$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer File: OV2JJ1PBWV4Ha18QBloEhmHDB54.cer (raw, json) Hash identifier: R5gOEhyGtfxrAEUH4EaiUZWwwvq/uNlMgJApiRP+xhU= Subject key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 735D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 Oct 2026 01:31:08 +0000 Certificate not after: Fri 15 Oct 2027 01:30:02 +0000 Subordinate resources: IP: 2001:dc2::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Nov 2026 11:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29533 (0x735d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:31:08 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=395D892753C1595E076B5F10065A048661C3079E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:ea:92:49:0c:64:00:02:e0:a1:3c:13:3a: 39:de:59:c5:c3:60:46:4c:13:c4:be:65:d0:43:4c: 0e:17:20:7b:f3:d3:08:0c:72:57:c9:cf:22:27:01: d8:46:86:51:5d:3f:53:eb:d7:bf:da:2c:f7:de:0d: 78:78:cb:75:be:8c:ce:0b:6c:39:e8:e4:7d:4f:a2: 71:56:30:ef:7b:2f:6b:b4:66:b2:33:e1:65:9c:59: 0e:88:fb:d5:e6:86:67:f9:35:ad:e5:32:b3:97:f9: 63:96:c7:1e:5c:fc:4c:bb:24:56:86:18:51:4b:18: 31:cc:e6:a5:f9:2a:24:91:ac:b9:ec:f0:dc:23:ac: fe:4a:30:55:fc:61:97:e1:8f:15:5e:c5:46:6b:0e: 82:7b:73:33:e8:53:06:96:48:c7:7c:d1:14:7c:25: a7:fb:3f:0a:ac:fd:84:d9:17:2d:73:50:9e:d7:52: eb:73:0b:d9:a5:e9:fc:59:75:2b:f2:c7:e6:ad:b3: 6c:52:86:be:bd:71:4a:22:6c:84:c1:7c:2b:1f:34: 39:e4:e1:41:c9:01:08:04:db:29:ec:87:ae:58:00: 03:88:25:a0:2e:dc:30:4b:9f:3c:f7:e1:fb:01:66: c2:95:6e:a0:59:2b:b3:31:b5:c2:23:cc:37:30:ca: c7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:dc2::/32 Signature Algorithm: sha256WithRSAEncryption 2c:d9:62:e2:9a:25:02:4f:d7:6c:b0:1f:2c:58:21:de:22:12: a2:86:95:d3:4d:21:32:52:4a:f5:8b:9b:f5:04:e9:3a:84:6a: 15:a9:b9:1d:23:de:b1:35:62:97:71:05:af:84:7a:77:b1:f8: 7f:65:68:cb:b4:d1:39:9a:d8:b3:de:4e:dc:7f:b8:69:43:d5: bc:4e:72:64:89:2c:f7:b5:24:a6:1e:b1:d2:d1:ff:29:28:5f: de:25:ec:f4:2e:62:c3:50:cf:1c:9f:bf:c2:02:35:4a:1b:00: 08:99:e3:ab:f8:a0:0d:5f:30:15:d6:d9:52:ad:d6:01:be:a9: ae:86:c6:02:44:4d:5d:ed:6a:41:7f:fb:7b:54:48:c2:2c:06: d7:70:d0:42:b3:28:f3:5f:74:ce:6f:4b:48:c3:56:ba:3b:94: c1:d8:6d:a3:25:42:48:42:5a:93:29:d8:67:1b:c1:e8:5e:35: f8:9e:79:a3:38:f2:63:05:42:81:b9:ae:7f:b3:12:a7:fb:41: 88:13:a0:60:92:46:71:14:13:fe:57:67:38:a2:f2:c7:7f:b5: 40:2b:ba:9f:f0:be:36:44:72:0c:97:98:47:c0:b9:16:90:39: db:e3:70:33:43:a8:a1:92:17:0f:26:22:44:4d:c2:95:7f:c2: eb:e4:5c:5c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICc10wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTAxNTAxMzEwOFoXDTI3MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzk1RDg5Mjc1M0MxNTk1RTA3NkI1RjEwMDY1QTA0ODY2MUMzMDc5 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM6V6pJJDGQAAuChPBM6 Od5ZxcNgRkwTxL5l0ENMDhcge/PTCAxyV8nPIicB2EaGUV0/U+vXv9os994NeHjL db6MzgtsOejkfU+icVYw73sva7RmsjPhZZxZDoj71eaGZ/k1reUys5f5Y5bHHlz8 TLskVoYYUUsYMczmpfkqJJGsuezw3COs/kowVfxhl+GPFV7FRmsOgntzM+hTBpZI x3zRFHwlp/s/Cqz9hNkXLXNQntdS63ML2aXp/Fl1K/LH5q2zbFKGvr1xSiJshMF8 Kx80OeThQckBCATbKeyHrlgAA4gloC7cMEufPPfh+wFmwpVuoFkrszG1wiPMNzDK x1UCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQ5XYknU8FZXgdrXxAGWgSGYcMHnjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwNDUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDQ1L09W MkpKMVBCV1Y0SGExOFFCbG9FaG1IREI1NC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQ3CMA0GCSqGSIb3 DQEBCwUAA4IBAQAs2WLimiUCT9dssB8sWCHeIhKihpXTTSEyUkr1i5v1BOk6hGoV qbkdI96xNWKXcQWvhHp3sfh/ZWjLtNE5mtiz3k7cf7hpQ9W8TnJkiSz3tSSmHrHS 0f8pKF/eJez0LmLDUM8cn7/CAjVKGwAImeOr+KANXzAV1tlSrdYBvqmuhsYCRE1d 7WpBf/t7VEjCLAbXcNBCsyjzX3TOb0tIw1a6O5TB2G2jJUJIQlqTKdhnG8HoXjX4 nnmjOPJjBUKBua5/sxKn+0GIE6BgkkZxFBP+V2c4ovLHf7VAK7qf8L42RHIMl5hH wLkWkDnb43AzQ6ihkhcPJiJETcKVf8Lr5Fxc -----END CERTIFICATE-----Generated at Tue Nov 10 13:24:40 2026 by rpki-client