$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/ZHi_qY3QzkTmXrmsSqkUv9TaPHw.cer File: ZHi_qY3QzkTmXrmsSqkUv9TaPHw.cer (raw, json) Hash identifier: rhvq2gLD9r6d+ERKCyczvZ5Ia9jGoCwKlVaD1hhX+6o= Subject key identifier: 64:78:BF:A9:8D:D0:CE:44:E6:5E:B9:AC:4A:A9:14:BF:D4:DA:3C:7C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 70FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/762/ZHi_qY3QzkTmXrmsSqkUv9TaPHw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/762/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:30:17 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 219.112.240.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28922 (0x70fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:30:17 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=6478BFA98DD0CE44E65EB9AC4AA914BFD4DA3C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:25:4b:c4:cc:b3:94:9b:95:ad:65:13:5c: b2:e8:fb:2c:0b:83:4f:3a:b5:7d:a6:4c:6d:b4:20: c2:b9:3b:2a:dd:e8:53:0a:ea:c4:c1:c6:39:5b:ee: 99:30:56:84:a9:c3:f9:f5:30:90:25:14:26:63:47: e4:58:5d:24:47:5b:7c:35:70:0a:c1:df:a7:aa:74: 1e:bf:0a:d2:56:45:6b:b5:80:52:bc:cd:67:9c:c4: 1a:3e:e8:55:53:fc:c3:e4:d3:86:4f:64:40:1b:a2: 83:ee:26:9b:e2:40:3f:f7:81:fa:7e:9c:74:cf:e3: c6:2a:1f:82:4d:0b:02:c5:67:a8:f4:69:38:19:01: a1:1f:70:16:ff:12:38:7b:4e:60:ee:6c:f8:94:03: d4:10:af:44:f3:10:8e:b7:5a:ba:62:9c:28:f2:36: 1d:19:8c:07:21:65:2d:61:1d:24:30:8e:1c:13:6f: 12:5c:55:fe:7d:49:39:07:2f:f8:e4:77:88:e2:1c: 55:27:90:88:82:b6:08:5d:a8:84:38:c4:9c:79:dc: 4f:84:65:38:99:d6:29:12:a4:48:23:03:7c:15:9b: c8:e9:ed:b5:2e:aa:b8:63:8d:59:d8:7a:b4:fd:95: 5d:49:09:a8:de:cf:79:b0:9d:28:4a:49:a2:9b:60: 23:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:78:BF:A9:8D:D0:CE:44:E6:5E:B9:AC:4A:A9:14:BF:D4:DA:3C:7C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/762/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/762/ZHi_qY3QzkTmXrmsSqkUv9TaPHw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.112.240.0/20 Signature Algorithm: sha256WithRSAEncryption 09:79:9f:6b:cc:f7:5f:04:64:cf:43:ad:92:5d:e7:40:9a:aa: c3:d7:bd:87:50:01:20:2c:1f:ae:c4:69:6d:03:c8:5f:e6:f7: 00:49:b0:2d:8d:d7:52:14:da:02:89:a0:ef:69:c3:3b:71:00: 21:5d:74:3a:f8:54:ed:7d:3c:ab:91:2e:2b:20:20:99:96:81: 62:28:35:5e:c1:94:eb:dd:df:38:a2:ef:e7:8f:6c:ed:41:1a: b2:35:f0:84:b4:2a:71:a9:b8:94:fb:03:4a:c9:c0:fd:39:38: 3d:53:8a:6d:26:73:82:84:27:17:60:a1:7f:a2:2a:ca:bb:48: b5:4b:01:ad:dc:a6:32:52:47:72:80:57:1c:5d:ac:7a:b9:68: f1:42:e0:1c:57:b6:7d:b2:14:70:13:cd:50:86:fd:b5:32:69: 38:d3:2f:3a:d2:b8:7c:49:55:cb:3a:1a:f5:c1:57:c8:b3:a7: 3e:7e:e9:47:df:1e:78:be:be:1a:ba:a2:81:68:03:07:58:5c: a4:78:f9:8f:f9:25:7a:7c:92:98:2a:f0:e2:da:6b:84:7e:9b: ec:29:f6:13:c9:a5:09:b6:f3:b3:ca:a4:51:ab:d8:5a:5c:19: 7a:3f:92:c0:89:85:c1:6f:d7:38:1e:92:40:bb:27:61:07:d5: 4d:be:c7:68 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICcPowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzAxN1oXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoNjQ3OEJGQTk4REQwQ0U0NEU2NUVCOUFDNEFBOTE0QkZENERBM0M3 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKvVJUvEzLOUm5WtZRNc suj7LAuDTzq1faZMbbQgwrk7Kt3oUwrqxMHGOVvumTBWhKnD+fUwkCUUJmNH5Fhd JEdbfDVwCsHfp6p0Hr8K0lZFa7WAUrzNZ5zEGj7oVVP8w+TThk9kQBuig+4mm+JA P/eB+n6cdM/jxiofgk0LAsVnqPRpOBkBoR9wFv8SOHtOYO5s+JQD1BCvRPMQjrda umKcKPI2HRmMByFlLWEdJDCOHBNvElxV/n1JOQcv+OR3iOIcVSeQiIK2CF2ohDjE nHncT4RlOJnWKRKkSCMDfBWbyOnttS6quGONWdh6tP2VXUkJqN7PebCdKEpJoptg I5sCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBRkeL+pjdDOROZeuaxKqRS/1No8fDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC83NjIvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzc2Mi9aSGlfcVkz UXprVG1Ycm1zU3FrVXY5VGFQSHcubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE23DwMA0GCSqGSIb3DQEBCwUA A4IBAQAJeZ9rzPdfBGTPQ62SXedAmqrD172HUAEgLB+uxGltA8hf5vcASbAtjddS FNoCiaDvacM7cQAhXXQ6+FTtfTyrkS4rICCZloFiKDVewZTr3d84ou/nj2ztQRqy NfCEtCpxqbiU+wNKycD9OTg9U4ptJnOChCcXYKF/oirKu0i1SwGt3KYyUkdygFcc Xax6uWjxQuAcV7Z9shRwE81Qhv21Mmk40y860rh8SVXLOhr1wVfIs6c+fulH3x54 vr4auqKBaAMHWFykePmP+SV6fJKYKvDi2muEfpvsKfYTyaUJtvOzyqRRq9haXBl6 P5LAiYXBb9c4HpJAuydhB9VNvsdo -----END CERTIFICATE-----Generated at Mon Sep 21 10:37:44 2026 by rpki-client