$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer File: UrIcP3vIfuQhVlQCwqMPsivcnjw.cer (raw, json) Hash identifier: R76xMiMqqnChluhkY1xcLunQv+5msaPwIFD1t9uSpyY= Subject key identifier: 52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 75A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:31:07 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 202.126.24.0/21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30121 (0x75a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:31:07 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:19:56:18:a4:e8:2d:0e:ec:18:78:e1:fe: 5f:f8:96:68:c2:29:11:d1:74:b8:28:d6:62:64:1d: 62:79:f0:6c:cd:7e:f3:94:19:ca:08:f7:46:39:90: 6c:43:10:17:a7:42:64:e1:97:5a:2d:42:b9:0f:fc: 60:82:c7:65:92:45:43:e0:2f:9d:08:94:51:11:af: 38:cf:b9:10:c7:c6:5d:97:c6:40:26:39:9d:3c:8a: ee:1c:f4:d3:25:4e:f0:a3:95:5a:89:8c:62:3e:44: 4e:9f:f2:a2:b4:34:4b:b4:44:36:5b:d6:45:83:ff: 28:4d:fa:a5:ee:a8:59:9e:59:15:15:00:4f:0c:99: 50:4d:aa:c6:0c:f5:4f:74:59:46:ec:c7:7d:3e:8f: 80:48:56:5c:7e:6a:84:ca:59:b0:d2:ce:7a:e1:4a: f9:d0:fa:61:07:cb:1d:7f:ae:fc:3e:03:31:12:4f: 25:8f:29:f2:bc:5b:48:4f:e5:cb:a1:23:88:0e:9d: c5:b6:cb:b2:34:15:a5:20:9e:7d:2a:91:fd:f3:88: cf:b0:25:bd:23:ea:1b:95:e6:54:9f:62:73:ad:24: 87:69:7f:cf:d7:a6:37:14:2e:01:75:42:60:d2:06: 9a:6e:b0:4e:99:38:99:4c:42:6b:70:98:30:a7:f7: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.126.24.0/21 Signature Algorithm: sha256WithRSAEncryption 3e:a1:d4:22:b2:73:22:59:a8:f4:20:37:1d:c8:4b:c9:4b:c9: b1:0e:4e:be:a1:8e:98:4c:45:eb:fd:df:b8:57:e6:8b:60:2b: ff:8c:32:3e:a0:75:19:5e:1f:ad:cb:75:de:e8:8d:6c:93:50: 01:22:17:cd:5e:0d:9e:b6:cb:b4:25:b6:01:de:e1:ab:ed:78: 52:6a:e8:7b:81:e3:57:da:47:e4:db:09:b2:e9:c4:69:21:dc: 6c:c3:de:75:da:90:ca:06:33:70:a0:54:f6:aa:0f:fa:20:f7: ad:21:81:5d:84:96:d8:16:8b:2b:65:c7:f6:16:90:ea:90:09: 8f:ed:4d:05:15:7f:2d:de:a3:58:95:95:f3:1d:74:7c:e6:c4: 6d:bd:d4:0d:a7:ef:26:64:96:dc:d9:c5:6f:d3:59:56:2c:14: 3f:82:15:11:0b:6d:f6:50:4f:a9:0e:e2:b9:07:1f:e0:7f:af: 45:00:2c:a1:9d:b3:bc:ec:a9:02:37:41:dc:5c:1d:05:93:4c: ca:89:1b:79:4f:c6:9d:82:94:12:47:ea:3b:ac:10:32:2d:8b: 49:68:2b:2b:44:e0:d2:cc:20:23:e1:e5:d1:bc:bf:69:91:d5: f6:83:d8:16:5b:36:b8:04:48:01:5b:76:72:91:aa:fd:d9:57: 4e:da:cf:43 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICdakwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxMzEwN1oXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoNTJCMjFDM0Y3QkM4N0VFNDIxNTY1NDAyQzJBMzBGQjIyQkRDOUUz QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtlGVYYpOgtDuwYeOH+ X/iWaMIpEdF0uCjWYmQdYnnwbM1+85QZygj3RjmQbEMQF6dCZOGXWi1CuQ/8YILH ZZJFQ+AvnQiUURGvOM+5EMfGXZfGQCY5nTyK7hz00yVO8KOVWomMYj5ETp/yorQ0 S7RENlvWRYP/KE36pe6oWZ5ZFRUATwyZUE2qxgz1T3RZRuzHfT6PgEhWXH5qhMpZ sNLOeuFK+dD6YQfLHX+u/D4DMRJPJY8p8rxbSE/ly6EjiA6dxbbLsjQVpSCefSqR /fOIz7AlvSPqG5XmVJ9ic60kh2l/z9emNxQuAXVCYNIGmm6wTpk4mUxCa3CYMKf3 hNcCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBRSshw/e8h+5CFWVALCow+yK9yePDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC85MzgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzkzOC9VckljUDN2 SWZ1UWhWbFFDd3FNUHNpdmNuancubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyn4YMA0GCSqGSIb3DQEBCwUA A4IBAQA+odQisnMiWaj0IDcdyEvJS8mxDk6+oY6YTEXr/d+4V+aLYCv/jDI+oHUZ Xh+ty3Xe6I1sk1ABIhfNXg2etsu0JbYB3uGr7XhSauh7geNX2kfk2wmy6cRpIdxs w9512pDKBjNwoFT2qg/6IPetIYFdhJbYFosrZcf2FpDqkAmP7U0FFX8t3qNYlZXz HXR85sRtvdQNp+8mZJbc2cVv01lWLBQ/ghURC232UE+pDuK5Bx/gf69FACyhnbO8 7KkCN0HcXB0Fk0zKiRt5T8adgpQSR+o7rBAyLYtJaCsrRODSzCAj4eXRvL9pkdX2 g9gWWza4BEgBW3Zykar92VdO2s9D -----END CERTIFICATE-----Generated at Sun Nov 15 17:44:09 2026 by rpki-client