$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/MUonTGWE3-nGIQgVOjN2ggP1RC4.cer File: MUonTGWE3-nGIQgVOjN2ggP1RC4.cer (raw, json) Hash identifier: nWmWTU5JmTdXRXQrhOXCz7HGNOYz3w3uy04J5dKzGwU= Subject key identifier: 31:4A:27:4C:65:84:DF:E9:C6:21:08:15:3A:33:76:82:03:F5:44:2E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 751E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20115/MUonTGWE3-nGIQgVOjN2ggP1RC4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20115/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 Oct 2026 01:40:42 +0000 Certificate not after: Fri 15 Oct 2027 01:30:02 +0000 Subordinate resources: IP: 163.227.4.0/23 IP: 220.157.0.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Nov 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29982 (0x751e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:40:42 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=314A274C6584DFE9C62108153A33768203F5442E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:24:8b:2d:8c:6f:12:e5:4a:b2:60:d5:c4: bf:b5:4a:3f:f1:b1:7e:4b:ab:03:c4:3b:32:e4:71: 2a:1a:77:75:86:a8:3c:bb:fa:34:b4:d3:0e:4e:c3: 72:73:a0:44:61:9e:14:c9:6d:6a:a1:32:37:fe:f8: a3:3f:f7:35:a2:d9:8c:d8:c0:40:57:fe:fc:22:1b: 50:ac:28:14:8b:18:ab:91:4a:2c:6c:ef:24:08:43: 0b:f4:40:46:88:cd:58:ca:47:03:05:e7:56:ea:66: a8:f0:ff:e7:fb:c9:6b:3c:48:cd:2d:41:8b:70:d3: 09:2f:f8:cd:39:0c:85:35:9c:b6:9b:7d:0d:04:0a: 2f:a6:10:c7:47:89:8e:61:28:e9:3f:6e:10:f9:2c: 8e:ae:0c:e7:94:b6:0f:97:ff:69:e2:c7:8a:20:c1: 57:2d:fa:bc:f5:c7:d5:38:eb:66:e2:b9:2e:1f:a7: 68:c4:c5:6d:d0:35:e3:68:49:84:18:16:cc:42:e3: 88:65:45:f4:e6:29:7f:67:4a:d9:8b:99:d7:8b:e4: 5f:0c:ac:3d:f3:ff:45:c3:50:39:eb:95:82:d0:36: cb:51:c0:9b:24:f8:bd:59:6d:8f:6b:8d:fc:bc:fc: 4e:3d:1d:24:ec:50:93:81:17:88:5f:b5:17:91:c3: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:27:4C:65:84:DF:E9:C6:21:08:15:3A:33:76:82:03:F5:44:2E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20115/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20115/MUonTGWE3-nGIQgVOjN2ggP1RC4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.4.0/23 220.157.0.0/24 Signature Algorithm: sha256WithRSAEncryption a1:ad:b4:c2:e6:61:9f:bd:5e:76:25:e8:a6:42:b5:2e:97:0c: 2f:14:8f:39:c9:18:62:eb:6b:81:86:76:7a:1e:71:95:37:25: 79:a9:47:17:6e:4e:1b:10:b3:86:d4:92:0a:24:88:d1:2e:75: 99:4f:b8:70:7f:6e:20:a6:a1:d7:e9:76:c1:a5:68:ac:35:b6: 8c:d5:b7:b7:6c:be:a1:ef:f0:a5:83:93:c7:f4:e3:2d:2e:a3: 94:c9:97:82:d1:84:e0:cb:28:ea:31:11:83:63:ab:62:c7:76: cc:3a:25:9a:c1:77:89:76:89:bf:3e:ee:5a:1f:f0:11:af:8e: 84:42:6c:29:b8:c1:2c:ca:ad:07:bb:3c:02:40:44:0f:05:a2: c9:ce:f7:29:85:8d:7d:f1:fc:ec:9f:47:60:dc:e2:d5:b7:c4: 0e:16:c1:ff:05:fe:ed:33:92:59:a0:ba:9a:55:d0:9c:dd:ce: ef:c0:24:f0:9d:2a:d7:81:c4:ac:4c:c3:b1:fd:dd:a5:87:1d: e0:38:1d:4a:99:92:28:1f:14:9a:a0:8c:47:ea:03:dc:b8:01: e8:c5:57:bd:47:c9:4c:a7:c6:fe:60:fb:1c:54:f1:87:ef:47: 17:77:24:50:31:b3:8f:b0:22:f3:57:8a:0c:ab:5b:7a:03:f2: f0:51:e5:6d -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICdR4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTAxNTAxNDA0MloXDTI3MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzE0QTI3NEM2NTg0REZFOUM2MjEwODE1M0EzMzc2ODIwM0Y1NDQy RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMxNJIstjG8S5UqyYNXE v7VKP/GxfkurA8Q7MuRxKhp3dYaoPLv6NLTTDk7DcnOgRGGeFMltaqEyN/74oz/3 NaLZjNjAQFf+/CIbUKwoFIsYq5FKLGzvJAhDC/RARojNWMpHAwXnVupmqPD/5/vJ azxIzS1Bi3DTCS/4zTkMhTWctpt9DQQKL6YQx0eJjmEo6T9uEPksjq4M55S2D5f/ aeLHiiDBVy36vPXH1TjrZuK5Lh+naMTFbdA142hJhBgWzELjiGVF9OYpf2dK2YuZ 14vkXwysPfP/RcNQOeuVgtA2y1HAmyT4vVltj2uN/Lz8Tj0dJOxQk4EXiF+1F5HD UEECAwEAAaOCApEwggKNMB0GA1UdDgQWBBQxSidMZYTf6cYhCBU6M3aCA/VELjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMTUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTE1L01V b25UR1dFMy1uR0lRZ1ZPak4yZ2dQMVJDNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAGj4wQDBADcnQAwDQYJ KoZIhvcNAQELBQADggEBAKGttMLmYZ+9XnYl6KZCtS6XDC8UjznJGGLra4GGdnoe cZU3JXmpRxduThsQs4bUkgokiNEudZlPuHB/biCmodfpdsGlaKw1tozVt7dsvqHv 8KWDk8f04y0uo5TJl4LRhODLKOoxEYNjq2LHdsw6JZrBd4l2ib8+7lof8BGvjoRC bCm4wSzKrQe7PAJARA8FosnO9ymFjX3x/OyfR2Dc4tW3xA4Wwf8F/u0zklmguppV 0Jzdzu/AJPCdKteBxKxMw7H93aWHHeA4HUqZkigfFJqgjEfqA9y4AejFV71HyUyn xv5g+xxU8YfvRxd3JFAxs4+wIvNXigyrW3oD8vBR5W0= -----END CERTIFICATE-----Generated at Tue Nov 10 05:32:59 2026 by rpki-client