$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer File: l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer (raw, json) Hash identifier: rNN1HSjVZCsSkJ1Kxqb+noZsZiXMKM4OoDHlokQsx80= Subject key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:36:38 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 2001:2f0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29208 (0x7218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:36:38 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:2c:56:40:ef:1b:56:45:1a:b9:05:ca:99: ac:68:6e:70:37:ff:db:c6:95:0b:aa:72:46:b8:ef: b3:5f:d5:ba:0e:6b:ba:d6:8b:d7:82:24:9c:34:ac: 57:98:3a:5a:e6:a8:0d:65:2f:75:36:34:b5:5a:c5: f2:f1:12:6c:9e:ea:ac:2f:16:02:5f:e7:06:ba:10: f5:3f:dd:97:57:fd:7a:64:12:99:a7:1f:08:91:f5: 7f:a9:f6:56:19:d5:a0:e7:04:8f:6f:6c:88:e6:a2: 50:c6:27:2e:e6:c1:00:87:5d:f0:13:39:b8:bb:51: c7:b9:39:19:d5:9f:d2:73:a3:15:55:d7:ac:b0:0e: 87:b6:25:17:1e:62:a7:c4:64:ec:a6:87:64:9b:2e: f2:65:44:6b:a1:67:4a:85:fd:44:8c:23:d8:20:58: 11:f0:18:5a:0c:d1:9a:76:28:26:9b:2d:1d:ed:48: 1b:5c:94:01:ce:bd:3b:79:aa:08:2e:75:aa:7a:02: ed:b3:94:dc:5c:67:f3:58:64:b0:cd:6b:80:ab:d2: 34:32:12:c3:08:7d:0f:40:be:a1:22:01:92:89:24: 58:f6:b6:c0:8d:b3:fe:38:fc:0a:0b:b5:41:b8:00: 7f:2a:2c:4f:9a:00:99:58:49:80:08:21:22:3f:79: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:2f0::/32 Signature Algorithm: sha256WithRSAEncryption 66:24:9b:3d:95:53:ba:86:13:c7:57:a2:70:ea:0b:62:90:88: e5:e7:78:68:45:4d:9b:9a:50:23:cd:f9:c0:6a:31:af:6c:ef: a3:6f:81:d9:32:89:e9:b8:59:d5:8d:6d:4d:ca:7c:92:74:a9: e7:cc:28:b0:cb:6c:60:de:38:b5:a4:ef:9c:9f:91:88:2e:e5: 49:93:c4:e7:0f:82:af:5e:ba:af:97:12:a7:1c:29:6f:d5:0e: e7:de:16:27:a4:6c:ac:82:36:f9:77:63:9c:19:1e:da:75:c2: ae:ca:82:31:2e:8d:a0:8a:b6:10:72:5e:3f:fc:80:65:7c:c6: 85:6a:01:ca:eb:db:6d:b8:56:22:2f:f7:2d:4b:5a:1f:e1:66: f8:cd:0b:b0:13:bf:c2:71:99:5d:44:61:b8:42:ae:55:18:7f: c4:f9:87:11:db:ca:8e:07:47:5c:d7:ab:4d:50:95:56:7a:27: b5:81:06:69:17:2f:a6:ac:cf:8d:14:73:ff:f4:2f:c5:ba:7b: 16:e0:90:b3:ef:8b:23:8e:1f:6b:d9:de:37:7f:09:84:88:f0: 75:f1:37:a7:47:72:23:26:c5:ee:58:6e:f6:14:77:3b:7c:58: 7d:cc:6f:ce:d7:4b:5d:05:74:0e:e3:41:a0:21:2c:14:46:24: 6d:1e:bc:c2 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICchgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzYzOFoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoOTdGMkI0QjhGRTI1QTBDMEM3RjRENkZENEZBMUJBN0NBRTYxMkEx MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOY4LFZA7xtWRRq5BcqZ rGhucDf/28aVC6pyRrjvs1/Vug5rutaL14IknDSsV5g6WuaoDWUvdTY0tVrF8vES bJ7qrC8WAl/nBroQ9T/dl1f9emQSmacfCJH1f6n2VhnVoOcEj29siOaiUMYnLubB AIdd8BM5uLtRx7k5GdWf0nOjFVXXrLAOh7YlFx5ip8Rk7KaHZJsu8mVEa6FnSoX9 RIwj2CBYEfAYWgzRmnYoJpstHe1IG1yUAc69O3mqCC51qnoC7bOU3Fxn81hksM1r gKvSNDISwwh9D0C+oSIBkokkWPa2wI2z/jj8Cgu1QbgAfyosT5oAmVhJgAghIj95 SucCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSX8rS4/iWgwMf01v1Pobp8rmEqEjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyNjAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjYwL2xf SzB1UDRsb01ESDlOYjlUNkc2Zks1aEtoSS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQLwMA0GCSqGSIb3 DQEBCwUAA4IBAQBmJJs9lVO6hhPHV6Jw6gtikIjl53hoRU2bmlAjzfnAajGvbO+j b4HZMonpuFnVjW1NynySdKnnzCiwy2xg3ji1pO+cn5GILuVJk8TnD4KvXrqvlxKn HClv1Q7n3hYnpGysgjb5d2OcGR7adcKuyoIxLo2girYQcl4//IBlfMaFagHK69tt uFYiL/ctS1of4Wb4zQuwE7/CcZldRGG4Qq5VGH/E+YcR28qOB0dc16tNUJVWeie1 gQZpFy+mrM+NFHP/9C/FunsW4JCz74sjjh9r2d43fwmEiPB18TenR3IjJsXuWG72 FHc7fFh9zG/O10tdBXQO40GgISwURiRtHrzC -----END CERTIFICATE-----Generated at Mon Sep 21 14:07:55 2026 by rpki-client