$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer File: r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer (raw, json) Hash identifier: UEnaE/c2wnvETQutMYH+2cpxPgln7KxaZtk4nBU/9Fs= Subject key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 67E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Apr 2026 01:44:21 +0000 Certificate not after: Thu 15 Apr 2027 01:30:02 +0000 Subordinate resources: IP: 103.144.122.0/23 IP: 126.52.64.0/19 IP: 133.32.192.0/21 IP: 133.226.176.0/21 IP: 202.233.72.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26593 (0x67e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Apr 15 01:44:21 2026 GMT Not After : Apr 15 01:30:02 2027 GMT Subject: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:28:97:f3:a5:31:74:98:62:e4:0d:0a:0f: 27:80:fc:f7:84:ec:3a:61:41:d3:55:cc:3a:1a:b2: 2e:6d:3f:c7:39:f1:57:83:62:fc:e6:ab:4c:98:c9: 55:0d:f1:5a:1b:22:1d:04:27:5e:30:aa:85:68:54: d7:b3:14:3e:75:ec:41:f9:f0:d7:b0:ec:fd:84:97: 5d:82:4c:83:7e:ce:80:da:d1:58:6f:e0:86:73:73: a1:44:ba:63:dd:e3:04:d9:85:2b:8d:42:96:d7:00: d0:6f:e4:c3:8b:31:f9:f5:ba:5f:ea:88:85:52:c5: cf:3d:82:1e:f8:a8:06:36:90:d7:84:86:89:d5:a2: bd:36:10:c9:94:74:bf:c0:77:68:e9:51:b4:52:ab: c0:cb:bb:24:76:f1:f3:cd:2d:0b:ad:46:71:8a:2d: a7:cd:19:58:f4:00:a3:ea:89:f7:46:cc:6f:b8:47: 64:56:1d:9c:34:74:c0:d3:15:8c:6e:43:4b:49:92: 3c:93:7f:35:5c:82:cc:56:6d:9c:8c:6b:71:b6:83: 5a:fb:e7:86:c4:85:a2:0c:2b:3a:c5:da:0d:5f:b3: 72:6e:cf:53:86:6b:6d:dd:c5:2d:15:11:68:52:be: c4:44:32:28:09:1c:db:de:f3:8f:3e:7f:0d:76:ee: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.122.0/23 126.52.64.0/19 133.32.192.0/21 133.226.176.0/21 202.233.72.0/22 Signature Algorithm: sha256WithRSAEncryption 85:01:95:37:5e:d3:23:0b:06:16:51:34:0a:a1:d1:93:a3:af: 7b:c1:c5:16:9d:61:28:cf:96:5b:28:2d:4f:98:2d:d6:98:4e: da:52:a4:77:39:49:18:66:b9:30:4c:07:b4:49:01:bb:69:c8: 96:f7:0d:e0:59:f3:4c:5a:50:b5:85:1c:4f:7f:e2:72:05:6b: 29:34:b5:bb:cc:4e:2a:6a:1c:b3:15:15:66:c9:ff:f0:76:e7: 11:b2:de:21:bf:64:ff:95:80:f7:ba:f3:28:10:17:dd:21:01: f6:9f:36:e4:df:e3:71:70:69:78:8b:31:34:b6:0b:35:e9:53: a1:83:71:9f:e9:e6:f6:e2:e1:9a:c5:3d:19:d8:f5:23:01:59: f6:8b:04:c1:d2:7b:e2:a7:63:0b:f4:77:5c:5e:d2:2e:cc:8e: 27:83:61:ce:75:40:33:2f:96:4c:36:1b:28:26:b4:18:0c:9b: 4d:ac:2d:24:1e:55:74:40:8c:d1:04:98:07:24:21:ff:36:cc: 59:3a:90:15:8e:8d:ec:37:5d:0f:45:31:26:82:60:c4:3e:36: 11:ce:a9:26:6d:34:4f:2e:d0:d8:3d:f6:c8:ef:2a:07:33:35: dc:b1:a5:72:2a:7e:14:c7:88:c5:7b:b7:8a:3e:73:60:95:2f: 33:4b:ec:40 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICZ+EwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDQxNTAxNDQyMVoXDTI3MDQxNTAxMzAwMlowMzEx MC8GA1UEAxMoQUZEODI0NzdBMDkxQjE3Q0RBNjFDNTU2M0JDMjkyMENEQ0Q3QUFB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANjgKJfzpTF0mGLkDQoP J4D894TsOmFB01XMOhqyLm0/xznxV4Ni/OarTJjJVQ3xWhsiHQQnXjCqhWhU17MU PnXsQfnw17Ds/YSXXYJMg37OgNrRWG/ghnNzoUS6Y93jBNmFK41CltcA0G/kw4sx +fW6X+qIhVLFzz2CHvioBjaQ14SGidWivTYQyZR0v8B3aOlRtFKrwMu7JHbx880t C61GcYotp80ZWPQAo+qJ90bMb7hHZFYdnDR0wNMVjG5DS0mSPJN/NVyCzFZtnIxr cbaDWvvnhsSFogwrOsXaDV+zcm7PU4Zrbd3FLRURaFK+xEQyKAkc297zjz5/DXbu Az8CAwEAAaOCAqMwggKfMB0GA1UdDgQWBBSv2CR3oJGxfNphxVY7wpIM3NeqpTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTA2L3I5 Z2tkNkNSc1h6YVljVldPOEtTRE56WHFxVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAFnkHoDBAV+NEADBAOF IMADBAOF4rADBALK6UgwDQYJKoZIhvcNAQELBQADggEBAIUBlTde0yMLBhZRNAqh 0ZOjr3vBxRadYSjPllsoLU+YLdaYTtpSpHc5SRhmuTBMB7RJAbtpyJb3DeBZ80xa ULWFHE9/4nIFayk0tbvMTipqHLMVFWbJ//B25xGy3iG/ZP+VgPe68ygQF90hAfaf NuTf43FwaXiLMTS2CzXpU6GDcZ/p5vbi4ZrFPRnY9SMBWfaLBMHSe+KnYwv0d1xe 0i7MjieDYc51QDMvlkw2GygmtBgMm02sLSQeVXRAjNEEmAckIf82zFk6kBWOjew3 XQ9FMSaCYMQ+NhHOqSZtNE8u0Ng99sjvKgczNdyxpXIqfhTHiMV7t4o+c2CVLzNL 7EA= -----END CERTIFICATE-----Generated at Fri Apr 17 05:07:43 2026 by rpki-client