$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/OZoUEIJMac77ZJBH7ZcBhY7iEJA.cer File: OZoUEIJMac77ZJBH7ZcBhY7iEJA.cer (raw, json) Hash identifier: kiIyyUFooC9PDyA52a+Gm9v+V+0YamR3pXR827pf2Fc= Subject key identifier: 39:9A:14:10:82:4C:69:CE:FB:64:90:47:ED:97:01:85:8E:E2:10:90 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 71DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/OZoUEIJMac77ZJBH7ZcBhY7iEJA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:35:20 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 163.128.154.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 13:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29148 (0x71dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:35:20 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=399A1410824C69CEFB649047ED9701858EE21090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:3f:b5:aa:c3:11:e5:28:f0:a6:8a:02:30: 8a:e2:95:5e:92:f3:b6:75:cf:9e:57:56:02:58:5d: 04:35:7e:91:d4:6d:ef:87:48:be:9c:60:6f:64:04: a6:8e:33:5c:9e:05:1e:34:b8:61:f5:dc:80:02:06: fd:14:6c:f4:c8:60:90:53:c7:69:62:43:f1:61:dd: 1d:62:17:d0:99:be:ef:0d:41:a0:15:ae:3f:4a:de: f0:bb:b1:9e:73:ff:82:97:3b:83:2e:d4:8a:fd:9b: 47:39:3b:8b:fc:a3:ef:7a:91:ab:d2:56:52:4b:31: 5f:2d:c1:2c:6b:f9:f9:38:4b:a8:b5:39:10:86:40: ab:31:e6:08:c5:5f:30:78:87:af:55:32:5c:75:a6: 70:dc:bb:e7:5d:44:d3:0a:d5:6b:3f:23:31:18:c9: 88:3e:20:b3:98:59:43:92:4a:7d:f3:3d:27:88:12: 03:35:0f:03:a1:8d:72:f7:a6:74:13:da:f8:dc:c8: 32:78:4c:43:f3:b6:b5:c5:f8:9a:02:29:6b:6e:b4: 97:c3:93:b5:09:b2:bf:0d:c4:c5:0a:11:b1:e6:b7: 38:ac:1a:5f:5a:ca:3a:d4:c0:f2:41:bd:9a:64:75: 2e:7b:72:51:1e:47:2e:f9:1c:a2:0d:24:db:8b:38: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:14:10:82:4C:69:CE:FB:64:90:47:ED:97:01:85:8E:E2:10:90 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/OZoUEIJMac77ZJBH7ZcBhY7iEJA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.128.154.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:15:96:e4:29:4a:24:a1:38:9b:32:e5:b4:85:9c:11:13:8f: 4c:75:f6:bb:ad:65:5d:d3:9c:bd:b6:28:15:dd:75:cf:b1:9d: 98:da:7c:5e:93:76:92:12:dc:d9:83:99:56:9c:b5:0e:1b:16: 8b:23:be:3b:5e:30:87:f3:19:c4:a2:ee:9f:16:71:13:45:fa: 57:c4:13:cc:48:d4:8a:73:9d:aa:3e:08:12:cd:2a:90:b5:5d: 5f:37:57:94:67:29:fb:9f:28:85:de:d7:02:f6:51:53:55:7f: a3:e5:4b:a6:66:99:5d:60:c5:a2:fe:ae:ab:3a:22:ed:ab:4b: 35:1f:77:ee:2f:82:6b:7f:40:2d:f6:49:3c:83:51:a2:ea:ee: 67:4f:e7:7f:e4:10:77:26:d0:1d:ed:00:4b:09:c0:74:ea:70: c0:54:2b:df:6f:8d:37:a8:e2:d1:96:99:4e:32:76:7e:4c:22: 36:b0:b1:2a:a5:4d:ac:5d:e3:28:e1:40:50:ec:74:8d:a8:38: 27:ad:04:77:66:c5:39:54:2a:e1:b4:f9:f9:2a:ca:d5:17:ac: 8d:34:5a:5a:53:2b:bc:ee:91:e9:a6:a6:e7:f5:a9:d5:be:5a: 63:a4:ac:dd:55:77:50:bb:29:bc:2a:48:9a:c0:7b:e6:62:89: a9:57:e0:51 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICcdwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzUyMFoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzk5QTE0MTA4MjRDNjlDRUZCNjQ5MDQ3RUQ5NzAxODU4RUUyMTA5 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJsP7WqwxHlKPCmigIw iuKVXpLztnXPnldWAlhdBDV+kdRt74dIvpxgb2QEpo4zXJ4FHjS4YfXcgAIG/RRs 9MhgkFPHaWJD8WHdHWIX0Jm+7w1BoBWuP0re8LuxnnP/gpc7gy7Uiv2bRzk7i/yj 73qRq9JWUksxXy3BLGv5+ThLqLU5EIZAqzHmCMVfMHiHr1UyXHWmcNy7511E0wrV az8jMRjJiD4gs5hZQ5JKffM9J4gSAzUPA6GNcvemdBPa+NzIMnhMQ/O2tcX4mgIp a260l8OTtQmyvw3ExQoRsea3OKwaX1rKOtTA8kG9mmR1LntyUR5HLvkcog0k24s4 QUcCAwEAAaOCAoswggKHMB0GA1UdDgQWBBQ5mhQQgkxpzvtkkEftlwGFjuIQkDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyOTIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjkyL09a b1VFSUpNYWM3N1pKQkg3WmNCaFk3aUVKQS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGjgJowDQYJKoZIhvcN AQELBQADggEBAFwVluQpSiShOJsy5bSFnBETj0x19rutZV3TnL22KBXddc+xnZja fF6TdpIS3NmDmVactQ4bFosjvjteMIfzGcSi7p8WcRNF+lfEE8xI1Ipznao+CBLN KpC1XV83V5RnKfufKIXe1wL2UVNVf6PlS6ZmmV1gxaL+rqs6Iu2rSzUfd+4vgmt/ QC32STyDUaLq7mdP53/kEHcm0B3tAEsJwHTqcMBUK99vjTeo4tGWmU4ydn5MIjaw sSqlTaxd4yjhQFDsdI2oOCetBHdmxTlUKuG0+fkqytUXrI00WlpTK7zukemmpuf1 qdW+WmOkrN1Vd1C7KbwqSJrAe+ZiialX4FE= -----END CERTIFICATE-----Generated at Mon Sep 21 17:33:34 2026 by rpki-client