$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer File: hfuGICK75cxARi-_2La7gRNdZf0.cer (raw, json) Hash identifier: x0Ucu7LJdJuWkx2s4d9AAnGktF9daMcFcdnxZxiaBf8= Subject key identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD Authority key identifier: C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 Certificate issuer: /CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Feb 2026 01:38:14 +0000 Certificate not after: Mon 15 Feb 2027 01:30:02 +0000 Subordinate resources: IP: 154.34.0.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Validity Not Before: Feb 15 01:38:14 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:ea:3f:3a:47:3d:8a:0f:89:2a:ef:95:1c: fc:87:86:c2:f2:9f:19:4f:de:1e:57:50:78:26:5b: 06:a6:2b:76:da:35:86:3b:8b:cd:ed:0a:e3:f2:78: 0f:98:82:6c:79:dc:16:e5:9c:34:29:e3:b6:75:78: b8:d2:18:0e:e6:8d:68:3c:8f:3a:56:c0:69:b8:59: ab:e8:03:3e:2f:43:e5:ae:a4:a3:9a:79:2d:e9:0b: d2:4a:97:43:41:0f:28:02:0f:e5:83:7a:c3:f3:fa: dc:33:44:f6:39:69:17:dc:a1:e8:ed:15:44:a7:16: c6:4f:9f:41:ce:0a:70:bd:a6:6f:a6:f0:73:c8:f8: 6d:d3:3c:a6:e8:dc:bc:0d:a4:a2:44:fb:97:a8:d0: 17:d5:f7:b8:79:fc:b6:79:c3:2c:f8:0d:b2:08:0c: 5d:56:42:b8:33:fe:ae:69:b4:2a:9c:1f:56:e5:16: e5:a1:16:9c:c9:2e:90:fd:7f:2a:26:90:e8:20:74: 71:15:e5:8b:37:5b:48:32:4c:43:c3:d3:c6:9a:7c: c3:dd:70:69:6d:a7:a5:88:79:4e:bb:26:a1:af:d4: 56:91:51:a7:ea:dc:1e:5e:dd:ed:b4:79:db:70:91: 85:5c:27:27:ab:74:d1:a6:62:79:f7:5c:8a:71:cd: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD X509v3 Authority Key Identifier: keyid:C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.34.0.0/18 Signature Algorithm: sha256WithRSAEncryption 0b:74:9d:08:de:de:9a:9f:47:04:32:b0:31:d2:52:e3:92:cc: 07:d4:12:75:88:5c:d3:0a:6f:b4:eb:6f:92:d6:d1:d6:43:bc: 17:cb:61:96:b2:f9:64:68:2f:ad:b7:9d:5a:fe:57:03:1b:6b: 64:72:f2:1c:1b:ce:8d:2b:1b:18:36:97:84:71:f8:79:0d:0d: db:ab:44:7c:f3:ac:b9:c6:57:ee:f0:73:a7:39:77:7b:8c:48: ab:60:ac:11:f6:ef:d9:a5:78:d7:45:34:53:47:2c:8f:71:af: f5:ac:cd:ad:d2:b6:0d:ca:0e:2a:6a:47:13:55:85:dc:6c:59: 7e:ef:ba:1a:a1:6e:12:25:49:71:c2:6b:8d:4e:a6:ef:f3:c0: c2:01:cd:c8:ed:ac:c1:9d:e7:20:af:fe:fc:ce:c3:9b:9d:3c: 63:ce:58:29:2e:ad:b3:c1:b7:c5:2d:22:a6:aa:1d:15:05:88: 9b:4b:b1:7a:0d:a6:a9:e9:91:a9:84:63:57:9b:33:d8:cc:ac: 78:19:80:4f:94:92:d3:54:4f:91:1f:8c:61:2e:73:18:6c:aa: 48:e4:54:c2:f3:27:76:05:40:b5:0b:d2:9e:72:95:29:1d:ff: 40:b2:23:f4:7e:27:c1:43:71:4d:f0:72:5a:bc:a0:be:f7:a6: 84:5d:82:5e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhDOEMwRkI4NzA0NzRDM0U4NENBQjgzNTk3QzQ2 QTg2MkM0N0Y4ODgyMB4XDTI2MDIxNTAxMzgxNFoXDTI3MDIxNTAxMzAwMlowMzEx MC8GA1UEAxMoODVGQjg2MjAyMkJCRTVDQzQwNDYyRkJGRDhCNkJCODExMzVENjVG RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOs+6j86Rz2KD4kq75Uc /IeGwvKfGU/eHldQeCZbBqYrdto1hjuLze0K4/J4D5iCbHncFuWcNCnjtnV4uNIY DuaNaDyPOlbAabhZq+gDPi9D5a6ko5p5LekL0kqXQ0EPKAIP5YN6w/P63DNE9jlp F9yh6O0VRKcWxk+fQc4KcL2mb6bwc8j4bdM8pujcvA2kokT7l6jQF9X3uHn8tnnD LPgNsggMXVZCuDP+rmm0KpwfVuUW5aEWnMkukP1/KiaQ6CB0cRXlizdbSDJMQ8PT xpp8w91waW2npYh5Trsmoa/UVpFRp+rcHl7d7bR523CRhVwnJ6t00aZiefdcinHN HbsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSF+4YgIrvlzEBGL7/YtruBE11l/TAf BgNVHSMEGDAWgBTIwPuHBHTD6Eyrg1l8RqhixH+IgjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveU1EN2h3UjB3LWhNcTROWmZF YW9Zc1JfaUlJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYy Rjg3N0M3MkZEMUZGMi95TUQ3aHdSMHctaE1xNE5aZkVhb1lzUl9pSUkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjExMTYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIxMTE2L2hm dUdJQ0s3NWN4QVJpLV8yTGE3Z1JOZFpmMC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaaIgAwDQYJKoZIhvcN AQELBQADggEBAAt0nQje3pqfRwQysDHSUuOSzAfUEnWIXNMKb7Trb5LW0dZDvBfL YZay+WRoL623nVr+VwMba2Ry8hwbzo0rGxg2l4Rx+HkNDdurRHzzrLnGV+7wc6c5 d3uMSKtgrBH279mleNdFNFNHLI9xr/Wsza3Stg3KDipqRxNVhdxsWX7vuhqhbhIl SXHCa41Opu/zwMIBzcjtrMGd5yCv/vzOw5udPGPOWCkurbPBt8UtIqaqHRUFiJtL sXoNpqnpkamEY1ebM9jMrHgZgE+UktNUT5EfjGEucxhsqkjkVMLzJ3YFQLUL0p5y lSkd/0CyI/R+J8FDcU3wclq8oL73poRdgl4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:22 2026 by rpki-client