$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/madMGvB7G_aDpMZKQj1lGF9f7K4.cer File: madMGvB7G_aDpMZKQj1lGF9f7K4.cer (raw, json) Hash identifier: 2qBoTVeQidWSuWEiC73hh52uCqWEY/dkzzafLg6nSjs= Subject key identifier: 99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:42:41 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 27.125.204.0/22 IP: 103.1.248.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 13:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29476 (0x7324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:42:41 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=99A74C1AF07B1BF683A4C64A423D65185F5FECAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:9b:8d:60:14:47:09:76:a6:10:42:26:33: b8:a9:61:8c:e0:ca:67:7c:4c:28:45:da:9b:cb:b4: 74:a0:10:8e:34:af:2f:4f:61:25:25:17:6a:cd:c5: 49:8c:2e:b9:71:1a:68:15:f8:e3:6f:80:6e:0c:e4: 07:9f:91:bd:5b:7a:ac:11:c2:20:80:b8:17:fd:7e: af:92:81:7a:0c:65:e4:6d:20:bc:08:97:d3:c7:43: e7:66:52:06:c4:3e:4e:36:49:08:5f:be:ea:46:33: 73:9b:5c:05:67:d8:15:7b:9f:7c:d8:3b:ca:2f:bd: c9:fe:54:46:69:0e:d5:25:2a:71:18:a6:19:aa:d4: d7:03:a9:4a:70:4b:3d:70:5e:9a:7a:f4:bb:9a:fe: db:63:73:a8:6d:3c:c5:e5:ba:f6:5a:74:a6:0c:b8: 58:b2:ee:0e:aa:0a:1f:25:bf:fa:db:4c:78:57:81: 37:29:79:bf:10:bb:19:77:47:e9:22:c2:14:05:6d: 72:7c:0b:d0:8b:44:9f:74:c5:02:04:57:fc:a4:64: 32:b8:ae:aa:f9:f7:5d:db:3b:97:fe:77:0b:b9:47: fe:91:f2:e5:41:fe:f8:f3:cd:90:f8:79:05:c9:fb: 70:21:d9:a6:70:19:09:7e:a3:d6:9f:e1:d0:ec:4e: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A7:4C:1A:F0:7B:1B:F6:83:A4:C6:4A:42:3D:65:18:5F:5F:EC:AE X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/519/madMGvB7G_aDpMZKQj1lGF9f7K4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.125.204.0/22 103.1.248.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:c5:cf:8a:c9:f6:c8:0f:d2:19:b1:1e:25:f4:f8:48:65:91: b6:0d:dd:be:ec:a4:26:9b:b2:56:06:a9:6a:a8:cd:31:ce:c3: 02:26:39:b0:70:ce:02:35:07:6a:38:e5:0e:85:f6:77:cf:41: ce:c7:75:6a:95:f3:09:9f:c0:a2:17:48:df:34:bf:21:7b:ea: 67:18:31:83:ae:a1:ba:c9:eb:d8:38:15:53:ed:6e:c6:b3:e2: 28:2a:37:0c:9e:f8:22:12:fe:cf:2c:69:23:3d:d1:48:3b:35: ff:98:bb:5b:d3:be:b1:35:1c:5d:7c:b4:ed:53:5f:5f:ea:31: d4:d3:f3:f4:56:15:f1:d3:b8:83:f1:ce:88:4c:fd:2a:9e:ef: 6d:a9:40:0e:cf:44:b4:37:b8:6a:50:39:15:0d:f2:2c:f7:04: 61:84:ee:f7:01:a9:27:db:6d:b9:ad:24:b7:c1:d0:28:32:c9: 41:b8:a6:9c:cc:9e:41:40:82:41:45:c7:62:7f:f3:28:94:45: 34:fa:59:43:b5:e9:4e:96:7b:ae:5f:a0:04:47:2c:dc:e0:52: ee:fe:6e:b0:64:60:a3:bd:51:6d:d9:31:13:7b:25:1f:ae:95: 51:8d:da:83:34:7b:74:df:82:6e:ad:d7:0e:1c:84:c9:4c:80: 38:d5:00:11 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICcyQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxNDI0MVoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoOTlBNzRDMUFGMDdCMUJGNjgzQTRDNjRBNDIzRDY1MTg1RjVGRUNB RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKoPm41gFEcJdqYQQiYz uKlhjODKZ3xMKEXam8u0dKAQjjSvL09hJSUXas3FSYwuuXEaaBX442+AbgzkB5+R vVt6rBHCIIC4F/1+r5KBegxl5G0gvAiX08dD52ZSBsQ+TjZJCF++6kYzc5tcBWfY FXuffNg7yi+9yf5URmkO1SUqcRimGarU1wOpSnBLPXBemnr0u5r+22NzqG08xeW6 9lp0pgy4WLLuDqoKHyW/+ttMeFeBNyl5vxC7GXdH6SLCFAVtcnwL0ItEn3TFAgRX /KRkMriuqvn3Xds7l/53C7lH/pHy5UH++PPNkPh5Bcn7cCHZpnAZCX6j1p/h0OxO AMMCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSZp0wa8Hsb9oOkxkpCPWUYX1/srjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81MTkvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzUxOS9tYWRNR3ZC N0dfYURwTVpLUWoxbEdGOWY3SzQubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCG33MAwQCZwH4MA0GCSqGSIb3 DQEBCwUAA4IBAQA8xc+KyfbID9IZsR4l9PhIZZG2Dd2+7KQmm7JWBqlqqM0xzsMC JjmwcM4CNQdqOOUOhfZ3z0HOx3VqlfMJn8CiF0jfNL8he+pnGDGDrqG6yevYOBVT 7W7Gs+IoKjcMnvgiEv7PLGkjPdFIOzX/mLtb076xNRxdfLTtU19f6jHU0/P0VhXx 07iD8c6ITP0qnu9tqUAOz0S0N7hqUDkVDfIs9wRhhO73Aakn2225rSS3wdAoMslB uKaczJ5BQIJBRcdif/MolEU0+llDtelOlnuuX6AERyzc4FLu/m6wZGCjvVFt2TET eyUfrpVRjdqDNHt034JurdcOHITJTIA41QAR -----END CERTIFICATE-----Generated at Mon Sep 21 16:23:16 2026 by rpki-client