$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer File: ivQg8ZIA4Rvkro2RTroqy0KRe24.cer (raw, json) Hash identifier: Bk7A3OQgqyrCEf+fLy/aXi6RXfd2RELoIqJbWUo/KsA= Subject key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 66EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Apr 2026 01:37:06 +0000 Certificate not after: Thu 15 Apr 2027 01:30:02 +0000 Subordinate resources: IP: 103.40.128.0/22 IP: 202.140.192.0/19 IP: 219.100.132.0/22 IP: 220.152.96.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26351 (0x66ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:37:06 2026 GMT Not After : Apr 15 01:30:02 2027 GMT Subject: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:3f:61:7a:77:16:e2:83:a2:e3:0f:a1:09: 92:4c:52:9a:b5:de:72:f7:fe:c0:db:b9:39:d4:fb: cf:33:db:f5:b3:7d:8a:24:71:f1:7f:fa:fc:7e:b7: 19:52:f3:82:0f:83:cc:9a:ec:91:6d:9b:b4:ae:b1: 1e:84:a0:a9:95:8f:7e:aa:01:31:59:91:97:46:4d: 1e:9e:ba:f0:94:ee:dd:a6:74:37:47:21:41:11:fe: 8b:86:84:f6:ec:fe:c7:df:88:71:2d:b6:fa:67:3e: 37:57:c7:85:dc:a4:e9:81:3f:d4:5d:d6:22:02:b2: 77:ab:99:5c:c1:ab:fa:8d:50:f3:05:04:60:86:03: 81:5e:af:f4:dc:2b:4b:8f:a4:f4:d7:a0:e2:01:cc: 1e:99:d3:80:10:f1:77:40:2a:3d:70:05:a3:5e:c8: e5:11:88:55:54:67:fb:37:4d:cc:a4:e1:4b:4b:f3: c8:56:4b:c9:4d:44:83:9a:03:fc:7e:2e:b1:4e:8d: d6:4c:9b:c1:3e:52:d1:aa:c5:b2:ff:28:7a:24:f8: f3:bb:b5:4f:a1:7f:35:c0:a7:63:e9:ef:9a:23:50: 2c:28:f4:3d:80:2c:ab:33:e9:ca:92:e2:df:d7:c9: e9:40:d5:96:6c:40:7d:3b:c8:04:ca:d3:98:56:4f: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.128.0/22 202.140.192.0/19 219.100.132.0/22 220.152.96.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:1f:79:0d:c2:71:f9:c7:16:5f:dc:87:22:df:b0:3b:e0:16: eb:4a:13:2d:c6:ee:3a:9b:10:a1:17:a8:55:a6:2f:13:12:36: 8e:22:cd:94:05:94:6a:71:ba:d6:60:14:2e:09:86:77:3f:df: 40:45:fa:25:de:9e:7d:14:5e:58:b7:9c:10:99:e6:70:93:f8: 35:da:c8:c9:92:8a:b4:e7:f0:53:bc:a8:a9:fc:6b:10:82:28: 9e:6e:97:8f:9d:23:33:24:a2:59:33:0b:09:7a:82:69:e9:25: 22:a1:f6:85:ba:df:7c:be:48:7a:ba:ca:fe:ca:2e:aa:19:5e: 7b:50:b6:8f:20:50:73:0c:9c:84:cf:34:69:3d:19:60:61:33: 75:3c:09:fe:e0:38:75:7d:04:e7:1a:01:6e:c2:b4:a2:44:2d: 08:74:b8:68:23:27:97:b5:38:f8:5b:68:52:e0:cb:27:00:22: 0d:31:b7:80:8a:fa:3f:44:ea:68:23:8e:6c:8f:0c:67:61:46: ec:e6:c8:09:8e:23:13:7a:01:f1:82:ed:6d:28:fe:cd:aa:20: 25:57:5b:70:4e:69:1b:0c:85:33:58:6f:15:e4:91:44:4b:3d: 61:d6:5d:74:09:16:8f:f6:4b:e6:ff:65:f3:f4:87:f3:3e:ab: 2c:6a:5c:7b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICZu8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDQxNTAxMzcwNloXDTI3MDQxNTAxMzAwMlowMzEx MC8GA1UEAxMoOEFGNDIwRjE5MjAwRTExQkU0QUU4RDkxNEVCQTJBQ0I0MjkxN0I2 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANKaP2F6dxbig6LjD6EJ kkxSmrXecvf+wNu5OdT7zzPb9bN9iiRx8X/6/H63GVLzgg+DzJrskW2btK6xHoSg qZWPfqoBMVmRl0ZNHp668JTu3aZ0N0chQRH+i4aE9uz+x9+IcS22+mc+N1fHhdyk 6YE/1F3WIgKyd6uZXMGr+o1Q8wUEYIYDgV6v9NwrS4+k9Neg4gHMHpnTgBDxd0Aq PXAFo17I5RGIVVRn+zdNzKThS0vzyFZLyU1Eg5oD/H4usU6N1kybwT5S0arFsv8o eiT487u1T6F/NcCnY+nvmiNQLCj0PYAsqzPpypLi39fJ6UDVlmxAfTvIBMrTmFZP 550CAwEAAaOCApgwggKUMB0GA1UdDgQWBBSK9CDxkgDhG+SujZFOuirLQpF7bjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84ODQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg4NC9pdlFnOFpJ QTRSdmtybzJSVHJvcXkwS1JlMjQubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCZyiAAwQFyozAAwQC22SEAwQE 3JhgMA0GCSqGSIb3DQEBCwUAA4IBAQBvH3kNwnH5xxZf3Ici37A74BbrShMtxu46 mxChF6hVpi8TEjaOIs2UBZRqcbrWYBQuCYZ3P99ARfol3p59FF5Yt5wQmeZwk/g1 2sjJkoq05/BTvKip/GsQgiiebpePnSMzJKJZMwsJeoJp6SUiofaFut98vkh6usr+ yi6qGV57ULaPIFBzDJyEzzRpPRlgYTN1PAn+4Dh1fQTnGgFuwrSiRC0IdLhoIyeX tTj4W2hS4MsnACINMbeAivo/ROpoI45sjwxnYUbs5sgJjiMTegHxgu1tKP7NqiAl V1twTmkbDIUzWG8V5JFESz1h1l10CRaP9kvm/2Xz9IfzPqssalx7 -----END CERTIFICATE-----Generated at Fri Apr 17 04:10:28 2026 by rpki-client