$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer File: m06gpMcQmfzFA0dT6Pi_GrZhAdc.cer (raw, json) Hash identifier: MDhF527ZzHb85w3Wesu0g8KS9SJUeieyPv0K+Wfu/2I= Subject key identifier: 9B:4E:A0:A4:C7:10:99:FC:C5:03:47:53:E8:F8:BF:1A:B6:61:01:D7 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5BD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:44:49 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 133.194.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23510 (0x5bd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:44:49 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=9B4EA0A4C71099FCC5034753E8F8BF1AB66101D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:51:41:7a:67:43:45:37:1c:4b:27:9e:95: d3:fd:e0:ff:18:26:d6:65:0b:b4:a6:cf:09:3d:08: 6d:ac:10:d4:9c:ac:c5:92:fe:da:0c:ec:f5:e8:ce: 51:71:7b:ba:c9:c4:83:7c:45:4e:5a:96:86:df:5d: 78:2a:e5:b6:85:05:6a:a3:d2:71:12:a3:fd:c6:8d: 16:67:a4:3e:8e:23:3d:df:5a:db:1b:a9:c3:2f:21: a4:11:b2:a0:07:cd:58:f1:2d:fd:4d:eb:cc:7c:48: 6a:2a:1a:76:ba:46:72:98:4a:2a:50:42:5a:48:6f: 21:2a:f7:ac:0a:bd:f7:fe:88:c2:e3:a0:ff:ac:da: 6d:5e:9a:52:c0:b8:d4:9f:4c:4b:97:92:cb:cb:87: 3a:f3:db:70:5e:d0:3f:85:4d:1c:c3:5b:e7:e3:c6: dd:68:6e:9c:78:fc:51:4c:1f:aa:04:a7:59:32:53: 5e:ce:3e:53:8f:c0:d7:85:09:8b:97:d9:df:d6:06: e1:20:7f:88:9a:dd:8f:ea:e9:7a:ca:d9:31:c4:c9: 01:0a:7f:c8:99:12:4d:a8:a5:29:1b:5b:39:1f:23: 5b:cc:07:43:45:89:79:d2:06:56:c7:7b:04:fa:a6: ec:85:2e:64:2c:bd:66:1d:e6:57:56:be:7e:e1:f7: c3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4E:A0:A4:C7:10:99:FC:C5:03:47:53:E8:F8:BF:1A:B6:61:01:D7 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2344/m06gpMcQmfzFA0dT6Pi_GrZhAdc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.194.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:2b:56:8c:9a:75:4c:27:d7:51:80:6c:b2:35:31:29:0f:b4: 60:81:0c:74:5c:9e:72:21:b8:31:6d:3b:da:0b:96:d7:99:35: 1d:33:da:b3:e3:a0:5c:74:2f:bc:71:4a:c5:93:f4:92:12:99: 0a:6b:dc:69:c2:0c:21:de:cc:6b:a6:eb:41:c4:57:e9:e8:ef: bd:7a:f1:40:d9:83:d1:fa:b9:69:9a:c2:bc:bd:45:2f:44:36: 4d:f0:3f:fe:ea:0f:88:cc:ea:02:9b:6b:6f:1b:f9:ea:33:9a: df:31:c1:79:6e:b6:e6:fb:84:bf:e7:ae:e4:60:18:2d:0e:37: ec:49:56:df:43:49:bd:b5:57:bc:40:fa:d8:b9:01:98:a6:e7: 3d:8c:70:14:0b:5b:85:99:37:a1:6e:b1:8d:b7:8b:bd:4b:59: 6a:b4:fe:b9:82:e9:44:5e:25:5a:3b:56:50:43:21:1e:95:de: 0f:45:d3:5c:d3:a3:1e:5e:9b:9f:5f:38:e4:31:90:4b:0f:7c: 7e:16:29:66:0a:24:37:8d:db:5a:f0:d2:74:52:e9:4e:b7:db: 2d:cf:0d:bc:3a:42:69:8a:fa:6e:6c:35:89:d5:08:3b:09:ef: 57:60:8f:49:5c:f4:c6:6e:a6:7e:44:63:cd:6f:69:ad:06:dd: c8:00:5e:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICW9YwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxNDQ0OVoXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoOUI0RUEwQTRDNzEwOTlGQ0M1MDM0NzUzRThGOEJGMUFCNjYxMDFE NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALr0UUF6Z0NFNxxLJ56V 0/3g/xgm1mULtKbPCT0IbawQ1JysxZL+2gzs9ejOUXF7usnEg3xFTlqWht9deCrl toUFaqPScRKj/caNFmekPo4jPd9a2xupwy8hpBGyoAfNWPEt/U3rzHxIaioadrpG cphKKlBCWkhvISr3rAq99/6IwuOg/6zabV6aUsC41J9MS5eSy8uHOvPbcF7QP4VN HMNb5+PG3WhunHj8UUwfqgSnWTJTXs4+U4/A14UJi5fZ39YG4SB/iJrdj+rpesrZ McTJAQp/yJkSTailKRtbOR8jW8wHQ0WJedIGVsd7BPqm7IUuZCy9Zh3mV1a+fuH3 w/kCAwEAAaOCAogwggKEMB0GA1UdDgQWBBSbTqCkxxCZ/MUDR1Po+L8atmEB1zAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjM0NC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjM0NC9tMDZn cE1jUW1mekZBMGRUNlBpX0dyWmhBZGMubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhcIwDQYJKoZIhvcNAQEL BQADggEBABwrVoyadUwn11GAbLI1MSkPtGCBDHRcnnIhuDFtO9oLlteZNR0z2rPj oFx0L7xxSsWT9JISmQpr3GnCDCHezGum60HEV+no77168UDZg9H6uWmawry9RS9E Nk3wP/7qD4jM6gKba28b+eozmt8xwXlutub7hL/nruRgGC0ON+xJVt9DSb21V7xA +ti5AZim5z2McBQLW4WZN6FusY23i71LWWq0/rmC6UReJVo7VlBDIR6V3g9F01zT ox5em59fOOQxkEsPfH4WKWYKJDeN21rw0nRS6U632y3PDbw6QmmK+m5sNYnVCDsJ 71dgj0lc9MZupn5EY81vaa0G3cgAXt8= -----END CERTIFICATE-----Generated at Wed Nov 5 04:42:58 2025 by rpki-client