$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/OZoUEIJMac77ZJBH7ZcBhY7iEJA.cer File: OZoUEIJMac77ZJBH7ZcBhY7iEJA.cer (raw, json) Hash identifier: s8o4W5ersjH4K1Zikensnt4GfCitjhMIAGTUUSJ/Lk0= Subject key identifier: 39:9A:14:10:82:4C:69:CE:FB:64:90:47:ED:97:01:85:8E:E2:10:90 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/OZoUEIJMac77ZJBH7ZcBhY7iEJA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 Oct 2026 01:34:50 +0000 Certificate not after: Fri 15 Oct 2027 01:30:02 +0000 Subordinate resources: IP: 163.128.154.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29714 (0x7412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:34:50 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=399A1410824C69CEFB649047ED9701858EE21090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:3f:b5:aa:c3:11:e5:28:f0:a6:8a:02:30: 8a:e2:95:5e:92:f3:b6:75:cf:9e:57:56:02:58:5d: 04:35:7e:91:d4:6d:ef:87:48:be:9c:60:6f:64:04: a6:8e:33:5c:9e:05:1e:34:b8:61:f5:dc:80:02:06: fd:14:6c:f4:c8:60:90:53:c7:69:62:43:f1:61:dd: 1d:62:17:d0:99:be:ef:0d:41:a0:15:ae:3f:4a:de: f0:bb:b1:9e:73:ff:82:97:3b:83:2e:d4:8a:fd:9b: 47:39:3b:8b:fc:a3:ef:7a:91:ab:d2:56:52:4b:31: 5f:2d:c1:2c:6b:f9:f9:38:4b:a8:b5:39:10:86:40: ab:31:e6:08:c5:5f:30:78:87:af:55:32:5c:75:a6: 70:dc:bb:e7:5d:44:d3:0a:d5:6b:3f:23:31:18:c9: 88:3e:20:b3:98:59:43:92:4a:7d:f3:3d:27:88:12: 03:35:0f:03:a1:8d:72:f7:a6:74:13:da:f8:dc:c8: 32:78:4c:43:f3:b6:b5:c5:f8:9a:02:29:6b:6e:b4: 97:c3:93:b5:09:b2:bf:0d:c4:c5:0a:11:b1:e6:b7: 38:ac:1a:5f:5a:ca:3a:d4:c0:f2:41:bd:9a:64:75: 2e:7b:72:51:1e:47:2e:f9:1c:a2:0d:24:db:8b:38: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:14:10:82:4C:69:CE:FB:64:90:47:ED:97:01:85:8E:E2:10:90 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/OZoUEIJMac77ZJBH7ZcBhY7iEJA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.128.154.0/23 Signature Algorithm: sha256WithRSAEncryption 23:c0:98:9d:f0:8c:f6:14:8f:64:6a:b0:a4:1a:b2:fc:a2:b8: df:56:14:aa:26:10:7e:57:ed:fc:c1:04:61:ab:63:e5:88:ec: 4b:8f:e7:74:a1:d9:7e:64:cf:04:ca:5a:08:24:bd:2a:8d:a3: 0b:3c:0a:92:96:42:58:23:28:0d:cb:96:d6:ba:a4:23:51:a2: a5:ea:f0:72:66:ac:ca:23:5a:54:f6:1a:22:66:56:62:06:58: 88:7f:c6:9a:5e:64:dd:45:7a:e6:86:b0:ee:8f:74:4c:86:7d: ac:58:84:7c:eb:bc:1e:e3:7e:ab:5a:4a:06:2f:d2:64:39:b2: c6:fa:88:e8:04:99:f4:c7:db:cd:ad:15:04:ec:f5:82:08:47: fe:8c:fc:f4:60:29:90:85:cc:2c:c1:85:f3:de:8d:7c:e6:76: e1:f9:34:1b:33:9b:a9:3e:4a:b5:a2:80:99:b6:09:77:84:53: 81:39:a4:a7:bc:de:6d:d5:29:0c:1e:e5:c4:ec:62:53:a2:35: 8d:3a:bb:f0:87:f2:85:6e:d5:29:fb:ed:89:de:de:ce:15:56: 51:da:71:9a:1c:ff:6e:15:78:03:7a:7d:3e:4c:c8:ff:da:c3: 4f:ca:a2:eb:1f:00:2e:92:1e:17:03:36:f0:1c:48:97:00:06: de:3a:33:b1 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICdBIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTAxNTAxMzQ1MFoXDTI3MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzk5QTE0MTA4MjRDNjlDRUZCNjQ5MDQ3RUQ5NzAxODU4RUUyMTA5 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJsP7WqwxHlKPCmigIw iuKVXpLztnXPnldWAlhdBDV+kdRt74dIvpxgb2QEpo4zXJ4FHjS4YfXcgAIG/RRs 9MhgkFPHaWJD8WHdHWIX0Jm+7w1BoBWuP0re8LuxnnP/gpc7gy7Uiv2bRzk7i/yj 73qRq9JWUksxXy3BLGv5+ThLqLU5EIZAqzHmCMVfMHiHr1UyXHWmcNy7511E0wrV az8jMRjJiD4gs5hZQ5JKffM9J4gSAzUPA6GNcvemdBPa+NzIMnhMQ/O2tcX4mgIp a260l8OTtQmyvw3ExQoRsea3OKwaX1rKOtTA8kG9mmR1LntyUR5HLvkcog0k24s4 QUcCAwEAAaOCAoswggKHMB0GA1UdDgQWBBQ5mhQQgkxpzvtkkEftlwGFjuIQkDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyOTIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjkyL09a b1VFSUpNYWM3N1pKQkg3WmNCaFk3aUVKQS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGjgJowDQYJKoZIhvcN AQELBQADggEBACPAmJ3wjPYUj2RqsKQasvyiuN9WFKomEH5X7fzBBGGrY+WI7EuP 53Sh2X5kzwTKWggkvSqNows8CpKWQlgjKA3Llta6pCNRoqXq8HJmrMojWlT2GiJm VmIGWIh/xppeZN1FeuaGsO6PdEyGfaxYhHzrvB7jfqtaSgYv0mQ5ssb6iOgEmfTH 282tFQTs9YIIR/6M/PRgKZCFzCzBhfPejXzmduH5NBszm6k+SrWigJm2CXeEU4E5 pKe83m3VKQwe5cTsYlOiNY06u/CH8oVu1Sn77Yne3s4VVlHacZoc/24VeAN6fT5M yP/aw0/KousfAC6SHhcDNvAcSJcABt46M7E= -----END CERTIFICATE-----Generated at Tue Nov 10 20:29:04 2026 by rpki-client