$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/UrTjMSd258rhlIrKmcqSE52r69w.cer File: UrTjMSd258rhlIrKmcqSE52r69w.cer (raw, json) Hash identifier: D8GGy32MEuvo+sbKjiboCQCTsp7I3K7d66SW6U+yNFs= Subject key identifier: 52:B4:E3:31:27:76:E7:CA:E1:94:8A:CA:99:CA:92:13:9D:AB:EB:DC Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2298/UrTjMSd258rhlIrKmcqSE52r69w.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2298/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 Oct 2026 01:35:45 +0000 Certificate not after: Fri 15 Oct 2027 01:30:02 +0000 Subordinate resources: IP: 133.81.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29745 (0x7431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:35:45 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=52B4E3312776E7CAE1948ACA99CA92139DABEBDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:05:b1:ae:b5:44:f4:34:da:c4:97:16:6f: f2:a1:bc:56:51:a9:8e:e3:11:1c:79:6d:96:68:20: be:a3:31:83:77:a1:e1:5c:2f:4f:f4:af:c8:47:4f: 51:fa:eb:72:bf:f1:70:34:d3:28:b0:52:ce:5d:5c: db:68:96:0b:49:64:75:83:c1:86:70:fd:87:4f:80: 3f:7e:bd:4f:81:25:3e:c1:fa:b8:20:ac:38:28:79: 5c:ae:7b:76:cf:57:c9:70:23:a6:59:10:dd:51:da: 86:07:84:7e:87:92:18:43:63:49:33:ce:b8:a8:f6: f6:68:c7:e6:9c:09:c3:97:8c:d4:df:eb:e0:71:fc: 8b:b6:9b:a0:45:dd:de:2e:1d:e0:d0:04:e6:e4:e6: 28:a9:f6:6f:39:a9:1b:d7:fe:a8:a0:bc:34:ce:fb: 69:f6:b6:4b:53:7b:ea:5d:d8:09:27:36:42:b3:ca: e9:fe:10:0c:26:d2:ad:e0:5a:32:9e:1e:77:b6:f2: fd:e1:c0:22:2e:5e:bb:7b:f6:67:26:d7:a5:bd:68: 81:72:50:6a:55:b5:92:5e:d6:5b:0a:28:25:3d:fa: 0e:0f:80:8b:45:63:24:fa:76:eb:35:d6:03:33:ec: ee:42:05:2c:e8:ae:4a:04:f3:9e:70:41:8b:0b:81: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B4:E3:31:27:76:E7:CA:E1:94:8A:CA:99:CA:92:13:9D:AB:EB:DC X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2298/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2298/UrTjMSd258rhlIrKmcqSE52r69w.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption 15:43:e3:b4:49:48:c4:81:2d:ce:2d:8f:b4:53:fd:94:be:fc: bd:fa:9c:d2:5b:d5:5d:fa:5a:45:74:04:92:09:5d:56:39:73: de:be:b2:f9:26:d8:19:21:47:57:86:9e:d2:07:b5:d3:69:46: 9c:8f:91:74:37:7c:95:81:64:05:3d:fc:fa:d4:40:88:a7:c3: 9c:38:b0:99:5f:54:7c:f8:9a:63:26:be:c0:2c:94:74:9f:cb: a0:59:5f:fe:fa:50:3c:53:cd:29:be:38:a1:96:5f:a6:b6:84: c2:12:99:a0:d8:91:10:1e:a0:44:57:fd:8d:33:10:ba:db:3c: 60:da:39:33:8b:72:29:49:5b:00:78:5c:46:05:f5:d1:1a:74: 2b:64:4e:9e:65:06:e7:79:a5:57:35:dd:3e:ac:bc:a7:39:7f: 6d:21:8e:d6:c3:e6:e6:8f:1e:37:12:15:14:8f:95:05:15:13: 47:5b:fe:ba:25:4f:91:1a:d0:8c:bc:dc:9a:10:34:ba:b4:d6: 04:39:97:69:c6:c8:6f:c0:6b:cd:e0:75:86:0a:5a:74:b2:1c: 8b:19:8e:ac:50:90:11:2b:2d:7e:99:3f:aa:fc:d7:ae:ae:3d: fb:53:03:0d:c8:ee:d6:9d:76:a3:25:83:96:2b:42:d9:61:f5: 4a:9c:7e:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICdDEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTAxNTAxMzU0NVoXDTI3MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoNTJCNEUzMzEyNzc2RTdDQUUxOTQ4QUNBOTlDQTkyMTM5REFCRUJE QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ0BBbGutUT0NNrElxZv 8qG8VlGpjuMRHHltlmggvqMxg3eh4VwvT/SvyEdPUfrrcr/xcDTTKLBSzl1c22iW C0lkdYPBhnD9h0+AP369T4ElPsH6uCCsOCh5XK57ds9XyXAjplkQ3VHahgeEfoeS GENjSTPOuKj29mjH5pwJw5eM1N/r4HH8i7aboEXd3i4d4NAE5uTmKKn2bzmpG9f+ qKC8NM77afa2S1N76l3YCSc2QrPK6f4QDCbSreBaMp4ed7by/eHAIi5eu3v2ZybX pb1ogXJQalW1kl7WWwooJT36Dg+Ai0VjJPp26zXWAzPs7kIFLOiuSgTznnBBiwuB uv0CAwEAAaOCAogwggKEMB0GA1UdDgQWBBRStOMxJ3bnyuGUisqZypITnavr3DAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjI5OC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjI5OC9VclRq TVNkMjU4cmhsSXJLbWNxU0U1MnI2OXcubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhVEwDQYJKoZIhvcNAQEL BQADggEBABVD47RJSMSBLc4tj7RT/ZS+/L36nNJb1V36WkV0BJIJXVY5c96+svkm 2BkhR1eGntIHtdNpRpyPkXQ3fJWBZAU9/PrUQIinw5w4sJlfVHz4mmMmvsAslHSf y6BZX/76UDxTzSm+OKGWX6a2hMISmaDYkRAeoERX/Y0zELrbPGDaOTOLcilJWwB4 XEYF9dEadCtkTp5lBud5pVc13T6svKc5f20hjtbD5uaPHjcSFRSPlQUVE0db/rol T5Ea0Iy83JoQNLq01gQ5l2nGyG/Aa83gdYYKWnSyHIsZjqxQkBErLX6ZP6r8166u PftTAw3I7taddqMlg5YrQtlh9Uqcfkc= -----END CERTIFICATE-----Generated at Mon Nov 9 09:25:38 2026 by rpki-client