mon 15 Feb 2027 01:30:02 +0000 Subordinate resources: IP: 103.142.12.0/23 IP: 133.247.112.0/20 IP: 202.233.68.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25045 (0x61d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Feb 15 01:30:08 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=33D2C2C8816F30E6B58262B93C717C85513505C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:1d:34:ac:99:fa:0f:7c:f4:c0:39:e0:e8: 95:e8:08:f1:95:37:a9:57:1a:81:c1:53:36:b7:0d: 69:47:7b:cf:59:6c:a0:60:40:84:e0:57:53:a3:bd: 4a:48:eb:12:fc:21:bc:ee:64:de:77:16:ce:1a:96: 69:dd:6c:06:9f:92:40:78:2f:c7:1b:4d:40:f9:a2: 2c:97:a9:4d:a2:b8:57:af:e4:a7:e4:ee:8a:f8:ee: 92:cc:fd:1b:43:65:85:66:b9:d8:70:75:5d:f6:11: ed:b6:ae:ee:de:54:0f:b0:a5:1e:ce:b2:20:17:f9: 13:b8:89:a9:09:d0:f8:40:a7:cb:85:e5:81:17:02: c1:34:99:dd:b2:da:d3:08:89:22:2d:78:b9:8e:2d: c9:03:1f:7b:21:ef:ef:18:bb:fc:13:74:3c:83:32: eb:32:4b:32:9c:c2:de:17:6e:cd:5f:0e:a1:6d:ae: 40:82:46:76:45:38:e0:b3:2b:9f:a7:4e:cd:fe:f3: a3:72:83:0c:f0:55:6c:f0:02:f2:d6:0f:3f:94:00: 99:48:b0:1e:62:0d:78:30:e3:c5:25:22:2b:2e:47: f7:8a:7c:64:03:47:b5:45:d7:0e:76:02:21:fd:da: f3:f0:e4:b5:d1:0a:3f:12:ed:34:a4:e7:fa:25:0a: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.12.0/23 133.247.112.0/20 202.233.68.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:b3:60:20:03:38:75:5b:7e:af:a8:79:97:1d:ae:01:04:ec: f1:e2:9c:56:79:39:73:94:ff:d5:60:75:23:58:1c:70:fe:49: 31:e4:2d:66:e2:0e:0b:22:5c:62:1c:a2:8b:68:5e:c2:57:a8: 59:62:ad:3b:95:ff:6f:eb:08:f8:02:37:51:c6:b8:36:0a:d1: 30:f9:f8:52:33:af:e5:9b:af:be:35:66:84:cf:29:5d:5a:63: 7b:ab:7f:34:a7:db:4c:a8:af:23:e0:31:80:11:c4:e1:25:70: 50:7a:e1:b0:e9:b3:ff:fa:d3:08:79:02:27:91:e2:b9:17:a0: 80:d9:c0:bd:c4:0b:ee:8e:e3:26:5a:b3:8a:d7:ae:79:1f:27: e1:1d:91:2b:db:ca:79:f7:e4:e1:0e:98:8c:fc:bc:d4:79:e1: ac:41:08:cd:c7:20:c4:de:ab:64:9c:ea:a7:2d:34:77:0c:56: 7e:fb:48:b9:3c:aa:4d:d4:9f:c1:10:fe:65:c6:36:5b:0b:42: c9:91:6f:07:b2:78:ce:2e:55:47:a1:67:3b:8a:b4:1d:97:2b: 7b:c1:42:6c:f6:0b:27:c7:97:a3:70:dc:f1:ef:6e:96:66:c7: e6:9b:aa:0b:62:21:1c:a0:be:eb:ef:30:b4:b0:5b:c9:74:b7: b7:de:56:2e -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICYdUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDIxNTAxMzAwOFoXDTI3MDIxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzNEMkMyQzg4MTZGMzBFNkI1ODI2MkI5M0M3MTdDODU1MTM1MDVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeZHTSsmfoPfPTAOeDo legI8ZU3qVcagcFTNrcNaUd7z1lsoGBAhOBXU6O9SkjrEvwhvO5k3ncWzhqWad1s Bp+SQHgvxxtNQPmiLJepTaK4V6/kp+Tuivjuksz9G0NlhWa52HB1XfYR7bau7t5U D7ClHs6yIBf5E7iJqQnQ+ECny4XlgRcCwTSZ3bLa0wiJIi14uY4tyQMfeyHv7xi7 /BN0PIMy6zJLMpzC3hduzV8OoW2uQIJGdkU44LMrn6dOzf7zo3KDDPBVbPAC8tYP P5QAmUiwHmINeDDjxSUiKy5H94p8ZANHtUXXDnYCIf3a8/DktdEKPxLtNKTn+iUK rr0CAwEAAaOCApcwggKTMB0GA1UdDgQWBBQz0sLIgW8w5rWCYrk8cXyFUTUFxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTAyL005 TEN5SUZ2TU9hMWdtSzVQSEY4aFZFMUJjVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAFnjgwDBASF93ADBALK 6UQwDQYJKoZIhvcNAQELBQADggEBAIqzYCADOHVbfq+oeZcdrgEE7PHinFZ5OXOU /9VgdSNYHHD+STHkLWbiDgsiXGIcootoXsJXqFlirTuV/2/rCPgCN1HGuDYK0TD5 +FIzr+Wbr741ZoTPKV1aY3urfzSn20yoryPgMYARxOElcFB64bDps//60wh5AieR 4rkXoIDZwL3EC+6O4yZas4rXrnkfJ+EdkSvbynn35OEOmIz8vNR54axBCM3HIMTe q2Sc6qctNHcMVn77SLk8qk3Un8EQ/mXGNlsLQsmRbweyeM4uVUehZzuKtB2XK3vB Qmz2CyfHl6Nw3PHvbpZmx+abqgtiIRygvuvvMLSwW8l0t7feVi4= -----END CERTIFICATE-----Generated at Mon Mar 2 03:24:01 2026 by rpki-client