$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer File: y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer (raw, json) Hash identifier: iDSO/jMjlU02H3XYdgNOZ7cYRMsw4nhDw0NWp+Ubk5s= Subject key identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 71BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:34:39 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 2402:2f60::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 17:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29115 (0x71bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Sep 15 01:34:39 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:01:43:19:a7:c6:9e:f7:a2:cd:57:41:1e: 6c:c2:a5:cc:08:82:c6:36:fd:60:e8:fe:d0:53:43: 1c:ea:ea:64:a4:36:69:27:5d:78:b2:ce:fc:94:24: c9:64:70:fc:00:92:5e:36:78:fe:5b:12:70:6d:ff: ad:df:ac:df:cc:0b:7d:58:0a:6f:3b:e8:01:52:1d: 0b:42:8c:4a:42:84:28:de:b6:28:8a:9d:84:06:88: 29:ee:9e:b6:e5:b4:62:e4:f2:53:35:30:8e:2a:84: aa:e5:6c:a3:0b:63:82:fa:67:c2:9a:3d:31:e0:61: f7:b8:63:d6:5c:c1:98:e1:33:ff:5a:23:13:c7:d1: 53:f6:fa:ff:df:68:76:72:cc:8f:9b:80:3b:a7:f5: 84:24:fc:76:d4:c4:4e:1c:fb:a7:5c:64:fe:6e:c9: 05:70:a6:33:9f:a9:61:ac:72:02:19:f8:4d:3c:0f: d0:5d:61:f4:43:c7:b4:c2:32:c9:55:69:0c:02:8e: f7:14:10:ad:9f:3f:c5:c7:6f:d6:46:08:76:63:a7: c4:72:8e:6a:c4:dc:c8:8b:5b:66:ae:21:ef:26:07: 3b:d5:e1:20:78:8d:5f:a9:25:3b:50:f1:89:4c:d4: c1:c7:a8:71:98:2e:ad:5c:a3:ad:93:6a:cd:96:90: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2f60::/32 Signature Algorithm: sha256WithRSAEncryption 3b:b8:c3:1a:f5:81:40:1b:b2:35:c0:db:a7:54:0a:57:2b:d5: bb:f9:c4:95:ab:f0:36:dd:cd:51:f5:01:7b:9d:4b:c5:2d:3c: a9:99:39:42:32:74:8a:44:07:ad:1f:31:7a:c1:19:14:7d:5a: 3d:0c:aa:37:fe:2d:45:df:34:a9:e6:be:ca:75:5f:54:a7:17: 56:c9:15:b5:a1:b9:0d:55:a7:2d:ec:dd:44:0c:13:f6:8b:d4: 4a:38:ef:19:87:74:d0:e2:68:6d:c6:63:e5:13:c5:b9:1e:4b: 9e:ce:09:2a:c9:48:25:2f:ae:cd:e0:a8:f9:0a:21:89:7e:6b: 23:ee:d0:2b:e1:22:bd:81:de:a3:dd:8a:08:cc:be:b5:c9:80: fc:b5:f9:f0:a1:0e:fa:11:8f:ff:7c:6a:17:9a:0e:a7:7c:64: c9:ec:47:01:ea:e4:72:33:d7:26:74:62:1b:a6:2d:b1:c5:55: c0:2a:f3:b4:9b:18:a9:3d:cf:15:8b:e2:46:63:3a:8d:32:07: e8:7d:53:f0:c2:ec:ff:f5:88:f6:6a:22:1f:69:8c:21:cb:bc: de:a5:99:09:c2:4e:6c:f1:e7:55:ab:e0:52:80:b4:28:f7:88: cc:f9:cc:84:d9:02:1f:e2:99:e1:fd:af:d5:45:8e:6e:a1:47: b7:43:1d:e2 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICcbswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDkxNTAxMzQzOVoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoQ0JBMzJGNDRCQzMyRjFFMUUxOTJGRTJDNTQ3M0MwRDcyOUY4OEM0 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ7eAUMZp8ae96LNV0Ee bMKlzAiCxjb9YOj+0FNDHOrqZKQ2aSddeLLO/JQkyWRw/ACSXjZ4/lsScG3/rd+s 38wLfVgKbzvoAVIdC0KMSkKEKN62KIqdhAaIKe6etuW0YuTyUzUwjiqEquVsowtj gvpnwpo9MeBh97hj1lzBmOEz/1ojE8fRU/b6/99odnLMj5uAO6f1hCT8dtTEThz7 p1xk/m7JBXCmM5+pYaxyAhn4TTwP0F1h9EPHtMIyyVVpDAKO9xQQrZ8/xcdv1kYI dmOnxHKOasTcyItbZq4h7yYHO9XhIHiNX6klO1DxiUzUwceocZgurVyjrZNqzZaQ jG8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBTLoy9EvDLx4eGS/ixUc8DXKfiMTjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NTAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDUwL3k2 TXZSTHd5OGVIaGt2NHNWSFBBMXluNGpFNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAi9gMA0GCSqGSIb3 DQEBCwUAA4IBAQA7uMMa9YFAG7I1wNunVApXK9W7+cSVq/A23c1R9QF7nUvFLTyp mTlCMnSKRAetHzF6wRkUfVo9DKo3/i1F3zSp5r7KdV9UpxdWyRW1obkNVact7N1E DBP2i9RKOO8Zh3TQ4mhtxmPlE8W5HkuezgkqyUglL67N4Kj5CiGJfmsj7tAr4SK9 gd6j3YoIzL61yYD8tfnwoQ76EY//fGoXmg6nfGTJ7EcB6uRyM9cmdGIbpi2xxVXA KvO0mxipPc8Vi+JGYzqNMgfofVPwwuz/9Yj2aiIfaYwhy7zepZkJwk5s8edVq+BS gLQo94jM+cyE2QIf4pnh/a/VRY5uoUe3Qx3i -----END CERTIFICATE-----Generated at Mon Sep 21 22:00:01 2026 by rpki-client