$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer File: XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer (raw, json) Hash identifier: wMKeocsHl4TcGzEiJafId0xMsKDkYFnQEC/hcC1NRBQ= Subject key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 67BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Apr 2026 01:43:17 +0000 Certificate not after: Thu 15 Apr 2027 01:30:02 +0000 Subordinate resources: IP: 202.231.128.0 -- 202.231.175.255 IP: 210.141.160.0/20 IP: 210.156.128.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26555 (0x67bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:43:17 2026 GMT Not After : Apr 15 01:30:02 2027 GMT Subject: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:ac:d8:e1:d7:7d:e2:f5:80:ee:80:ff:bd: 72:a7:12:bc:ba:f5:43:40:cf:de:2e:da:f4:0f:e3: a6:40:9b:c7:fd:3a:2d:c8:52:e7:49:f6:90:32:d1: a4:5a:aa:23:8c:61:21:65:f2:7d:89:28:f5:07:d0: f7:39:c9:39:f4:82:4d:c4:19:5c:9a:51:6f:fd:fd: 79:98:93:e2:95:0f:9d:40:65:a0:24:4f:3f:ba:88: 25:cd:aa:35:47:c8:b0:d3:bd:3f:c8:66:11:79:a0: a1:dc:b5:34:d6:59:32:ae:cd:62:28:50:9f:7f:38: fb:8e:4c:1e:38:13:15:1e:fe:bf:95:d6:f0:e0:8a: 1f:fc:b2:5e:36:35:33:ad:cc:ed:89:91:57:ad:d1: 01:39:9a:e5:8b:e3:dd:ef:e4:b3:1d:09:50:fd:cf: 16:e9:dc:4f:03:d4:5a:ef:c6:f3:d9:4c:1a:5d:ab: 86:d5:fe:35:6f:a6:30:e8:fb:b4:d4:08:9b:4a:8c: 99:12:fd:05:d4:dc:9c:3d:46:5a:d9:ff:10:b3:7e: 5d:fa:95:fd:a4:52:db:87:fc:df:ae:d5:4e:0e:da: 0f:01:97:91:84:2d:eb:e1:65:d2:f1:ed:94:64:3a: fc:27:fb:6b:04:14:61:a1:77:b2:61:fa:4b:a9:9e: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.231.128.0-202.231.175.255 210.141.160.0/20 210.156.128.0/20 Signature Algorithm: sha256WithRSAEncryption 88:af:02:40:4a:1e:c2:a3:85:c3:d5:16:3f:92:a5:cf:da:16: ed:a9:c4:e6:c0:73:41:54:ad:88:c7:6e:04:b9:79:01:6c:0a: 14:07:5e:af:e1:fd:d5:ec:85:c7:29:e8:fc:de:f5:fd:ca:a7: 16:20:4d:25:67:70:ff:f5:53:f3:4f:ba:61:ff:3f:b1:96:b8: cb:53:9f:d2:8f:07:33:8d:f1:ef:25:4f:3d:be:f3:20:bd:c2: ad:66:54:35:70:88:51:c1:ab:8b:24:24:cf:69:c3:e8:d0:53: b5:7f:28:21:88:e3:3a:d9:79:97:1e:2e:28:63:ea:f4:fc:cf: 93:47:8c:70:1e:76:5f:d9:89:7b:db:7c:56:b4:83:b3:a4:67: bc:5c:79:3c:35:45:16:25:a5:fc:70:0c:61:8c:9d:f6:a8:6e: 5d:6b:26:7e:f0:62:dc:c3:eb:10:56:39:e1:e2:e4:34:73:fc: 23:b8:44:0b:7b:e3:1e:52:d7:9d:a3:3b:d7:b5:ec:d2:9b:c2: bc:f4:07:81:a9:4d:ff:f1:3c:f1:08:9b:a6:14:0f:c0:78:64: 68:e0:9d:ad:5f:2e:0b:9b:e5:92:cb:d4:74:32:2d:1e:69:be: bf:53:ea:d7:51:fe:7d:8a:11:bf:a8:07:b1:f9:d1:91:ca:68: d8:37:eb:46 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICZ7swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDQxNTAxNDMxN1oXDTI3MDQxNTAxMzAwMlowMzEx MC8GA1UEAxMoNUQ4RjQ4Rjk5QzVCMDc0NUI3N0Y4QkNBNzU0RTYzODg1Q0FEQzQx ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQsrNjh133i9YDugP+9 cqcSvLr1Q0DP3i7a9A/jpkCbx/06LchS50n2kDLRpFqqI4xhIWXyfYko9QfQ9znJ OfSCTcQZXJpRb/39eZiT4pUPnUBloCRPP7qIJc2qNUfIsNO9P8hmEXmgody1NNZZ Mq7NYihQn384+45MHjgTFR7+v5XW8OCKH/yyXjY1M63M7YmRV63RATma5Yvj3e/k sx0JUP3PFuncTwPUWu/G89lMGl2rhtX+NW+mMOj7tNQIm0qMmRL9BdTcnD1GWtn/ ELN+XfqV/aRS24f8367VTg7aDwGXkYQt6+Fl0vHtlGQ6/Cf7awQUYaF3smH6S6me K4UCAwEAAaOCApgwggKUMB0GA1UdDgQWBBRdj0j5nFsHRbd/i8p1TmOIXK3EGDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81NC8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTQvWFk5SS1aeGJC MFczZjR2S2RVNWppRnl0eEJnLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAz BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQHyueAAwQEyuegAwQE0o2gAwQE 0pyAMA0GCSqGSIb3DQEBCwUAA4IBAQCIrwJASh7Co4XD1RY/kqXP2hbtqcTmwHNB VK2Ix24EuXkBbAoUB16v4f3V7IXHKej83vX9yqcWIE0lZ3D/9VPzT7ph/z+xlrjL U5/SjwczjfHvJU89vvMgvcKtZlQ1cIhRwauLJCTPacPo0FO1fyghiOM62XmXHi4o Y+r0/M+TR4xwHnZf2Yl723xWtIOzpGe8XHk8NUUWJaX8cAxhjJ32qG5dayZ+8GLc w+sQVjnh4uQ0c/wjuEQLe+MeUtedozvXtezSm8K89AeBqU3/8TzxCJumFA/AeGRo 4J2tXy4Lm+WSy9R0Mi0eab6/U+rXUf59ihG/qAex+dGRymjYN+tG -----END CERTIFICATE-----Generated at Fri Apr 17 15:12:58 2026 by rpki-client