$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer File: nbB2TG38Hj32vVgOpplKHnCY9So.cer (raw, json) Hash identifier: avbLaPT/l669tEFp3uJtHar2Q8bWwsCKPU+FQ7O94LI= Subject key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:31:55 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 115.166.160.0 -- 115.166.207.255 IP: 122.128.112.0/21 IP: 203.160.16.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 16:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28979 (0x7133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:31:55 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:bc:aa:b9:e2:b9:f4:47:1d:96:e1:53:20: fe:d8:98:18:37:1a:5e:3a:3c:7c:67:4e:3a:db:e1: de:78:f7:7d:8e:30:90:4c:0b:48:b2:16:b2:a7:5e: 04:52:cd:0f:78:e6:f4:bd:f7:b4:a1:8a:1c:74:dc: c9:3c:3a:de:b7:29:95:05:6f:53:4e:44:eb:f9:c7: 69:ab:d3:60:c3:5c:74:d5:b8:16:5e:c8:45:2d:9e: 96:42:73:93:62:25:cd:11:6a:6e:25:86:96:0b:a3: ab:e6:20:34:91:a9:b2:b1:87:20:d4:44:d2:9b:7d: e2:5c:aa:21:50:6a:6a:7c:ac:4f:c2:1a:b7:b2:85: 2c:af:96:00:50:9e:b6:5f:4c:f6:8b:b7:8b:9b:9e: 18:08:25:bf:5d:76:c0:5c:47:67:b3:ff:6a:ac:54: 68:96:73:c1:7b:ad:ed:61:45:2f:91:e9:34:a6:8e: 13:43:55:c3:73:17:75:70:40:4c:45:8b:9b:1d:d6: 76:ed:b3:34:2d:61:cd:9b:6c:fb:b7:ff:1b:23:de: 79:ce:f7:7d:99:b0:45:dd:6f:89:06:72:c8:12:61: b3:0a:aa:57:09:62:47:15:fd:b8:3a:27:30:73:d6: 3b:0b:a2:92:5a:be:c2:63:9d:c8:1d:d0:ba:c9:a6: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.166.160.0-115.166.207.255 122.128.112.0/21 203.160.16.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:44:be:88:4e:1b:8a:c4:d2:6d:53:c2:ff:58:dd:17:94:24: 6f:11:18:ce:88:43:ff:ce:f9:47:71:d9:c5:a5:07:75:1d:27: 6f:8c:e7:b9:99:1c:93:ac:b4:a1:b5:0b:c5:a5:aa:1f:2a:4b: 7f:26:25:74:6f:65:3b:df:92:07:3b:52:7d:2e:de:d1:61:8f: f0:23:a8:b3:42:7e:42:91:95:8e:ba:46:c7:9a:98:1c:ad:af: 49:03:2b:37:ff:68:90:3d:03:26:e9:d9:66:ef:16:33:60:8e: 0f:a4:2d:ee:63:5d:2a:1b:50:7a:76:30:4a:f9:bd:12:d8:5b: 38:a5:c4:90:31:c2:68:ea:87:24:41:b8:5f:64:84:3b:0b:a7: 44:61:c2:44:89:b4:2f:a4:d5:66:79:da:17:13:09:ee:c0:ed: 6c:0f:de:91:a2:70:93:30:be:0f:cd:17:5d:72:8e:3b:9b:4d: c4:d4:7a:ab:54:89:be:9a:9f:5e:a7:a5:47:70:82:8c:03:59: 89:3a:db:dc:aa:30:2f:35:3c:dd:4f:b4:f2:a4:12:1c:a4:5a: d2:b4:17:1d:b3:b2:50:da:a2:dc:d7:d6:28:be:27:58:50:67: fe:44:48:0e:36:18:4f:67:06:f0:4a:af:34:47:70:13:0b:af: bb:e6:45:e8 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICcTMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzE1NVoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoOURCMDc2NEM2REZDMUUzREY2QkQ1ODBFQTY5OTRBMUU3MDk4RjUy QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5hvKq54rn0Rx2W4VMg /tiYGDcaXjo8fGdOOtvh3nj3fY4wkEwLSLIWsqdeBFLND3jm9L33tKGKHHTcyTw6 3rcplQVvU05E6/nHaavTYMNcdNW4Fl7IRS2elkJzk2IlzRFqbiWGlgujq+YgNJGp srGHINRE0pt94lyqIVBqanysT8Iat7KFLK+WAFCetl9M9ou3i5ueGAglv112wFxH Z7P/aqxUaJZzwXut7WFFL5HpNKaOE0NVw3MXdXBATEWLmx3Wdu2zNC1hzZts+7f/ GyPeec73fZmwRd1viQZyyBJhswqqVwliRxX9uDonMHPWOwuiklq+wmOdyB3Qusmm M+8CAwEAAaOCAp8wggKbMB0GA1UdDgQWBBSdsHZMbfwePfa9WA6mmUoecJj1KjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAwNjMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMDYzL25i QjJURzM4SGozMnZWZ09wcGxLSG5DWTlTby5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBowDAMEBXOmoAMEBHOmwAME A3qAcAMEBMugEDANBgkqhkiG9w0BAQsFAAOCAQEAHES+iE4bisTSbVPC/1jdF5Qk bxEYzohD/875R3HZxaUHdR0nb4znuZkck6y0obULxaWqHypLfyYldG9lO9+SBztS fS7e0WGP8COos0J+QpGVjrpGx5qYHK2vSQMrN/9okD0DJunZZu8WM2COD6Qt7mNd KhtQenYwSvm9EthbOKXEkDHCaOqHJEG4X2SEOwunRGHCRIm0L6TVZnnaFxMJ7sDt bA/ekaJwkzC+D80XXXKOO5tNxNR6q1SJvpqfXqelR3CCjANZiTrb3KowLzU83U+0 8qQSHKRa0rQXHbOyUNqi3NfWKL4nWFBn/kRIDjYYT2cG8EqvNEdwEwuvu+ZF6A== -----END CERTIFICATE-----Generated at Mon Sep 21 20:58:19 2026 by rpki-client