$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer File: y6MvRLwy8eHhkv4sVHPA1yn4jE4.cer (raw, json) Hash identifier: C6Vn2u23DyK9IsA1GWemN0CLSzEPSnqJ0O+R4t9kwLU= Subject key identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 75A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:30:56 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 2402:2f60::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 13:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30113 (0x75a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:30:56 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=CBA32F44BC32F1E1E192FE2C5473C0D729F88C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:01:43:19:a7:c6:9e:f7:a2:cd:57:41:1e: 6c:c2:a5:cc:08:82:c6:36:fd:60:e8:fe:d0:53:43: 1c:ea:ea:64:a4:36:69:27:5d:78:b2:ce:fc:94:24: c9:64:70:fc:00:92:5e:36:78:fe:5b:12:70:6d:ff: ad:df:ac:df:cc:0b:7d:58:0a:6f:3b:e8:01:52:1d: 0b:42:8c:4a:42:84:28:de:b6:28:8a:9d:84:06:88: 29:ee:9e:b6:e5:b4:62:e4:f2:53:35:30:8e:2a:84: aa:e5:6c:a3:0b:63:82:fa:67:c2:9a:3d:31:e0:61: f7:b8:63:d6:5c:c1:98:e1:33:ff:5a:23:13:c7:d1: 53:f6:fa:ff:df:68:76:72:cc:8f:9b:80:3b:a7:f5: 84:24:fc:76:d4:c4:4e:1c:fb:a7:5c:64:fe:6e:c9: 05:70:a6:33:9f:a9:61:ac:72:02:19:f8:4d:3c:0f: d0:5d:61:f4:43:c7:b4:c2:32:c9:55:69:0c:02:8e: f7:14:10:ad:9f:3f:c5:c7:6f:d6:46:08:76:63:a7: c4:72:8e:6a:c4:dc:c8:8b:5b:66:ae:21:ef:26:07: 3b:d5:e1:20:78:8d:5f:a9:25:3b:50:f1:89:4c:d4: c1:c7:a8:71:98:2e:ad:5c:a3:ad:93:6a:cd:96:90: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A3:2F:44:BC:32:F1:E1:E1:92:FE:2C:54:73:C0:D7:29:F8:8C:4E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30450/y6MvRLwy8eHhkv4sVHPA1yn4jE4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2f60::/32 Signature Algorithm: sha256WithRSAEncryption 33:b7:72:bf:39:f4:f4:79:cb:c6:c1:e8:84:eb:12:17:fd:a3: 77:59:46:84:eb:d0:e4:63:a3:1c:21:ae:fd:b9:04:ea:6e:e6: 42:0e:db:e5:2e:88:cd:31:8e:d4:d1:83:df:62:34:21:c8:86: 72:11:7c:78:64:5d:45:b9:5f:77:a7:22:57:dc:a9:3d:8d:20: f0:c7:2b:a7:19:45:bd:6c:20:84:54:82:1b:ae:94:4e:93:59: 18:1a:4d:01:e2:ca:10:ff:62:50:5d:84:f5:ac:b8:4d:09:1c: ff:98:8e:96:8d:e4:f0:e9:80:c8:aa:e8:78:aa:96:22:a6:6c: 55:bb:91:5f:20:97:a3:55:62:d5:91:1d:f6:93:16:ec:ac:8b: 78:9b:00:a8:59:ff:1c:ea:78:cb:c4:bd:ed:65:aa:b1:49:7e: 34:3b:3a:4c:ea:6d:4a:90:4d:e0:d2:5e:74:4f:44:c0:b0:6b: cd:24:ba:7d:41:02:bb:ca:6e:55:a5:23:66:ab:97:23:f7:ba: 2c:bd:f7:8c:fe:2e:85:3a:88:02:45:df:82:87:de:e2:37:ce: 69:e5:aa:3d:26:9e:93:21:c3:f6:87:1c:8d:9f:54:4a:4c:e5: 4c:8c:0c:6a:6b:36:ff:cf:fb:76:8e:08:8e:77:42:8c:4c:4f: b3:1e:cc:6d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICdaEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxMzA1NloXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoQ0JBMzJGNDRCQzMyRjFFMUUxOTJGRTJDNTQ3M0MwRDcyOUY4OEM0 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ7eAUMZp8ae96LNV0Ee bMKlzAiCxjb9YOj+0FNDHOrqZKQ2aSddeLLO/JQkyWRw/ACSXjZ4/lsScG3/rd+s 38wLfVgKbzvoAVIdC0KMSkKEKN62KIqdhAaIKe6etuW0YuTyUzUwjiqEquVsowtj gvpnwpo9MeBh97hj1lzBmOEz/1ojE8fRU/b6/99odnLMj5uAO6f1hCT8dtTEThz7 p1xk/m7JBXCmM5+pYaxyAhn4TTwP0F1h9EPHtMIyyVVpDAKO9xQQrZ8/xcdv1kYI dmOnxHKOasTcyItbZq4h7yYHO9XhIHiNX6klO1DxiUzUwceocZgurVyjrZNqzZaQ jG8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBTLoy9EvDLx4eGS/ixUc8DXKfiMTjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzA0NTAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwNDUwL3k2 TXZSTHd5OGVIaGt2NHNWSFBBMXluNGpFNC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAi9gMA0GCSqGSIb3 DQEBCwUAA4IBAQAzt3K/OfT0ecvGweiE6xIX/aN3WUaE69DkY6McIa79uQTqbuZC DtvlLojNMY7U0YPfYjQhyIZyEXx4ZF1FuV93pyJX3Kk9jSDwxyunGUW9bCCEVIIb rpROk1kYGk0B4soQ/2JQXYT1rLhNCRz/mI6WjeTw6YDIquh4qpYipmxVu5FfIJej VWLVkR32kxbsrIt4mwCoWf8c6njLxL3tZaqxSX40OzpM6m1KkE3g0l50T0TAsGvN JLp9QQK7ym5VpSNmq5cj97osvfeM/i6FOogCRd+Ch97iN85p5ao9Jp6TIcP2hxyN n1RKTOVMjAxqazb/z/t2jgiOd0KMTE+zHsxt -----END CERTIFICATE-----Generated at Sun Nov 15 15:21:34 2026 by rpki-client