$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer File: e5r2GKThvUClCRs5VuFc2ir2ydI.cer (raw, json) Hash identifier: gBHNyHT+UrpqAJHdp+WYiVmP2BaB6S0fnKkeM4oXuzM= Subject key identifier: 7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Feb 2026 01:41:53 +0000 Certificate not after: Mon 15 Feb 2027 01:30:02 +0000 Subordinate resources: IP: 2402:3160::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25428 (0x6354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Feb 15 01:41:53 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=7B9AF618A4E1BD40A5091B3956E15CDA2AF6C9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:c2:a6:d0:77:09:ec:da:7f:2d:a2:02:0a: 31:57:cd:e7:a1:f7:38:5a:e6:f9:0e:2f:6b:a2:d2: 17:71:fe:77:a4:03:81:3e:9f:1a:c8:07:ea:36:e3: db:3e:90:dc:22:94:da:fc:a5:76:85:b2:57:ee:1b: 1c:16:37:63:23:cb:e2:ca:df:9d:41:88:2a:d2:db: de:25:4b:3d:7a:3d:02:66:0d:ef:ea:41:c3:38:ae: 17:03:c5:7a:15:c2:2f:36:2c:6a:c6:26:98:23:3e: 09:75:df:bb:5d:92:7c:ec:97:3b:73:24:dd:f8:43: 1c:96:f4:4e:ea:84:cc:3e:43:32:1b:15:c5:ef:04: eb:81:a9:c0:13:72:7c:6f:34:a2:15:c4:4a:6d:1a: 1f:70:ba:10:89:31:c6:21:10:74:68:32:57:79:7b: d4:83:02:03:68:9e:0b:50:4e:3a:bd:1b:90:64:67: 51:27:89:1c:03:7b:11:8f:ad:fb:6c:33:f7:de:d2: 17:ac:5f:27:63:95:7d:a5:1b:71:df:b8:ed:c1:d1: e6:5e:37:d6:3a:49:a2:b8:cc:a8:59:c4:50:e4:5b: e6:c2:a8:1d:d3:12:c4:79:99:ab:0e:76:8f:49:74: de:5e:2c:8b:52:96:65:3d:4c:d0:5e:e8:17:c7:54: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3160::/32 Signature Algorithm: sha256WithRSAEncryption 70:0b:6e:7a:be:7d:42:4c:32:99:4e:a5:5d:93:2a:25:31:24: de:9e:ff:7d:5e:5b:db:0d:c7:66:8d:21:ef:a7:cc:69:dd:e5: d7:4d:ed:cb:e6:ea:ce:86:e4:6c:f6:70:a7:ac:6b:22:0c:2e: 9f:99:b0:1f:a2:00:a5:5d:b9:92:5a:bd:57:7b:e8:21:dd:ca: 03:4d:05:91:df:90:39:e7:4c:29:e8:fa:47:d0:43:4b:98:dc: a6:40:20:f8:bd:1c:20:bb:8c:7c:57:30:1d:fc:33:1b:ef:4d: d7:06:a5:74:b9:be:27:e1:bc:f3:24:62:f8:34:e1:ae:01:64: f1:2f:72:b3:a0:9c:85:c6:f2:a3:df:ee:48:2d:ec:ea:88:4a: f0:df:b9:a8:32:b0:8e:1e:7e:2f:d0:78:8a:8c:e1:4c:1f:38: 88:91:20:39:fd:8a:ed:8e:79:c9:25:07:d1:bf:1f:4c:20:3c: 3c:06:eb:cb:78:7c:f3:1d:f9:f7:2b:c5:8f:41:58:4e:4b:18: bd:23:05:9c:32:33:10:26:cb:93:5e:dc:8b:d6:98:f6:a9:4b: 8c:99:ac:03:92:b4:c2:0d:9d:2f:a5:83:f1:48:aa:d9:63:d6: d5:bf:c7:7b:b4:f7:8c:a2:23:24:19:b3:c4:74:9a:58:98:45: 1b:b6:c3:d5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICY1QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDIxNTAxNDE1M1oXDTI3MDIxNTAxMzAwMlowMzEx MC8GA1UEAxMoN0I5QUY2MThBNEUxQkQ0MEE1MDkxQjM5NTZFMTVDREEyQUY2QzlE MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANNDwqbQdwns2n8togIK MVfN56H3OFrm+Q4va6LSF3H+d6QDgT6fGsgH6jbj2z6Q3CKU2vyldoWyV+4bHBY3 YyPL4srfnUGIKtLb3iVLPXo9AmYN7+pBwziuFwPFehXCLzYsasYmmCM+CXXfu12S fOyXO3Mk3fhDHJb0TuqEzD5DMhsVxe8E64GpwBNyfG80ohXESm0aH3C6EIkxxiEQ dGgyV3l71IMCA2ieC1BOOr0bkGRnUSeJHAN7EY+t+2wz997SF6xfJ2OVfaUbcd+4 7cHR5l431jpJorjMqFnEUORb5sKoHdMSxHmZqw52j0l03l4si1KWZT1M0F7oF8dU Jo0CAwEAAaOCAowwggKIMB0GA1UdDgQWBBR7mvYYpOG9QKUJGzlW4VzaKvbJ0jAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NDkvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDQ5L2U1 cjJHS1RodlVDbENSczVWdUZjMmlyMnlkSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAjFgMA0GCSqGSIb3 DQEBCwUAA4IBAQBwC256vn1CTDKZTqVdkyolMSTenv99XlvbDcdmjSHvp8xp3eXX Te3L5urOhuRs9nCnrGsiDC6fmbAfogClXbmSWr1Xe+gh3coDTQWR35A550wp6PpH 0ENLmNymQCD4vRwgu4x8VzAd/DMb703XBqV0ub4n4bzzJGL4NOGuAWTxL3KzoJyF xvKj3+5ILezqiErw37moMrCOHn4v0HiKjOFMHziIkSA5/YrtjnnJJQfRvx9MIDw8 BuvLeHzzHfn3K8WPQVhOSxi9IwWcMjMQJsuTXtyL1pj2qUuMmawDkrTCDZ0vpYPx SKrZY9bVv8d7tPeMoiMkGbPEdJpYmEUbtsPV -----END CERTIFICATE-----Generated at Mon Mar 2 07:09:54 2026 by rpki-client