$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer File: hfuGICK75cxARi-_2La7gRNdZf0.cer (raw, json) Hash identifier: 4ACCLcyyxfe69T1CVxtP9WNnTFNeLrpg5nP8/fJQK9s= Subject key identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD Authority key identifier: C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 Certificate issuer: /CN=A91A73810000/serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:31:43 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 154.34.0.0/18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=C8C0FB870474C3E84CAB83597C46A862C47F8882 Validity Not Before: Sep 15 01:31:43 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:ea:3f:3a:47:3d:8a:0f:89:2a:ef:95:1c: fc:87:86:c2:f2:9f:19:4f:de:1e:57:50:78:26:5b: 06:a6:2b:76:da:35:86:3b:8b:cd:ed:0a:e3:f2:78: 0f:98:82:6c:79:dc:16:e5:9c:34:29:e3:b6:75:78: b8:d2:18:0e:e6:8d:68:3c:8f:3a:56:c0:69:b8:59: ab:e8:03:3e:2f:43:e5:ae:a4:a3:9a:79:2d:e9:0b: d2:4a:97:43:41:0f:28:02:0f:e5:83:7a:c3:f3:fa: dc:33:44:f6:39:69:17:dc:a1:e8:ed:15:44:a7:16: c6:4f:9f:41:ce:0a:70:bd:a6:6f:a6:f0:73:c8:f8: 6d:d3:3c:a6:e8:dc:bc:0d:a4:a2:44:fb:97:a8:d0: 17:d5:f7:b8:79:fc:b6:79:c3:2c:f8:0d:b2:08:0c: 5d:56:42:b8:33:fe:ae:69:b4:2a:9c:1f:56:e5:16: e5:a1:16:9c:c9:2e:90:fd:7f:2a:26:90:e8:20:74: 71:15:e5:8b:37:5b:48:32:4c:43:c3:d3:c6:9a:7c: c3:dd:70:69:6d:a7:a5:88:79:4e:bb:26:a1:af:d4: 56:91:51:a7:ea:dc:1e:5e:dd:ed:b4:79:db:70:91: 85:5c:27:27:ab:74:d1:a6:62:79:f7:5c:8a:71:cd: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD X509v3 Authority Key Identifier: keyid:C8:C0:FB:87:04:74:C3:E8:4C:AB:83:59:7C:46:A8:62:C4:7F:88:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.34.0.0/18 Signature Algorithm: sha256WithRSAEncryption 0f:0b:9d:34:33:08:dc:cd:2c:af:f9:a2:97:51:9b:e8:79:2f: 78:0d:e6:b3:37:d7:c2:f3:77:a7:56:8b:27:f3:53:3b:8b:d5: d3:a7:c2:74:fa:37:04:44:4d:c5:43:1f:a2:09:d9:9e:23:74: f6:32:5c:06:07:85:1c:03:45:31:d2:cc:bd:42:36:6c:28:f8: 84:bb:2c:f7:9d:7b:53:ea:f0:9d:0f:81:f7:66:b4:1e:05:ac: 28:fc:a4:3a:62:67:4b:48:06:1e:cc:ec:4c:32:19:1d:0b:dc: 24:74:7d:5f:1d:7e:e7:0d:b5:ea:04:43:94:19:22:e3:70:65: cb:21:17:e6:d9:3f:e7:bc:5b:2a:38:36:03:ee:79:b6:ce:b1: b5:5a:55:4b:ac:48:2b:ac:00:eb:44:d5:a6:1d:59:19:5f:09: 49:9b:17:18:e7:b4:d6:1e:43:f0:de:ec:23:77:a1:cf:6d:10: 18:87:f0:cf:0b:74:4e:d3:3c:db:93:02:9e:f2:25:65:64:48: e4:77:1b:96:f6:ab:03:82:a0:53:3e:4a:8d:13:fd:1c:5a:7b: ef:10:d3:f4:85:0d:18:ca:3d:c8:07:88:4a:f0:64:0a:31:e7: 66:7e:14:63:f8:f1:f7:4c:67:cf:75:67:9d:bd:a4:e6:9f:87: f3:2d:13:bc -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhDOEMwRkI4NzA0NzRDM0U4NENBQjgzNTk3QzQ2 QTg2MkM0N0Y4ODgyMB4XDTI2MDkxNTAxMzE0M1oXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoODVGQjg2MjAyMkJCRTVDQzQwNDYyRkJGRDhCNkJCODExMzVENjVG RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOs+6j86Rz2KD4kq75Uc /IeGwvKfGU/eHldQeCZbBqYrdto1hjuLze0K4/J4D5iCbHncFuWcNCnjtnV4uNIY DuaNaDyPOlbAabhZq+gDPi9D5a6ko5p5LekL0kqXQ0EPKAIP5YN6w/P63DNE9jlp F9yh6O0VRKcWxk+fQc4KcL2mb6bwc8j4bdM8pujcvA2kokT7l6jQF9X3uHn8tnnD LPgNsggMXVZCuDP+rmm0KpwfVuUW5aEWnMkukP1/KiaQ6CB0cRXlizdbSDJMQ8PT xpp8w91waW2npYh5Trsmoa/UVpFRp+rcHl7d7bR523CRhVwnJ6t00aZiefdcinHN HbsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBSF+4YgIrvlzEBGL7/YtruBE11l/TAf BgNVHSMEGDAWgBTIwPuHBHTD6Eyrg1l8RqhixH+IgjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveU1EN2h3UjB3LWhNcTROWmZF YW9Zc1JfaUlJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYy Rjg3N0M3MkZEMUZGMi95TUQ3aHdSMHctaE1xNE5aZkVhb1lzUl9pSUkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjExMTYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIxMTE2L2hm dUdJQ0s3NWN4QVJpLV8yTGE3Z1JOZFpmMC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaaIgAwDQYJKoZIhvcN AQELBQADggEBAA8LnTQzCNzNLK/5opdRm+h5L3gN5rM318Lzd6dWiyfzUzuL1dOn wnT6NwRETcVDH6IJ2Z4jdPYyXAYHhRwDRTHSzL1CNmwo+IS7LPede1Pq8J0Pgfdm tB4FrCj8pDpiZ0tIBh7M7EwyGR0L3CR0fV8dfucNteoEQ5QZIuNwZcshF+bZP+e8 Wyo4NgPuebbOsbVaVUusSCusAOtE1aYdWRlfCUmbFxjntNYeQ/De7CN3oc9tEBiH 8M8LdE7TPNuTAp7yJWVkSOR3G5b2qwOCoFM+So0T/Rxae+8Q0/SFDRjKPcgHiErw ZAox52Z+FGP48fdMZ891Z529pOafh/MtE7w= -----END CERTIFICATE-----Generated at Wed Sep 23 16:27:04 2026 by rpki-client