$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer File: 3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer (raw, json) Hash identifier: p7soLwWgYJBPttSOD28c/DrjGPqGnRlQ4OsGeHOZjWg= Subject key identifier: DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1509 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:31:24 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 138.252.25.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5385 (0x1509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Mar 15 01:31:24 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=DC7ACE41B68FB5C26ECA14355EF2D74BE3EBCFC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:73:2f:bd:2e:ea:59:9d:5b:be:9f:fb:e5: e4:1a:55:04:73:a3:53:0e:86:b2:fd:17:63:c6:9e: dd:46:aa:ca:5a:9b:f1:3c:ff:7e:89:95:dd:78:1e: d0:74:9e:d8:08:5d:e6:2a:63:66:99:40:48:7b:24: a1:d1:1f:bf:6e:37:b5:bb:ce:4c:b8:ab:a0:02:ef: 15:cb:ea:1a:b2:0a:22:33:59:8c:c4:dc:36:1d:38: 8c:35:cf:60:9d:22:a0:96:63:15:2f:d8:74:08:9c: 8a:45:8b:d4:33:0c:e5:70:68:82:c6:70:55:ba:f2: dd:a7:14:6c:20:d1:e4:f5:e5:c2:6e:14:2f:76:78: 64:db:b3:a2:11:6a:6c:e0:fc:42:d7:08:d0:0c:e6: c8:68:2e:72:2f:a9:16:8d:2c:c2:e5:e9:2b:6c:fb: 7f:bd:0c:3b:ce:15:94:bf:65:8f:41:87:b4:4c:f5: ce:45:b9:c4:6f:6a:b5:0f:51:6a:8d:60:84:bf:3f: d1:36:a1:97:ad:ea:fe:4a:74:45:08:8c:eb:99:08: 21:d5:d4:0b:1b:4b:b1:d6:6b:67:41:1c:1e:a0:cf: 01:cf:af:8f:1b:9a:95:64:a7:16:b8:97:f3:9c:e5: 92:fe:2a:73:13:19:80:c1:c7:4c:7f:88:b1:74:cb: 93:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.25.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:47:05:97:26:57:ee:96:da:ad:88:f8:84:4f:56:8e:5e:84: 93:41:f4:d2:e9:a9:89:55:22:8b:a3:e5:ce:a3:4e:a9:d8:3c: b6:55:c9:b4:6e:7c:fd:83:d9:61:52:3f:d7:6c:89:51:8c:33: ee:ea:ed:97:32:13:0d:5c:5a:6d:ec:d3:40:44:dd:75:19:c6: 8c:a9:ea:1a:56:dd:ea:47:b6:3e:d7:a1:a3:4f:84:ee:b1:72: 25:99:54:ae:a2:e6:33:7a:8f:11:e9:db:cb:5a:56:f9:b5:e6: 9e:ca:55:0a:ae:e3:f2:2f:0e:b2:6c:37:65:6e:1c:74:16:b5: 0e:01:48:5d:29:0d:96:42:d8:d1:ff:2a:65:87:be:38:14:18: fa:56:8e:f0:e7:4e:00:37:0a:47:07:74:4f:17:33:29:fb:9d: 65:e4:15:92:ad:42:36:3f:b1:66:2d:12:ed:67:1f:30:36:0a: 15:f5:6c:59:f4:13:03:88:00:19:36:64:59:dc:be:f8:46:7a: c2:df:16:8a:8a:ef:79:e1:34:8f:d8:f6:d6:96:a0:e1:a7:63: 48:76:a2:11:56:af:ae:a1:bb:3b:46:3e:e7:ec:44:99:81:a8: a5:0e:81:13:9d:e7:2b:f4:5b:03:cd:f0:37:80:c2:a1:75:3e: 41:a1:29:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI2MDMxNTAxMzEyNFoXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoREM3QUNFNDFCNjhGQjVDMjZFQ0ExNDM1NUVGMkQ3NEJFM0VCQ0ZD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANywcy+9LupZnVu+n/vl 5BpVBHOjUw6Gsv0XY8ae3Uaqylqb8Tz/fomV3Xge0HSe2Ahd5ipjZplASHskodEf v243tbvOTLiroALvFcvqGrIKIjNZjMTcNh04jDXPYJ0ioJZjFS/YdAicikWL1DMM 5XBogsZwVbry3acUbCDR5PXlwm4UL3Z4ZNuzohFqbOD8QtcI0AzmyGguci+pFo0s wuXpK2z7f70MO84VlL9lj0GHtEz1zkW5xG9qtQ9Rao1ghL8/0Tahl63q/kp0RQiM 65kIIdXUCxtLsdZrZ0EcHqDPAc+vjxualWSnFriX85zlkv4qcxMZgMHHTH+IsXTL kwkCAwEAAaOCAokwggKFMB0GA1UdDgQWBBTces5Bto+1wm7KFDVe8tdL4+vPxTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvNTc1MC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTc1MC8zSHJP UWJhUHRjSnV5aFExWHZMWFMtUHJ6OFUubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivwZMA0GCSqGSIb3DQEB CwUAA4IBAQCNRwWXJlfultqtiPiET1aOXoSTQfTS6amJVSKLo+XOo06p2Dy2Vcm0 bnz9g9lhUj/XbIlRjDPu6u2XMhMNXFpt7NNARN11GcaMqeoaVt3qR7Y+16GjT4Tu sXIlmVSuouYzeo8R6dvLWlb5teaeylUKruPyLw6ybDdlbhx0FrUOAUhdKQ2WQtjR /yplh744FBj6Vo7w504ANwpHB3RPFzMp+51l5BWSrUI2P7FmLRLtZx8wNgoV9WxZ 9BMDiAAZNmRZ3L74RnrC3xaKiu954TSP2PbWlqDhp2NIdqIRVq+uobs7Rj7n7ESZ gailDoETnecr9FsDzfA3gMKhdT5BoSmi -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:38 2026 by rpki-client