$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer File: h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer (raw, json) Hash identifier: kMtxckthAMkTBEusF9/UyVNdJw0lJ6+Ts9yJIIJmPMI= Subject key identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 76A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:36:57 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 133.3.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 13:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30372 (0x76a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:36:57 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=87CD2FD59C6043CC830969581381D7A2807EF2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:4f:31:ae:59:98:c1:7b:6a:71:6f:9a:40: c7:02:de:fb:83:db:25:88:62:df:1b:eb:7b:c4:18: 55:11:2b:04:23:fc:6f:1a:4e:b0:cc:3e:a7:0c:6a: a2:54:f9:fb:d4:83:85:fc:3f:89:0e:88:55:16:5c: 85:78:55:10:a2:73:26:ad:88:4c:a1:69:2b:98:42: ed:c4:6f:2f:c2:1f:22:f3:ac:fa:7a:ca:c5:49:19: bb:17:fc:0a:99:1d:e0:14:79:42:f2:86:c1:04:1c: 0b:ad:6a:81:03:7a:7f:0f:16:2d:c3:38:9b:69:f3: 68:23:a3:5c:ff:43:87:a9:bd:25:32:01:99:ab:da: 7a:f9:68:91:6c:26:73:13:db:1a:91:c8:54:91:9f: 38:9a:3a:ed:56:01:4c:40:bb:0f:71:5c:91:f2:c2: ee:95:e3:ef:29:52:0d:73:06:e6:93:6d:ec:c9:c3: 0c:57:a6:67:73:9a:9c:8a:53:90:f5:a4:de:6d:c9: 16:c3:15:a5:c9:c0:db:ca:13:34:df:b1:29:ed:2e: c1:68:90:22:2b:73:fb:0d:83:ad:b4:a1:d2:15:ec: 97:f4:d2:60:25:9c:75:9e:61:1e:fb:57:48:93:e8: 61:0c:7f:a6:ba:99:54:a6:7b:82:e6:21:f8:f8:fb: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 12:3f:76:9d:65:8f:85:6c:32:51:a2:7c:08:6e:25:06:c2:12: 6f:50:ef:08:15:d1:93:f7:b7:0d:cf:b0:94:fd:59:6a:5f:f7: 10:e1:c5:38:d9:01:26:6c:f0:4a:77:ff:6c:be:d0:e0:22:4c: ca:a7:1f:c6:af:3d:e1:93:4c:e1:1b:a2:a8:66:39:fe:f8:64: 7b:d2:b6:44:3d:1a:45:33:cd:68:d7:2f:17:0c:a7:e3:d5:e8: 51:be:b0:d2:4d:c7:77:9c:da:d4:13:6a:2b:63:a5:52:cd:8c: de:e9:11:36:26:ca:c2:ac:17:47:22:03:86:74:20:2b:3e:26: 54:a3:24:f1:1b:91:7c:5d:c9:ff:d3:73:90:22:ca:4d:b8:9f: a5:79:2d:da:60:58:21:d8:6d:46:47:6f:b2:53:0c:53:34:9b: 05:4a:ff:90:88:98:60:90:85:7a:6f:03:16:ed:5a:93:3a:5f: 9d:c8:48:39:ac:39:3e:4b:99:eb:a7:a9:cf:98:78:84:39:ba: b5:52:66:0f:f8:62:3b:f8:93:71:b7:17:c8:97:ac:e7:58:f7: fd:b1:72:95:66:ec:ba:83:84:ac:2c:24:27:9b:15:c3:50:7d: ee:a5:02:33:42:ad:12:24:9a:11:ca:27:7c:de:ae:7a:5a:3a: 4b:b6:d1:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICdqQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxMzY1N1oXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoODdDRDJGRDU5QzYwNDNDQzgzMDk2OTU4MTM4MUQ3QTI4MDdFRjJD NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgrTzGuWZjBe2pxb5pA xwLe+4PbJYhi3xvre8QYVRErBCP8bxpOsMw+pwxqolT5+9SDhfw/iQ6IVRZchXhV EKJzJq2ITKFpK5hC7cRvL8IfIvOs+nrKxUkZuxf8Cpkd4BR5QvKGwQQcC61qgQN6 fw8WLcM4m2nzaCOjXP9Dh6m9JTIBmavaevlokWwmcxPbGpHIVJGfOJo67VYBTEC7 D3FckfLC7pXj7ylSDXMG5pNt7MnDDFemZ3OanIpTkPWk3m3JFsMVpcnA28oTNN+x Ke0uwWiQIitz+w2DrbSh0hXsl/TSYCWcdZ5hHvtXSJPoYQx/prqZVKZ7guYh+Pj7 498CAwEAAaOCAogwggKEMB0GA1UdDgQWBBSHzS/VnGBDzIMJaVgTgdeigH7yxzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTk0OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTk0OS9oODB2 MVp4Z1E4eURDV2xZRTRIWG9vQi04c2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhQMwDQYJKoZIhvcNAQEL BQADggEBABI/dp1lj4VsMlGifAhuJQbCEm9Q7wgV0ZP3tw3PsJT9WWpf9xDhxTjZ ASZs8Ep3/2y+0OAiTMqnH8avPeGTTOEboqhmOf74ZHvStkQ9GkUzzWjXLxcMp+PV 6FG+sNJNx3ec2tQTaitjpVLNjN7pETYmysKsF0ciA4Z0ICs+JlSjJPEbkXxdyf/T c5Aiyk24n6V5LdpgWCHYbUZHb7JTDFM0mwVK/5CImGCQhXpvAxbtWpM6X53ISDms OT5Lmeunqc+YeIQ5urVSZg/4Yjv4k3G3F8iXrOdY9/2xcpVm7LqDhKwsJCebFcNQ fe6lAjNCrRIkmhHKJ3zernpaOku20ZU= -----END CERTIFICATE-----Generated at Sun Nov 15 15:42:34 2026 by rpki-client