$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer File: qd58EzgSN8W4mNWiTyyabLPBlxs.cer (raw, json) Hash identifier: Ka0dMuxvZttsAOV7IwWt1mbbwJgENC3JvznY93cmPNY= Subject key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 75D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:32:43 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 49.128.24.0/21 IP: 49.128.96.0/22 IP: 126.52.96.0/22 IP: 203.201.52.0/22 IP: 211.15.112.0/20 IP: 211.19.224.0/19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 13:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30169 (0x75d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:32:43 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f4:ee:dc:28:65:f0:e1:9f:86:cd:9f:f1:32: 34:37:97:d6:7b:9f:7b:02:ed:d3:42:c6:72:28:fa: 7a:68:c9:85:6c:f4:00:62:17:42:06:76:39:42:0d: 25:0a:d2:d3:a9:72:e0:10:87:59:a5:03:86:18:60: 79:4c:e3:78:89:6c:05:5e:82:f4:69:9f:46:d0:62: 03:23:9c:6d:48:40:02:f9:fe:c6:cd:c0:be:20:45: a5:3a:3a:58:6c:41:f3:e1:54:5a:00:f6:8d:88:35: 78:e3:75:af:33:d9:e0:a2:ad:1c:24:52:f8:99:f4: 31:9f:d2:d5:1a:33:a1:c8:eb:5f:bc:f5:45:1d:47: 95:65:80:5f:b4:48:9f:34:87:97:5c:af:d8:15:17: 39:2b:71:61:79:ea:fe:2c:34:18:29:f0:1d:66:fd: 42:20:67:c4:a4:d7:02:c2:10:6d:4b:3c:9e:e8:ff: bd:5d:27:db:42:f2:83:67:21:70:37:f9:71:8d:2a: 2f:d9:26:80:87:78:21:f3:e3:44:9f:ed:f8:14:a2: 12:83:3d:58:95:2a:a0:6a:0c:d6:ad:62:96:b4:aa: 49:17:1e:49:37:d1:e9:2e:d5:b0:30:a4:8c:da:6f: 86:70:74:d4:ac:c8:b8:4c:29:6f:52:92:bb:a3:18: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.24.0/21 49.128.96.0/22 126.52.96.0/22 203.201.52.0/22 211.15.112.0/20 211.19.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:94:b0:53:c7:e3:8e:9f:f1:8c:21:71:bc:d3:3a:7e:f2:e0: 57:ae:b7:2e:9d:78:f7:6b:28:06:49:0f:8e:15:5a:0f:0a:1f: 87:88:09:30:7d:09:9b:c1:06:01:75:98:da:8f:30:ab:79:c0: 3d:37:7b:62:f6:c9:4c:b2:23:48:4d:b1:ac:fd:56:64:65:a8: bf:cc:86:e4:14:e5:05:14:f0:2b:a0:d5:ff:6e:a5:df:10:8f: 8c:76:70:a9:e6:c7:ab:02:c3:65:15:4d:d3:09:cc:29:e6:ed: ae:c3:50:98:50:83:4d:fb:13:a4:c6:c7:6d:57:5f:30:87:8e: 61:e0:70:d4:c1:54:e1:1d:b6:2d:cb:fe:ab:dc:c7:4a:74:16: ff:85:ad:08:1a:91:8d:bf:28:d6:19:87:61:df:56:c5:b0:b9: ab:5e:c5:d3:7d:ba:94:c4:a2:d2:3c:d3:bc:1b:12:5c:d5:20: 54:0a:64:9d:11:01:9a:50:af:6e:ee:c3:cf:d0:f4:c4:96:3f: 8c:27:aa:16:50:a2:05:68:e4:3b:b8:b5:83:44:dc:9c:ce:f7: cf:83:86:3a:02:ab:28:3a:ce:1f:6d:b8:af:2e:10:d3:dd:d3: 02:d0:24:af:b4:e4:cd:e7:35:95:b1:16:94:db:7a:f2:ae:f0: 34:32:d8:2a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICddkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxMzI0M1oXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoQTlERTdDMTMzODEyMzdDNUI4OThENUEyNEYyQzlBNkNCM0MxOTcx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO307twoZfDhn4bNn/Ey NDeX1nufewLt00LGcij6emjJhWz0AGIXQgZ2OUINJQrS06ly4BCHWaUDhhhgeUzj eIlsBV6C9GmfRtBiAyOcbUhAAvn+xs3AviBFpTo6WGxB8+FUWgD2jYg1eON1rzPZ 4KKtHCRS+Jn0MZ/S1RozocjrX7z1RR1HlWWAX7RInzSHl1yv2BUXOStxYXnq/iw0 GCnwHWb9QiBnxKTXAsIQbUs8nuj/vV0n20Lyg2chcDf5cY0qL9kmgId4IfPjRJ/t +BSiEoM9WJUqoGoM1q1ilrSqSRceSTfR6S7VsDCkjNpvhnB01KzIuEwpb1KSu6MY Y1MCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSp3nwTOBI3xbiY1aJPLJpss8GXGzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NTcvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg1Ny9xZDU4RXpn U044VzRtTldpVHl5YWJMUEJseHMubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDMYAYAwQCMYBgAwQCfjRgAwQC y8k0AwQE0w9wAwQF0xPgMA0GCSqGSIb3DQEBCwUAA4IBAQBKlLBTx+OOn/GMIXG8 0zp+8uBXrrcunXj3aygGSQ+OFVoPCh+HiAkwfQmbwQYBdZjajzCrecA9N3ti9slM siNITbGs/VZkZai/zIbkFOUFFPAroNX/bqXfEI+MdnCp5serAsNlFU3TCcwp5u2u w1CYUINN+xOkxsdtV18wh45h4HDUwVThHbYty/6r3MdKdBb/ha0IGpGNvyjWGYdh 31bFsLmrXsXTfbqUxKLSPNO8GxJc1SBUCmSdEQGaUK9u7sPP0PTElj+MJ6oWUKIF aOQ7uLWDRNyczvfPg4Y6AqsoOs4fbbivLhDT3dMC0CSvtOTN5zWVsRaU23ryrvA0 Mtgq -----END CERTIFICATE-----Generated at Sun Nov 15 15:39:33 2026 by rpki-client