$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer File: qd58EzgSN8W4mNWiTyyabLPBlxs.cer (raw, json) Hash identifier: d74u0uQOIg5gIRQPrIFCcZ0x3vLjmT4gj4FK0Cgv8DU= Subject key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 66BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Apr 2026 01:35:33 +0000 Certificate not after: Thu 15 Apr 2027 01:30:02 +0000 Subordinate resources: IP: 49.128.24.0/21 IP: 49.128.96.0/22 IP: 126.52.96.0/22 IP: 203.201.52.0/22 IP: 211.15.112.0/20 IP: 211.19.224.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26303 (0x66bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:35:33 2026 GMT Not After : Apr 15 01:30:02 2027 GMT Subject: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f4:ee:dc:28:65:f0:e1:9f:86:cd:9f:f1:32: 34:37:97:d6:7b:9f:7b:02:ed:d3:42:c6:72:28:fa: 7a:68:c9:85:6c:f4:00:62:17:42:06:76:39:42:0d: 25:0a:d2:d3:a9:72:e0:10:87:59:a5:03:86:18:60: 79:4c:e3:78:89:6c:05:5e:82:f4:69:9f:46:d0:62: 03:23:9c:6d:48:40:02:f9:fe:c6:cd:c0:be:20:45: a5:3a:3a:58:6c:41:f3:e1:54:5a:00:f6:8d:88:35: 78:e3:75:af:33:d9:e0:a2:ad:1c:24:52:f8:99:f4: 31:9f:d2:d5:1a:33:a1:c8:eb:5f:bc:f5:45:1d:47: 95:65:80:5f:b4:48:9f:34:87:97:5c:af:d8:15:17: 39:2b:71:61:79:ea:fe:2c:34:18:29:f0:1d:66:fd: 42:20:67:c4:a4:d7:02:c2:10:6d:4b:3c:9e:e8:ff: bd:5d:27:db:42:f2:83:67:21:70:37:f9:71:8d:2a: 2f:d9:26:80:87:78:21:f3:e3:44:9f:ed:f8:14:a2: 12:83:3d:58:95:2a:a0:6a:0c:d6:ad:62:96:b4:aa: 49:17:1e:49:37:d1:e9:2e:d5:b0:30:a4:8c:da:6f: 86:70:74:d4:ac:c8:b8:4c:29:6f:52:92:bb:a3:18: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.24.0/21 49.128.96.0/22 126.52.96.0/22 203.201.52.0/22 211.15.112.0/20 211.19.224.0/19 Signature Algorithm: sha256WithRSAEncryption 90:d9:59:13:74:fd:df:f9:13:71:05:c5:df:2c:c4:0b:42:a8: bf:fc:73:86:1b:10:16:35:05:30:b2:d4:ca:58:0e:15:1e:f9: dd:d3:d4:38:f9:0a:72:4f:45:93:09:c7:b4:dc:41:2e:eb:78: 35:54:4c:64:dd:d9:a7:1e:4c:26:9d:21:08:25:07:1a:2e:52: 9b:d0:21:24:34:a8:bd:2d:c3:c2:26:8a:ec:42:e2:7a:ee:65: f4:1e:95:15:d0:65:17:1f:4e:2b:bd:44:5f:e8:57:69:f4:01: 0a:b9:20:a6:3b:94:6a:99:2a:44:0f:af:f3:7f:52:f2:b0:de: 85:86:32:37:3a:94:9e:d2:9f:79:bd:19:ad:5e:c7:fd:8f:26: b9:8b:2a:49:7e:29:32:33:0b:fa:af:a8:c4:e1:40:d0:97:9c: 3c:b0:5a:ec:08:47:b0:78:38:0c:bb:22:11:f9:b8:ab:16:d5: 55:25:80:be:92:7a:07:81:02:aa:04:6e:75:e9:19:4a:03:6d: b7:72:91:19:8e:16:0d:53:3e:66:c3:b9:4e:df:b1:11:05:ed: 3f:61:9c:80:23:ea:98:b8:6b:b8:d7:85:8b:6e:6e:10:07:84: 96:a3:e6:51:17:e7:90:f2:1c:bf:ce:25:6b:9a:49:84:98:87: a7:94:b7:b4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICZr8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDQxNTAxMzUzM1oXDTI3MDQxNTAxMzAwMlowMzEx MC8GA1UEAxMoQTlERTdDMTMzODEyMzdDNUI4OThENUEyNEYyQzlBNkNCM0MxOTcx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO307twoZfDhn4bNn/Ey NDeX1nufewLt00LGcij6emjJhWz0AGIXQgZ2OUINJQrS06ly4BCHWaUDhhhgeUzj eIlsBV6C9GmfRtBiAyOcbUhAAvn+xs3AviBFpTo6WGxB8+FUWgD2jYg1eON1rzPZ 4KKtHCRS+Jn0MZ/S1RozocjrX7z1RR1HlWWAX7RInzSHl1yv2BUXOStxYXnq/iw0 GCnwHWb9QiBnxKTXAsIQbUs8nuj/vV0n20Lyg2chcDf5cY0qL9kmgId4IfPjRJ/t +BSiEoM9WJUqoGoM1q1ilrSqSRceSTfR6S7VsDCkjNpvhnB01KzIuEwpb1KSu6MY Y1MCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSp3nwTOBI3xbiY1aJPLJpss8GXGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NTcvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg1Ny9xZDU4RXpn U044VzRtTldpVHl5YWJMUEJseHMubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDMYAYAwQCMYBgAwQCfjRgAwQC y8k0AwQE0w9wAwQF0xPgMA0GCSqGSIb3DQEBCwUAA4IBAQCQ2VkTdP3f+RNxBcXf LMQLQqi//HOGGxAWNQUwstTKWA4VHvnd09Q4+QpyT0WTCce03EEu63g1VExk3dmn HkwmnSEIJQcaLlKb0CEkNKi9LcPCJorsQuJ67mX0HpUV0GUXH04rvURf6Fdp9AEK uSCmO5RqmSpED6/zf1LysN6FhjI3OpSe0p95vRmtXsf9jya5iypJfikyMwv6r6jE 4UDQl5w8sFrsCEeweDgMuyIR+birFtVVJYC+knoHgQKqBG516RlKA223cpEZjhYN Uz5mw7lO37ERBe0/YZyAI+qYuGu414WLbm4QB4SWo+ZRF+eQ8hy/ziVrmkmEmIen lLe0 -----END CERTIFICATE-----Generated at Fri Apr 17 05:30:57 2026 by rpki-client