$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer File: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer (raw, json) Hash identifier: tKmG0F8vM7aCeNZtWRl7sG0kH80qQGV/KjlpjwY83Jk= Subject key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7796 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:42:42 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 202.213.72.0/21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30614 (0x7796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:42:42 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:8b:53:16:a5:a7:f2:07:b0:e5:f6:60:f6: 47:31:3c:44:47:38:11:5c:09:13:34:99:93:c4:94: 48:cd:64:49:d7:0e:74:6a:ae:43:a3:0f:74:dc:8c: 42:45:6a:3f:1f:69:63:44:1f:4d:4a:37:63:e5:c9: 42:57:b1:5b:61:64:57:aa:94:0f:ca:9e:8e:6d:98: 4b:ca:38:6f:9f:d6:7e:b5:e1:95:69:13:62:f4:76: 34:53:1f:bb:e4:9e:84:d4:4c:7b:33:21:15:2e:43: 4b:52:86:66:2d:95:6e:a9:40:7d:04:f9:4d:24:cf: 92:a3:b6:9b:da:38:cd:44:05:35:2b:1a:2f:63:ec: a6:78:77:14:92:ed:4c:40:cc:81:e2:60:94:cf:3b: ae:04:12:5b:ca:b7:7f:ca:68:46:1d:97:21:02:6a: b2:3b:4c:3d:ca:cd:5d:72:e6:19:53:9d:cd:af:76: d0:2c:47:66:5f:fc:d3:f9:55:8b:2b:12:52:c8:73: c1:a6:3a:76:2c:1e:58:04:87:eb:78:90:63:7c:ed: f7:5e:c2:6c:8b:71:07:a9:75:41:36:3b:8d:cb:4e: 37:46:c6:2f:3b:4e:23:bd:8f:62:7d:c1:2c:ad:0a: 80:16:0a:25:e4:53:71:80:e8:fb:31:3e:87:45:8d: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.213.72.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:c3:43:4a:c2:2d:ec:c7:d7:36:49:67:68:10:fb:97:92:80: 3f:04:e2:f6:ab:38:c5:a4:1f:0b:39:1b:da:f8:9f:b0:60:a0: 73:32:e8:fa:5d:40:21:29:68:7c:ad:6d:23:6c:24:53:7a:2b: 58:09:82:b4:4d:95:ee:8b:5e:06:8a:9f:dd:f3:af:6f:a3:b5: 59:7d:9b:72:41:30:8c:76:9d:bf:b3:f3:5c:d4:67:e3:7c:90: 35:71:8f:f1:a6:62:06:f2:9b:c5:ff:dc:54:58:e9:8b:9d:67: a7:0f:db:74:42:a2:71:91:db:3d:a3:cb:d1:72:73:a6:f8:eb: 67:6f:f3:61:5d:63:f8:7c:33:0a:29:4b:0b:27:1b:ce:a0:2c: ed:24:94:b5:af:8f:bb:ff:e3:1f:82:f3:1a:d8:37:32:7e:9a: 93:ed:81:9e:86:1a:86:1f:56:d1:65:75:2f:82:ae:28:77:ad: fe:5e:30:42:90:d8:8f:bf:74:73:63:b7:6a:73:14:4e:4e:77: 62:04:2b:3b:a3:6f:2f:f9:1a:ea:a2:b4:c2:1b:e7:90:06:3c: 4b:98:62:cf:36:ab:93:64:2d:c4:a2:3a:66:39:7c:3b:20:05: eb:83:f4:62:35:db:46:58:32:f1:6f:8d:3e:c2:47:63:74:7f: 90:8d:5b:6b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICd5YwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxNDI0MloXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoRTU0RDBBNzMyQ0UxQzY1MTRBMzRBM0QwNkU5MTZCMUM0RkI4QUEw QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMW4i1MWpafyB7Dl9mD2 RzE8REc4EVwJEzSZk8SUSM1kSdcOdGquQ6MPdNyMQkVqPx9pY0QfTUo3Y+XJQlex W2FkV6qUD8qejm2YS8o4b5/WfrXhlWkTYvR2NFMfu+SehNRMezMhFS5DS1KGZi2V bqlAfQT5TSTPkqO2m9o4zUQFNSsaL2Pspnh3FJLtTEDMgeJglM87rgQSW8q3f8po Rh2XIQJqsjtMPcrNXXLmGVOdza920CxHZl/80/lViysSUshzwaY6diweWASH63iQ Y3zt917CbItxB6l1QTY7jctON0bGLztOI72PYn3BLK0KgBYKJeRTcYDo+zE+h0WN 1tECAwEAAaOCAoQwggKAMB0GA1UdDgQWBBTlTQpzLOHGUUo0o9BukWscT7iqCjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC85Ni8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOTYvNVUwS2N5emh4 bEZLTktQUWJwRnJIRS00cWdvLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8rVSDANBgkqhkiG9w0BAQsFAAOC AQEALsNDSsIt7MfXNklnaBD7l5KAPwTi9qs4xaQfCzkb2vifsGCgczLo+l1AISlo fK1tI2wkU3orWAmCtE2V7oteBoqf3fOvb6O1WX2bckEwjHadv7PzXNRn43yQNXGP 8aZiBvKbxf/cVFjpi51npw/bdEKicZHbPaPL0XJzpvjrZ2/zYV1j+HwzCilLCycb zqAs7SSUta+Pu//jH4LzGtg3Mn6ak+2BnoYahh9W0WV1L4KuKHet/l4wQpDYj790 c2O3anMUTk53YgQrO6NvL/ka6qK0whvnkAY8S5hizzark2QtxKI6Zjl8OyAF64P0 YjXbRlgy8W+NPsJHY3R/kI1baw== -----END CERTIFICATE-----Generated at Sun Nov 15 19:13:26 2026 by rpki-client