$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer File: VfNagqI2vO2BkIjU2QiH4Lllx88.cer (raw, json) Hash identifier: sQTIRoCPxsgNIPg0wPJAbn6IJKdCRzU9ikIvI/svz4E= Subject key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 72AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:39:29 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 180.235.140.0/22 IP: 202.70.176.0/20 IP: 210.255.240.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29357 (0x72ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:39:29 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=55F35A82A236BCED819088D4D90887E0B965C7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:38:6d:64:24:44:de:7c:c1:82:21:45:3b: 3d:bb:b7:35:48:54:65:a9:37:0e:70:62:32:8e:e6: 3e:f7:4b:18:9f:20:11:9f:0c:f3:93:5d:d1:a6:01: 05:ae:8b:d3:0c:cc:49:f3:5e:96:3e:93:f1:9e:0c: a2:1d:ce:5f:32:f3:57:fa:78:85:10:40:65:8d:8e: bb:f9:ba:92:f2:3c:a9:5e:7d:32:32:da:26:fe:2e: 04:f9:48:d6:31:a1:8e:f6:fb:52:92:95:14:34:62: ac:dc:55:eb:63:aa:0f:0f:5e:8e:c1:14:c1:33:f4: 07:b5:19:2d:36:09:46:10:52:14:5b:5a:e3:ac:01: 76:6f:ca:27:21:c2:8e:84:4c:2e:e1:e1:14:b1:ca: c5:5a:7f:f0:6e:da:5f:52:71:45:ee:6d:ab:e2:60: 5b:cf:ff:a3:b1:96:a5:0b:85:cf:da:ae:25:36:ab: 64:8e:b9:64:f4:4c:00:f9:12:e1:90:0a:5c:ab:a2: 90:e1:21:ea:b0:8d:19:01:74:bf:7d:84:67:98:7a: 1e:82:b3:6d:a5:29:da:8b:da:49:a0:c5:33:bb:09: af:4d:6e:fb:58:98:e5:23:6b:f8:23:c6:c1:83:92: cb:e2:5d:20:8f:df:21:e1:f7:12:f7:75:62:7d:11: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.235.140.0/22 202.70.176.0/20 210.255.240.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:09:d0:5d:48:3a:7c:0c:9f:f2:54:75:84:2b:a9:0a:c6:5f: 36:f0:dc:31:e4:5c:7d:d0:52:6c:25:4d:c5:08:f4:c0:d9:5e: 5c:05:04:33:dc:63:58:6e:81:ce:fb:a9:85:50:db:7c:c1:04: ba:b3:f1:9a:14:1d:90:b8:3c:ec:f2:00:84:01:12:a4:14:27: 6d:74:24:b5:55:f3:4e:19:bd:cb:6c:f0:ab:fd:ab:68:2f:d0: 76:3b:c7:d6:83:03:19:09:d2:06:fd:70:76:9e:b3:ca:99:78: 40:f1:50:25:76:fc:08:d2:1f:09:8d:ad:92:31:43:bd:87:22: 5e:5f:3e:1c:10:cf:d4:38:71:79:0a:f2:87:43:8f:8c:28:e6: 90:56:f2:0b:79:d5:ff:59:5f:13:8b:1f:01:98:2c:71:0c:a1: f1:97:fd:cb:ec:16:15:ef:78:2f:a5:1a:fc:8c:64:b2:d9:e9: da:29:98:07:0c:c2:6d:99:10:f8:e9:d6:4d:67:82:95:5e:df: 18:8e:dd:cb:4b:5d:a0:e6:03:eb:ed:4f:35:72:32:b7:c4:e7: 3e:a4:4e:47:3f:49:57:1d:61:31:21:9c:08:81:b3:b2:4a:93: 39:d5:3e:33:8b:f0:ad:80:78:c3:b3:8c:f5:7e:d8:1e:aa:1f: 04:ba:03:d3 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICcq0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzkyOVoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoNTVGMzVBODJBMjM2QkNFRDgxOTA4OEQ0RDkwODg3RTBCOTY1QzdD RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALItOG1kJETefMGCIUU7 Pbu3NUhUZak3DnBiMo7mPvdLGJ8gEZ8M85Nd0aYBBa6L0wzMSfNelj6T8Z4Moh3O XzLzV/p4hRBAZY2Ou/m6kvI8qV59MjLaJv4uBPlI1jGhjvb7UpKVFDRirNxV62Oq Dw9ejsEUwTP0B7UZLTYJRhBSFFta46wBdm/KJyHCjoRMLuHhFLHKxVp/8G7aX1Jx Re5tq+JgW8//o7GWpQuFz9quJTarZI65ZPRMAPkS4ZAKXKuikOEh6rCNGQF0v32E Z5h6HoKzbaUp2ovaSaDFM7sJr01u+1iY5SNr+CPGwYOSy+JdII/fIeH3Evd1Yn0R RFECAwEAAaOCApIwggKOMB0GA1UdDgQWBBRV81qCoja87YGQiNTZCIfguWXHzzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NDgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg0OC9WZk5hZ3FJ MnZPMkJrSWpVMlFpSDRMbGx4ODgubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCtOuMAwQEykawAwQE0v/wMA0G CSqGSIb3DQEBCwUAA4IBAQA7CdBdSDp8DJ/yVHWEK6kKxl828Nwx5Fx90FJsJU3F CPTA2V5cBQQz3GNYboHO+6mFUNt8wQS6s/GaFB2QuDzs8gCEARKkFCdtdCS1VfNO Gb3LbPCr/atoL9B2O8fWgwMZCdIG/XB2nrPKmXhA8VAldvwI0h8Jja2SMUO9hyJe Xz4cEM/UOHF5CvKHQ4+MKOaQVvILedX/WV8Tix8BmCxxDKHxl/3L7BYV73gvpRr8 jGSy2enaKZgHDMJtmRD46dZNZ4KVXt8Yjt3LS12g5gPr7U81cjK3xOc+pE5HP0lX HWExIZwIgbOySpM51T4zi/CtgHjDs4z1ftgeqh8EugPT -----END CERTIFICATE-----Generated at Mon Sep 21 12:15:35 2026 by rpki-client