$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer File: nVpUDBIv0McM5REXAET_ZYDXYxs.cer (raw, json) Hash identifier: 3GA5L/ET+vGDOBpRR0diUZLWE/OTloDAZHJkeuPI6yM= Subject key identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:42:05 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 2404:c700::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29444 (0x7304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:42:05 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=9D5A540C122FD0C70CE511170044FF6580D7631B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:7b:90:b4:f9:ee:d8:08:d8:90:27:f3:d7: 28:e1:88:62:06:c6:df:3f:dd:f6:61:07:f8:5f:77: b2:ab:60:08:88:aa:17:e1:f7:25:63:ee:ab:35:83: c7:27:5c:58:5b:91:a6:cc:9f:c5:80:10:dc:df:b4: 7e:43:e4:e2:52:fb:14:3f:11:34:39:f5:c4:d1:bc: 62:2f:2a:c9:4b:d8:33:b8:7d:c6:a6:b5:4d:7f:a4: 0b:de:8f:c2:d8:46:04:3a:26:81:a8:8d:1e:11:3d: 22:51:f8:57:15:72:f8:6a:c7:a8:fa:ba:e9:a8:69: ed:12:7c:19:21:f3:bd:9c:34:74:de:e5:31:5d:55: 5b:bb:36:8a:c7:49:b1:da:07:8b:70:89:0e:ca:bc: 9e:2d:8d:ef:f6:8f:b0:47:1c:b1:6e:51:ec:7e:9d: c1:82:51:bd:0c:40:24:b9:bb:fb:2d:21:de:7c:c8: b7:8d:dc:2c:2d:cb:59:2d:7f:02:23:1d:04:59:f5: 65:c6:0a:ac:c6:2c:59:3b:41:cc:bf:e3:c7:d5:27: e7:db:07:8a:8b:b5:ca:dd:47:74:b0:a1:49:99:c0: 8c:0b:f1:4b:19:41:31:82:5c:c2:71:db:61:6f:8e: 06:ef:b8:75:7c:0f:65:73:59:0b:4c:55:6f:e4:f7: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:c700::/32 Signature Algorithm: sha256WithRSAEncryption 2e:90:4d:7b:f2:b0:71:8c:20:22:79:44:b9:84:59:f1:6d:4e: f6:23:8b:fc:15:77:87:b4:16:20:e8:d4:47:66:df:7d:d1:f1: 96:2a:60:67:59:5c:a3:95:79:36:5d:d1:2f:71:21:65:ee:54: ce:d0:53:46:03:09:c2:f2:dc:7d:d7:65:7b:e2:6f:42:d9:c9: 55:cc:70:88:62:66:7a:08:c2:c5:ae:c8:ef:19:57:b3:a2:c9: be:3a:72:c5:28:9f:33:6f:89:6b:ec:6d:a1:6b:44:49:4c:4e: a0:e2:7d:cc:21:f8:53:80:db:7a:c0:df:0b:e9:96:aa:a2:65: df:6a:a8:80:78:95:95:66:37:05:e4:c1:a9:38:1a:27:8d:62: 8e:3b:dd:aa:03:3f:9d:5d:83:80:c6:11:d7:59:00:1a:f8:90: b0:b3:d5:3e:c1:ca:a9:af:63:92:b9:95:6e:cb:29:92:a6:f2: 94:51:c9:f9:86:30:72:33:32:b7:ee:9d:7e:b1:4e:b6:b0:97: 49:a9:cb:2a:84:9c:c0:05:f3:65:c1:a2:3c:08:9b:3c:da:89: 75:fe:b6:90:fa:40:6e:81:96:d6:60:09:ef:1c:d5:1c:c8:85: 70:b6:a4:94:b5:ec:09:82:fd:45:01:1e:25:42:72:0a:e9:99: 32:ca:82:a4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICcwQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxNDIwNVoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoOUQ1QTU0MEMxMjJGRDBDNzBDRTUxMTE3MDA0NEZGNjU4MEQ3NjMx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIJe5C0+e7YCNiQJ/PX KOGIYgbG3z/d9mEH+F93sqtgCIiqF+H3JWPuqzWDxydcWFuRpsyfxYAQ3N+0fkPk 4lL7FD8RNDn1xNG8Yi8qyUvYM7h9xqa1TX+kC96PwthGBDomgaiNHhE9IlH4VxVy +GrHqPq66ahp7RJ8GSHzvZw0dN7lMV1VW7s2isdJsdoHi3CJDsq8ni2N7/aPsEcc sW5R7H6dwYJRvQxAJLm7+y0h3nzIt43cLC3LWS1/AiMdBFn1ZcYKrMYsWTtBzL/j x9Un59sHiou1yt1HdLChSZnAjAvxSxlBMYJcwnHbYW+OBu+4dXwPZXNZC0xVb+T3 QOkCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSdWlQMEi/QxwzlERcARP9lgNdjGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyMzYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjM2L25W cFVEQkl2ME1jTTVSRVhBRVRfWllEWFl4cy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBMcAMA0GCSqGSIb3 DQEBCwUAA4IBAQAukE178rBxjCAieUS5hFnxbU72I4v8FXeHtBYg6NRHZt990fGW KmBnWVyjlXk2XdEvcSFl7lTO0FNGAwnC8tx912V74m9C2clVzHCIYmZ6CMLFrsjv GVezosm+OnLFKJ8zb4lr7G2ha0RJTE6g4n3MIfhTgNt6wN8L6ZaqomXfaqiAeJWV ZjcF5MGpOBonjWKOO92qAz+dXYOAxhHXWQAa+JCws9U+wcqpr2OSuZVuyymSpvKU Ucn5hjByMzK37p1+sU62sJdJqcsqhJzABfNlwaI8CJs82ol1/raQ+kBugZbWYAnv HNUcyIVwtqSUtewJgv1FAR4lQnIK6ZkyyoKk -----END CERTIFICATE-----Generated at Mon Sep 21 19:16:29 2026 by rpki-client