$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer File: q2yEZLBStyD10sACDmQmtsftGGs.cer (raw, json) Hash identifier: W6F2fidLXHlz4iCqKc/E6fL5CLKPn6Vx2mQyGGh5j/E= Subject key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 718B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:33:43 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 2402:c840::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29067 (0x718b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:33:43 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:3f:74:49:c7:35:ae:fe:42:62:bf:12:cf: 3c:88:59:43:85:96:f3:e2:a7:7c:b4:7c:d4:9b:a8: ff:3b:7b:eb:e5:dc:69:3b:ba:b5:d7:6c:df:48:bb: 27:52:ac:b6:b4:66:a6:10:56:c7:26:0f:b4:f2:24: 1c:ce:98:b4:3f:b3:44:01:fb:d2:88:16:73:2f:86: 73:53:b6:e9:02:ae:54:b7:02:44:a0:1f:f0:c2:47: 17:51:31:41:28:87:02:f7:db:0c:be:1c:57:77:fe: 72:8a:c1:64:45:35:48:41:ed:af:4f:bd:19:c2:30: b2:3a:a1:76:fd:ca:0e:2b:37:5a:8c:d1:74:26:5b: 66:4b:bf:1a:2e:ad:04:d6:f6:35:30:fd:9f:81:44: 4d:2b:00:65:33:88:7b:f6:62:9c:ac:0f:cd:7d:5d: 88:5d:49:ac:90:f2:a8:71:da:35:5c:9b:5f:62:ef: 1f:f2:1b:48:74:e1:53:58:56:a4:fe:e4:ac:e1:f2: 88:c8:2d:ab:1d:42:9c:c0:be:89:4e:11:5a:26:f4: 86:d4:45:28:f7:01:1c:e5:0e:a0:db:77:de:bc:6f: 8a:2f:77:4d:15:88:6f:a2:34:19:e8:93:6c:1d:09: ab:47:33:2e:e4:29:3c:75:b1:53:e4:80:92:b1:94: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:c840::/32 Signature Algorithm: sha256WithRSAEncryption 51:3a:db:ab:df:df:b2:1a:a1:3f:8b:f5:c8:14:01:da:13:85: 42:99:1f:db:90:b1:46:3b:55:db:31:7c:a0:cd:eb:1e:57:61: 42:b7:ae:f7:73:45:66:7e:0e:2a:bf:9e:13:92:c2:fb:9c:56: 9f:88:1a:7f:db:b2:c1:60:a7:cc:e4:9e:a7:5c:c6:ef:b8:68: a6:26:a6:36:25:cd:25:75:7a:d5:f3:69:bf:83:74:50:5b:65: ad:fc:e9:9b:7a:18:c1:76:ce:e8:61:05:01:22:f9:25:15:a6: f8:b5:ba:d8:e9:1b:41:f3:8f:90:d0:83:da:b8:47:74:3e:27: 02:01:0e:b3:42:a3:11:f7:df:94:4d:8a:c2:d9:e1:19:ea:af: c3:09:cf:a2:73:26:74:06:96:17:55:c6:18:ed:ff:6c:58:d0: 67:5f:ff:a9:83:96:6b:1d:e8:87:b7:53:89:a6:e9:75:85:8c: 08:75:f2:00:93:ee:13:b7:b2:1e:d4:97:90:81:50:98:f9:3c: 2e:8f:f4:35:02:ac:d1:95:96:7f:56:e4:6d:0f:24:ee:35:46: 02:31:b6:ec:0a:ac:e6:0a:6d:f3:8c:a8:22:50:80:7c:ac:5d: d4:5e:7e:af:42:22:85:98:82:47:b5:c4:80:64:3b:fb:4a:97: 59:99:68:f1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICcYswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzM0M1oXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoQUI2Qzg0NjRCMDUyQjcyMEY1RDJDMDAyMEU2NDI2QjZDN0VEMTg2 QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANC5P3RJxzWu/kJivxLP PIhZQ4WW8+KnfLR81Juo/zt76+XcaTu6tdds30i7J1KstrRmphBWxyYPtPIkHM6Y tD+zRAH70ogWcy+Gc1O26QKuVLcCRKAf8MJHF1ExQSiHAvfbDL4cV3f+corBZEU1 SEHtr0+9GcIwsjqhdv3KDis3WozRdCZbZku/Gi6tBNb2NTD9n4FETSsAZTOIe/Zi nKwPzX1diF1JrJDyqHHaNVybX2LvH/IbSHThU1hWpP7krOHyiMgtqx1CnMC+iU4R Wib0htRFKPcBHOUOoNt33rxvii93TRWIb6I0GeiTbB0Jq0czLuQpPHWxU+SAkrGU mg8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBSrbIRksFK3IPXSwAIOZCa2x+0YazAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMjMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzIzL3Ey eUVaTEJTdHlEMTBzQUNEbVFtdHNmdEdHcy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAshAMA0GCSqGSIb3 DQEBCwUAA4IBAQBROtur39+yGqE/i/XIFAHaE4VCmR/bkLFGO1XbMXygzeseV2FC t673c0Vmfg4qv54TksL7nFafiBp/27LBYKfM5J6nXMbvuGimJqY2Jc0ldXrV82m/ g3RQW2Wt/OmbehjBds7oYQUBIvklFab4tbrY6RtB84+Q0IPauEd0PicCAQ6zQqMR 99+UTYrC2eEZ6q/DCc+icyZ0BpYXVcYY7f9sWNBnX/+pg5ZrHeiHt1OJpul1hYwI dfIAk+4Tt7Ie1JeQgVCY+Twuj/Q1AqzRlZZ/VuRtDyTuNUYCMbbsCqzmCm3zjKgi UIB8rF3UXn6vQiKFmIJHtcSAZDv7SpdZmWjx -----END CERTIFICATE-----Generated at Mon Sep 21 10:45:16 2026 by rpki-client