$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer File: OmLEe2ORFPaCyeWihWvA-cM-xkg.cer (raw, json) Hash identifier: MPGg4C0Z2E4ss1I3vTA1YrBefmrMCA0eXE1rHMZxB2Q= Subject key identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 15D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Apr 2026 01:45:23 +0000 Certificate not after: Thu 15 Apr 2027 01:30:02 +0000 Subordinate resources: IP: 138.252.48.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5588 (0x15d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Apr 15 01:45:23 2026 GMT Not After : Apr 15 01:30:02 2027 GMT Subject: CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:0f:3d:a2:b2:8f:8e:37:aa:e4:c1:5b:9f: 4d:46:5b:31:3f:9b:1e:bc:9d:3a:ef:1a:a2:55:ae: 3b:76:01:fe:ac:bb:76:9d:d4:1f:1e:a9:87:c8:e4: c0:1f:db:b8:3e:de:66:33:80:da:13:cf:76:66:58: 39:54:65:b6:f2:61:9b:3f:4b:95:33:76:c6:a0:af: 41:9a:f9:08:be:5e:13:56:4a:28:64:5d:2f:3f:11: 10:a9:69:55:a3:5c:f5:b0:fb:a7:e9:d6:10:39:58: 2e:0b:8c:f5:3d:d7:4e:3e:4b:49:ce:d7:c5:38:a9: 05:36:6d:fa:22:4f:a3:ff:d3:b4:36:39:24:53:f3: a7:a7:66:2f:85:f0:b2:aa:0c:8d:93:31:c0:3a:ea: 2a:92:4b:e1:0e:76:8b:d2:ed:70:91:f8:e2:fd:bc: 82:21:59:16:55:cb:da:81:db:70:e5:34:85:1e:c0: fc:60:eb:ae:44:a9:ff:d2:83:7d:c6:35:2a:25:30: d2:49:29:d2:07:28:a6:66:36:c6:79:c8:11:97:ef: 00:36:c2:5e:58:c0:11:ad:53:d7:89:a0:26:3b:12: 7b:81:9b:d8:fc:ac:13:35:94:f5:97:ad:e1:29:d8: 1b:5c:9e:6f:e4:c6:05:51:0a:ec:ce:ca:a9:46:f6: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.48.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:1e:af:b6:0a:d5:9e:e7:68:f9:97:88:ec:2a:c1:e1:d5:33: 7d:5c:c0:cf:55:65:de:db:9c:ae:1f:c6:ed:6c:fa:02:e0:17: 53:d1:e7:c0:32:65:04:08:8e:04:a3:71:91:dd:c3:53:b7:45: c4:66:5c:e0:4c:d2:88:cd:bb:ea:b7:92:1a:35:0e:97:bd:13: 2e:4f:2a:ab:0b:5a:f1:46:04:9c:1f:e4:f0:e3:dc:a7:0d:7b: 29:6f:50:d9:d9:e4:40:44:3d:8d:37:c2:97:29:a2:1d:7a:37: f2:9f:30:2d:fd:c3:54:75:16:a5:04:44:b8:1b:6e:e0:d5:9c: 18:57:c7:69:49:6f:c8:93:2a:f3:1e:8c:43:49:ec:0e:02:08: 16:3a:43:5b:b0:b0:be:47:3b:ce:3a:32:10:91:5d:bd:86:be: 73:b0:e9:8c:58:59:56:31:00:fb:42:0c:98:3c:63:a8:d4:3f: c6:b0:8b:b3:cf:00:dc:68:db:a8:a7:3f:aa:aa:ad:64:4c:66: cf:e0:f2:73:55:fb:a3:73:46:a3:b1:a1:45:c6:d9:7b:63:4c: e8:e9:aa:24:dc:eb:c6:b0:a9:7c:81:30:10:39:c4:4c:ec:df: 3b:97:bf:b7:52:15:4b:4c:e4:23:80:62:55:5e:68:24:0a:a9: b3:b8:33:9e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFdQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI2MDQxNTAxNDUyM1oXDTI3MDQxNTAxMzAwMlowMzEx MC8GA1UEAxMoM0E2MkM0N0I2MzkxMTRGNjgyQzlFNUEyODU2QkMwRjlDMzNFQzY0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyeDz2iso+ON6rkwVuf TUZbMT+bHrydOu8aolWuO3YB/qy7dp3UHx6ph8jkwB/buD7eZjOA2hPPdmZYOVRl tvJhmz9LlTN2xqCvQZr5CL5eE1ZKKGRdLz8REKlpVaNc9bD7p+nWEDlYLguM9T3X Tj5LSc7XxTipBTZt+iJPo//TtDY5JFPzp6dmL4XwsqoMjZMxwDrqKpJL4Q52i9Lt cJH44v28giFZFlXL2oHbcOU0hR7A/GDrrkSp/9KDfcY1KiUw0kkp0gcopmY2xnnI EZfvADbCXljAEa1T14mgJjsSe4Gb2PysEzWU9Zet4SnYG1yeb+TGBVEK7M7KqUb2 YfsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBQ6YsR7Y5EU9oLJ5aKFa8D5wz7GSDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyODIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjgyL09t TEVlMk9SRlBhQ3llV2loV3ZBLWNNLXhrZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/DAwDQYJKoZIhvcN AQELBQADggEBAFser7YK1Z7naPmXiOwqweHVM31cwM9VZd7bnK4fxu1s+gLgF1PR 58AyZQQIjgSjcZHdw1O3RcRmXOBM0ojNu+q3kho1Dpe9Ey5PKqsLWvFGBJwf5PDj 3KcNeylvUNnZ5EBEPY03wpcpoh16N/KfMC39w1R1FqUERLgbbuDVnBhXx2lJb8iT KvMejENJ7A4CCBY6Q1uwsL5HO846MhCRXb2GvnOw6YxYWVYxAPtCDJg8Y6jUP8aw i7PPANxo26inP6qqrWRMZs/g8nNV+6NzRqOxoUXG2XtjTOjpqiTc68awqXyBMBA5 xEzs3zuXv7dSFUtM5COAYlVeaCQKqbO4M54= -----END CERTIFICATE-----Generated at Fri Apr 17 02:31:04 2026 by rpki-client