$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer File: OV2JJ1PBWV4Ha18QBloEhmHDB54.cer (raw, json) Hash identifier: IQvx+oiJQ0fb5rPG01ZPMiAqOwIcu6/USGKX27DgGTc= Subject key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:36:17 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 2001:dc2::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29192 (0x7208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:36:17 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=395D892753C1595E076B5F10065A048661C3079E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:ea:92:49:0c:64:00:02:e0:a1:3c:13:3a: 39:de:59:c5:c3:60:46:4c:13:c4:be:65:d0:43:4c: 0e:17:20:7b:f3:d3:08:0c:72:57:c9:cf:22:27:01: d8:46:86:51:5d:3f:53:eb:d7:bf:da:2c:f7:de:0d: 78:78:cb:75:be:8c:ce:0b:6c:39:e8:e4:7d:4f:a2: 71:56:30:ef:7b:2f:6b:b4:66:b2:33:e1:65:9c:59: 0e:88:fb:d5:e6:86:67:f9:35:ad:e5:32:b3:97:f9: 63:96:c7:1e:5c:fc:4c:bb:24:56:86:18:51:4b:18: 31:cc:e6:a5:f9:2a:24:91:ac:b9:ec:f0:dc:23:ac: fe:4a:30:55:fc:61:97:e1:8f:15:5e:c5:46:6b:0e: 82:7b:73:33:e8:53:06:96:48:c7:7c:d1:14:7c:25: a7:fb:3f:0a:ac:fd:84:d9:17:2d:73:50:9e:d7:52: eb:73:0b:d9:a5:e9:fc:59:75:2b:f2:c7:e6:ad:b3: 6c:52:86:be:bd:71:4a:22:6c:84:c1:7c:2b:1f:34: 39:e4:e1:41:c9:01:08:04:db:29:ec:87:ae:58:00: 03:88:25:a0:2e:dc:30:4b:9f:3c:f7:e1:fb:01:66: c2:95:6e:a0:59:2b:b3:31:b5:c2:23:cc:37:30:ca: c7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:dc2::/32 Signature Algorithm: sha256WithRSAEncryption 76:62:af:2b:91:9b:e5:9a:ad:c7:91:93:83:7c:64:52:c6:ed: d0:56:d5:5c:71:45:90:90:4a:81:d7:95:5f:e1:8b:6c:95:1d: 0d:6a:b2:13:a4:38:62:b0:04:67:3f:f6:ae:77:d1:ee:ba:d4: d9:d0:f3:eb:af:19:85:c3:52:4a:37:14:d5:1c:a4:7f:51:4c: 94:0b:e9:08:a4:8d:05:65:b5:88:ec:10:3b:57:d6:a2:e8:71: dd:a7:7a:be:38:73:37:7a:b0:e1:71:df:32:71:59:92:33:09: 8c:9d:10:59:8e:d9:70:91:a0:bc:d6:56:a5:da:7e:b8:84:7a: ca:7d:52:03:d9:23:96:ad:c3:d7:f2:3e:24:33:4a:e0:0f:e9: 54:3f:e3:60:e6:71:57:c5:b4:bc:b1:64:4e:e5:f3:73:15:3a: 57:77:a7:4e:74:71:c7:99:2b:e6:eb:29:fa:d2:e4:72:45:30: d7:37:ae:c5:aa:ef:27:36:b2:47:10:86:ba:fe:45:66:12:c5: 6a:4c:5f:34:48:37:d1:19:4a:b3:af:dd:88:32:96:6f:c7:0f: 66:3b:97:d7:2a:cd:fc:ca:c9:a1:85:7f:33:fb:ee:39:d6:94: a8:ff:60:37:92:d3:11:8c:63:37:1b:b4:91:fb:9f:66:f7:07: c1:34:89:8d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICcggwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzYxN1oXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzk1RDg5Mjc1M0MxNTk1RTA3NkI1RjEwMDY1QTA0ODY2MUMzMDc5 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM6V6pJJDGQAAuChPBM6 Od5ZxcNgRkwTxL5l0ENMDhcge/PTCAxyV8nPIicB2EaGUV0/U+vXv9os994NeHjL db6MzgtsOejkfU+icVYw73sva7RmsjPhZZxZDoj71eaGZ/k1reUys5f5Y5bHHlz8 TLskVoYYUUsYMczmpfkqJJGsuezw3COs/kowVfxhl+GPFV7FRmsOgntzM+hTBpZI x3zRFHwlp/s/Cqz9hNkXLXNQntdS63ML2aXp/Fl1K/LH5q2zbFKGvr1xSiJshMF8 Kx80OeThQckBCATbKeyHrlgAA4gloC7cMEufPPfh+wFmwpVuoFkrszG1wiPMNzDK x1UCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQ5XYknU8FZXgdrXxAGWgSGYcMHnjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwNDUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDQ1L09W MkpKMVBCV1Y0SGExOFFCbG9FaG1IREI1NC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQ3CMA0GCSqGSIb3 DQEBCwUAA4IBAQB2Yq8rkZvlmq3HkZODfGRSxu3QVtVccUWQkEqB15Vf4YtslR0N arITpDhisARnP/aud9HuutTZ0PPrrxmFw1JKNxTVHKR/UUyUC+kIpI0FZbWI7BA7 V9ai6HHdp3q+OHM3erDhcd8ycVmSMwmMnRBZjtlwkaC81lal2n64hHrKfVID2SOW rcPX8j4kM0rgD+lUP+Ng5nFXxbS8sWRO5fNzFTpXd6dOdHHHmSvm6yn60uRyRTDX N67Fqu8nNrJHEIa6/kVmEsVqTF80SDfRGUqzr92IMpZvxw9mO5fXKs38ysmhhX8z ++451pSo/2A3ktMRjGM3G7SR+59m9wfBNImN -----END CERTIFICATE-----Generated at Mon Sep 21 07:21:02 2026 by rpki-client