$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/apWCSYAD-L9tk8FR84y0iWpLLVw.cer File: apWCSYAD-L9tk8FR84y0iWpLLVw.cer (raw, json) Hash identifier: PVA81Xr+9ji4LIL473Q1TDs9VM/Ka/60A2062PWzNcE= Subject key identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 67E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Apr 2026 01:44:24 +0000 Certificate not after: Thu 15 Apr 2027 01:30:02 +0000 Subordinate resources: IP: 202.253.252.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26595 (0x67e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:44:24 2026 GMT Not After : Apr 15 01:30:02 2027 GMT Subject: CN=6A9582498003F8BF6D93C151F38CB4896A4B2D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:18:b3:bf:9b:21:ed:7e:d1:13:6b:dd:5b: 69:7d:30:a7:a7:c1:ac:84:da:9d:60:9b:76:fc:5d: c5:14:ad:ed:66:f2:43:42:34:cb:bf:c2:98:51:89: 81:2b:c0:cf:88:f9:ef:c8:86:8d:1e:4c:16:45:d9: ec:28:dd:66:19:ea:d0:f9:19:d9:57:db:95:7a:a1: 8a:b1:8f:fc:93:4b:b4:ff:56:7a:85:69:34:e1:05: c9:d9:a8:21:09:d5:e0:5a:78:9f:05:3f:0e:aa:65: 95:28:de:2c:5c:d0:f7:4c:53:2a:f1:49:76:12:63: ae:a4:17:46:bd:bc:f0:9b:51:7f:31:51:20:c3:b7: 16:d7:da:07:b2:67:60:f2:d5:78:fb:c3:0c:05:8f: 99:9c:c3:b7:28:14:94:63:ed:18:2c:ed:28:9b:6f: 4c:14:81:43:f9:f2:34:a3:65:54:01:61:2e:ae:f7: 56:c4:46:b9:46:99:5a:63:6a:27:4c:9f:62:97:c5: 56:ab:4b:cb:a5:69:eb:3d:e4:0d:f9:c2:6e:32:a0: fd:5d:b8:4f:58:ab:11:0e:99:f9:b6:f7:91:21:50: a2:f7:fa:7a:91:2a:d2:0f:3b:12:c8:09:56:d4:ec: 7a:3f:b2:90:3f:20:c6:9b:86:24:ad:8b:53:9e:37: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:82:49:80:03:F8:BF:6D:93:C1:51:F3:8C:B4:89:6A:4B:2D:5C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1492/apWCSYAD-L9tk8FR84y0iWpLLVw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.253.252.0/23 Signature Algorithm: sha256WithRSAEncryption 91:31:a0:12:f6:1f:57:15:9d:db:f9:a1:9d:9b:72:47:99:68: a7:06:08:fc:ab:1b:60:21:6b:e5:de:11:5c:65:0f:2e:bd:73: 62:7b:36:4b:5c:5f:0e:82:03:67:78:72:26:96:92:79:05:ab: 19:c0:9a:48:6e:5f:eb:d5:74:05:f2:41:19:ad:72:bb:a4:fa: 77:9d:b1:41:5e:59:5d:2d:59:d4:00:32:1c:3e:83:54:34:e1: 40:0d:b8:8b:b2:2a:5d:99:f3:92:c1:02:bb:76:0d:28:a6:f6: bc:09:8b:aa:94:8f:7c:16:ce:ab:64:c3:6c:94:20:f8:6c:3a: e1:24:03:3b:b9:18:31:3d:d9:83:d9:24:ac:92:7d:a4:fe:bd: ed:6c:c1:ef:cf:a8:2f:18:f3:3e:53:ef:7b:17:f7:07:30:c1: 4c:f5:dc:89:93:68:0a:ba:a9:2c:5c:aa:8d:53:ac:e0:7d:a8: 97:d3:73:fa:86:bd:82:22:4e:b6:56:f2:3d:df:b8:63:84:2f: 34:66:f9:d9:15:7a:bb:80:43:75:77:5e:58:ac:db:91:ba:5c: bb:4a:c5:49:e6:22:4c:05:6e:d3:a9:6e:c2:a0:87:1b:36:86: 25:1b:3e:cf:e2:dd:02:f5:f9:26:44:2c:b1:67:cd:db:82:82: 14:5d:b4:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICZ+MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDQxNTAxNDQyNFoXDTI3MDQxNTAxMzAwMlowMzEx MC8GA1UEAxMoNkE5NTgyNDk4MDAzRjhCRjZEOTNDMTUxRjM4Q0I0ODk2QTRCMkQ1 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6KGLO/myHtftETa91b aX0wp6fBrITanWCbdvxdxRSt7WbyQ0I0y7/CmFGJgSvAz4j578iGjR5MFkXZ7Cjd Zhnq0PkZ2VfblXqhirGP/JNLtP9WeoVpNOEFydmoIQnV4Fp4nwU/DqpllSjeLFzQ 90xTKvFJdhJjrqQXRr288JtRfzFRIMO3FtfaB7JnYPLVePvDDAWPmZzDtygUlGPt GCztKJtvTBSBQ/nyNKNlVAFhLq73VsRGuUaZWmNqJ0yfYpfFVqtLy6Vp6z3kDfnC bjKg/V24T1irEQ6Z+bb3kSFQovf6epEq0g87EsgJVtTsej+ykD8gxpuGJK2LU543 Ut8CAwEAAaOCAokwggKFMB0GA1UdDgQWBBRqlYJJgAP4v22TwVHzjLSJakstXDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTQ5Mi9hcFdD U1lBRC1MOXRrOEZSODR5MGlXcExMVncubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByv38MA0GCSqGSIb3DQEB CwUAA4IBAQCRMaAS9h9XFZ3b+aGdm3JHmWinBgj8qxtgIWvl3hFcZQ8uvXNiezZL XF8OggNneHImlpJ5BasZwJpIbl/r1XQF8kEZrXK7pPp3nbFBXlldLVnUADIcPoNU NOFADbiLsipdmfOSwQK7dg0opva8CYuqlI98Fs6rZMNslCD4bDrhJAM7uRgxPdmD 2SSskn2k/r3tbMHvz6gvGPM+U+97F/cHMMFM9dyJk2gKuqksXKqNU6zgfaiX03P6 hr2CIk62VvI937hjhC80ZvnZFXq7gEN1d15YrNuRuly7SsVJ5iJMBW7TqW7CoIcb NoYlGz7P4t0C9fkmRCyxZ83bgoIUXbTw -----END CERTIFICATE-----Generated at Fri Apr 17 02:55:17 2026 by rpki-client