$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/dlGXDZCZooRxWB8KTTKccmKq5Ig.cer File: dlGXDZCZooRxWB8KTTKccmKq5Ig.cer (raw, json) Hash identifier: mb8fszQS05+49Qry/bARMOZRkJfGefmEVdhYzm3cAOo= Subject key identifier: 76:51:97:0D:90:99:A2:84:71:58:1F:0A:4D:32:9C:72:62:AA:E4:88 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2328/dlGXDZCZooRxWB8KTTKccmKq5Ig.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2328/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:41:48 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 133.152.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30593 (0x7781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:41:48 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=7651970D9099A28471581F0A4D329C7262AAE488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:69:51:c6:cb:eb:b0:fe:17:e5:4d:78:6e:6c: fa:9a:7d:d4:81:d4:f9:9a:ba:8e:60:c6:53:b4:7f: c2:44:64:78:57:1a:ac:65:c4:cd:2e:ba:06:a0:ae: cf:21:5b:56:66:c1:40:04:4d:f7:a1:e6:b0:97:b5: bf:51:ff:fd:b2:2b:04:e5:0c:ba:06:dc:3c:95:30: fc:ba:39:a0:2a:a1:b6:ef:74:71:76:14:70:09:5a: 29:24:42:ae:32:db:8e:b4:47:e3:89:fc:f4:c2:ff: 1e:da:73:cb:2e:56:83:74:57:43:67:d1:51:fd:73: fe:cc:f4:d7:31:29:55:df:a0:29:39:cf:64:0f:24: 1b:a9:b1:ae:e0:01:43:3d:ab:29:24:1c:79:5b:0f: bb:bd:46:35:c7:9f:3f:f9:d6:bb:17:f4:98:7e:71: 26:5e:61:65:e1:78:9f:c2:7b:6a:dc:27:84:4f:a3: f9:39:5e:01:8a:47:8a:31:91:53:57:10:84:f2:7d: 55:8a:83:aa:d2:02:ec:de:b3:01:8f:24:c5:9f:e6: 43:c0:2d:f7:1a:c2:42:e3:69:06:79:35:44:84:16: 91:ca:b0:60:f6:e0:2d:3f:9b:0a:59:86:2e:7d:6a: 1b:c3:9e:06:2d:63:7a:9e:f6:62:04:0f:81:da:f3: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:51:97:0D:90:99:A2:84:71:58:1F:0A:4D:32:9C:72:62:AA:E4:88 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2328/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2328/dlGXDZCZooRxWB8KTTKccmKq5Ig.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.152.0.0/16 Signature Algorithm: sha256WithRSAEncryption a0:aa:3f:59:61:39:f0:9e:b7:ff:7d:8e:02:d0:4f:2d:9d:76: 11:ce:8c:dc:9f:48:e6:29:1f:c8:ac:c1:e0:c8:5c:dd:cc:c5: 9f:27:b6:d2:22:d0:cb:78:59:d8:94:44:45:31:29:60:e4:2e: df:c6:fa:ec:45:4f:d6:d0:af:57:bf:b9:7c:5a:13:dc:2c:72: 68:b7:ab:18:7c:eb:ef:2b:9c:85:af:87:b0:e4:39:38:f4:fb: a5:c7:4c:47:4b:0a:ce:39:3d:55:82:98:0c:67:89:ef:91:7d: 00:6b:d8:de:82:22:1c:f7:89:c9:11:18:ad:07:ab:5b:f9:88: a9:5d:8e:c4:60:80:13:de:ee:db:12:8b:e6:49:18:9e:7a:b9: c5:9c:3f:5d:6a:e7:0a:3f:e3:f5:19:38:7a:24:76:0d:66:b6: 51:3e:b8:e9:21:9e:bf:53:56:0e:9f:1a:b9:49:9a:b8:65:d0: cf:7a:5d:83:63:58:db:38:cb:32:9a:e3:18:41:57:74:60:46: 8d:5e:92:4e:f2:80:94:8c:e0:f8:f7:c3:75:7d:11:a3:dd:39: d6:f0:95:52:10:89:02:bf:27:ac:a5:f3:66:10:e8:e2:a1:1a: 51:b9:e1:1b:ef:dc:8e:74:f9:e9:5a:49:47:f3:b5:e7:5e:a2: 25:ee:fd:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICd4EwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxNDE0OFoXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoNzY1MTk3MEQ5MDk5QTI4NDcxNTgxRjBBNEQzMjlDNzI2MkFBRTQ4 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANtpUcbL67D+F+VNeG5s +pp91IHU+Zq6jmDGU7R/wkRkeFcarGXEzS66BqCuzyFbVmbBQARN96HmsJe1v1H/ /bIrBOUMugbcPJUw/Lo5oCqhtu90cXYUcAlaKSRCrjLbjrRH44n89ML/Htpzyy5W g3RXQ2fRUf1z/sz01zEpVd+gKTnPZA8kG6mxruABQz2rKSQceVsPu71GNcefP/nW uxf0mH5xJl5hZeF4n8J7atwnhE+j+TleAYpHijGRU1cQhPJ9VYqDqtIC7N6zAY8k xZ/mQ8At9xrCQuNpBnk1RIQWkcqwYPbgLT+bClmGLn1qG8OeBi1jep72YgQPgdrz 038CAwEAAaOCAogwggKEMB0GA1UdDgQWBBR2UZcNkJmihHFYHwpNMpxyYqrkiDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjMyOC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjMyOC9kbEdY RFpDWm9vUnhXQjhLVFRLY2NtS3E1SWcubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhZgwDQYJKoZIhvcNAQEL BQADggEBAKCqP1lhOfCet/99jgLQTy2ddhHOjNyfSOYpH8isweDIXN3MxZ8nttIi 0Mt4WdiUREUxKWDkLt/G+uxFT9bQr1e/uXxaE9wscmi3qxh86+8rnIWvh7DkOTj0 +6XHTEdLCs45PVWCmAxnie+RfQBr2N6CIhz3ickRGK0Hq1v5iKldjsRggBPe7tsS i+ZJGJ56ucWcP11q5wo/4/UZOHokdg1mtlE+uOkhnr9TVg6fGrlJmrhl0M96XYNj WNs4yzKa4xhBV3RgRo1ekk7ygJSM4Pj3w3V9EaPdOdbwlVIQiQK/J6yl82YQ6OKh GlG54Rvv3I50+elaSUfztedeoiXu/V0= -----END CERTIFICATE-----Generated at Sun Nov 15 21:52:40 2026 by rpki-client