$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer File: habDacGpx6UsPjgFcnpf0xGFp3M.cer (raw, json) Hash identifier: Gvq9RH5arRZ9QbFLDeOl2d8cbnPt3wjEW+xTvnGLcwE= Subject key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 Authority key identifier: C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 Certificate issuer: /CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:40:56 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 154.33.0.0/16 IP: 154.34.64.0 -- 154.34.255.255 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Validity Not Before: Nov 15 01:40:56 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f7:55:54:fe:ff:ab:76:bf:26:e1:bd:26:ad: df:b7:bf:7b:08:17:7c:93:50:ba:e4:95:c7:73:23: eb:94:43:5f:33:ba:24:eb:08:ce:d5:d8:6a:41:a5: a2:fa:14:d2:d9:41:5c:ee:d0:ad:d2:bd:60:b6:dd: ea:21:f4:1f:cc:e1:04:84:63:c3:ab:18:05:b7:8f: 6f:f7:dc:74:a3:bd:70:ef:1c:78:62:f1:df:d3:13: b1:11:9e:35:66:aa:9e:5e:d4:9c:0d:d1:18:95:e5: 0f:53:c9:7c:ba:b2:62:5b:43:ff:89:5b:3c:a6:ad: 0c:a7:a2:a9:04:a8:86:68:5e:e4:26:e3:68:8e:40: 30:50:4a:7e:37:41:36:a6:77:bd:be:89:35:d0:22: fd:ce:19:3c:d8:99:d1:7a:78:62:ef:da:8e:0d:90: c4:f1:c5:84:f2:d1:92:fa:d6:9f:ae:cc:85:dd:eb: a6:f0:e3:c9:b1:64:cb:24:ac:5d:1b:18:50:76:e9: 8e:f3:c0:58:39:51:d6:ad:71:b7:77:94:1a:e6:e0: f7:f4:18:0f:bf:53:ee:89:9e:1e:3e:ee:9c:25:8a: 9d:95:f2:24:a0:b1:6b:74:2e:4d:f7:30:39:57:fe: 1f:8e:01:84:de:d5:89:39:f9:c8:5e:fa:05:df:d9: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 X509v3 Authority Key Identifier: keyid:C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.33.0.0/16 154.34.64.0-154.34.255.255 Signature Algorithm: sha256WithRSAEncryption 9d:7c:fd:ed:37:92:45:ba:12:f2:b1:11:4d:41:ff:a1:69:a2: 5f:ec:fc:a7:25:cb:8f:51:97:1f:09:00:27:6c:4f:9e:50:c1: 33:bb:b7:bb:9a:c5:81:b5:36:57:7e:f6:cf:57:80:2b:68:8c: 72:2e:f0:cd:04:b2:ad:d7:50:98:50:a9:8f:83:ec:86:bb:fe: f7:51:14:6d:8f:17:32:ec:ce:04:50:98:5d:3f:c8:b9:23:54: 87:0f:e0:0b:97:9c:17:6e:e4:49:4d:51:d5:a0:57:ac:62:ff: 68:10:8f:1e:63:31:e1:74:a0:dd:ff:44:3f:b1:79:50:46:79: da:1c:a1:0d:a7:18:67:5f:cd:7a:17:a0:b0:b4:eb:03:a7:06: da:fb:73:76:e7:9b:14:3f:e4:cc:82:fd:75:e2:6a:1c:c8:67: bd:84:b0:01:5b:7e:3d:8d:7d:9f:d4:48:d8:ac:8c:bf:5b:32: 39:e2:e5:7c:5b:f9:2a:c7:ce:9e:8d:b1:44:47:19:af:c7:dc: 74:6d:dd:ef:83:14:60:ba:6e:f6:7b:5b:36:fd:d2:56:7d:8b: 54:43:23:48:d9:20:9a:47:db:45:dc:0f:36:13:25:d4:d4:16: 6d:ec:cc:19:85:c6:8c:32:ea:af:28:b6:7b:0f:84:44:44:0d: 38:95:f8:16 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhDOEMwRkI4NzA0NzRDM0U4NENBQjgzNTk3QzQ2 QTg2MkM0N0Y4ODgyMB4XDTI2MTExNTAxNDA1NloXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoODVBNkMzNjlDMUE5QzdBNTJDM0UzODA1NzI3QTVGRDMxMTg1QTc3 MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOX3VVT+/6t2vybhvSat 37e/ewgXfJNQuuSVx3Mj65RDXzO6JOsIztXYakGlovoU0tlBXO7QrdK9YLbd6iH0 H8zhBIRjw6sYBbePb/fcdKO9cO8ceGLx39MTsRGeNWaqnl7UnA3RGJXlD1PJfLqy YltD/4lbPKatDKeiqQSohmhe5CbjaI5AMFBKfjdBNqZ3vb6JNdAi/c4ZPNiZ0Xp4 Yu/ajg2QxPHFhPLRkvrWn67Mhd3rpvDjybFkyySsXRsYUHbpjvPAWDlR1q1xt3eU Gubg9/QYD79T7omeHj7unCWKnZXyJKCxa3QuTfcwOVf+H44BhN7ViTn5yF76Bd/Z m60CAwEAAaOCApUwggKRMB0GA1UdDgQWBBSFpsNpwanHpSw+OAVyel/TEYWnczAf BgNVHSMEGDAWgBTIwPuHBHTD6Eyrg1l8RqhixH+IgjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveU1EN2h3UjB3LWhNcTROWmZF YW9Zc1JfaUlJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYy Rjg3N0M3MkZEMUZGMi95TUQ3aHdSMHctaE1xNE5aZkVhb1lzUl9pSUkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTIwMy8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTIwMy9oYWJE YWNHcHg2VXNQamdGY25wZjB4R0ZwM00ubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwMAmiEwCwMEBpoiQAMDAJoi MA0GCSqGSIb3DQEBCwUAA4IBAQCdfP3tN5JFuhLysRFNQf+haaJf7PynJcuPUZcf CQAnbE+eUMEzu7e7msWBtTZXfvbPV4AraIxyLvDNBLKt11CYUKmPg+yGu/73URRt jxcy7M4EUJhdP8i5I1SHD+ALl5wXbuRJTVHVoFesYv9oEI8eYzHhdKDd/0Q/sXlQ RnnaHKENpxhnX816F6CwtOsDpwba+3N255sUP+TMgv114mocyGe9hLABW349jX2f 1EjYrIy/WzI54uV8W/kqx86ejbFERxmvx9x0bd3vgxRgum72e1s2/dJWfYtUQyNI 2SCaR9tF3A82EyXU1BZt7MwZhcaMMuqvKLZ7D4RERA04lfgW -----END CERTIFICATE-----Generated at Sun Nov 15 21:04:13 2026 by rpki-client