$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer File: F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer (raw, json) Hash identifier: ORCU6Az+/LTn6N1NL7BzVlvSl/rlVTO78S+fB1N6XC0= Subject key identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:40:45 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 2001:278::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25937 (0x6551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:40:45 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1778E6B176325C05F3A17CD7DAA127F602CE5A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:a1:58:52:a9:f6:1a:20:f8:51:d9:69:a6: 8b:36:c4:2d:4d:f8:82:cb:2d:c3:4d:d0:ba:3e:86: db:aa:26:d1:d4:09:37:f0:04:ed:a0:7b:17:c2:0f: 5b:e2:a3:b4:9c:85:39:c5:d2:07:96:be:c3:6b:6a: 2b:7a:55:d8:ed:ee:cd:3b:56:14:42:71:c9:5b:5c: 78:44:c9:24:c9:20:b7:99:0e:39:35:da:9a:cd:41: c8:20:2b:7b:94:8f:ad:f9:f7:fd:dc:5b:de:ce:f3: 75:7f:dc:3c:d7:bd:79:48:6f:df:9c:6c:40:b7:8b: c7:dc:58:55:2c:1b:5b:31:bf:f4:d7:20:fc:47:be: 3a:3d:2b:d1:8e:10:ca:3f:ae:7d:36:cf:eb:8a:0b: 66:19:c8:bd:0e:9a:fd:75:e2:54:63:d6:09:53:02: b3:67:5e:ce:d9:9d:c8:bf:63:bc:28:4e:c6:28:fb: eb:b8:0a:df:a7:75:83:96:cd:bd:e0:ef:5d:29:2c: b9:65:6d:3c:b9:55:de:69:8b:7d:b3:e0:06:f1:0d: cf:45:1c:e4:c2:46:be:72:00:cf:ee:9c:a8:c7:fa: 9f:e4:0b:41:f0:50:38:05:21:3f:96:53:ff:bf:01: b5:9b:e9:71:70:9b:89:58:cc:a1:bc:3b:26:ab:d5: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:278::/32 Signature Algorithm: sha256WithRSAEncryption 8a:2b:76:8b:95:80:03:5a:cb:05:f9:70:90:be:f3:ba:d8:81: 70:49:4e:65:96:e4:9c:bd:38:49:2c:cb:65:60:86:be:7a:6d: 18:4c:ad:df:85:e7:f4:35:c1:d3:87:95:e3:8a:b2:24:5a:0f: 14:66:26:99:86:8d:c2:2b:84:11:e4:97:27:9c:5a:35:81:c4: bc:60:55:70:d3:13:ca:8d:e8:0d:7e:73:64:3f:23:db:72:53: 2d:17:60:a6:3e:2a:00:8a:bb:00:0d:86:ff:66:eb:5d:0e:08: ac:df:a7:59:98:93:b7:14:49:c2:ed:9a:fc:64:86:29:19:ac: 82:a9:37:1a:b1:cc:8b:fb:40:e4:3e:e3:50:8c:ca:16:fc:ff: 5b:e9:67:e6:f8:3f:df:2a:52:23:ab:01:1f:76:8f:31:f3:0e: 37:d6:3e:da:da:d2:57:3a:82:ed:2a:3e:45:0f:4e:a2:60:7e: 62:95:b6:fb:17:42:55:c0:7f:d5:cf:52:8b:d6:fa:e9:10:a8: b2:f9:d2:47:5f:04:cc:e2:bd:84:1c:9e:77:e6:d6:dc:b2:14: 45:4c:bb:15:32:fa:a5:6f:a5:93:f7:a5:d8:f1:b7:59:c9:48: 99:47:b5:e3:bd:eb:e4:a4:aa:9b:4e:4b:dc:bf:7e:f8:ea:b4: ee:c5:71:0f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICZVEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxNDA0NVoXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoMTc3OEU2QjE3NjMyNUMwNUYzQTE3Q0Q3REFBMTI3RjYwMkNFNUEw MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3XoVhSqfYaIPhR2Wmm izbELU34gsstw03Quj6G26om0dQJN/AE7aB7F8IPW+KjtJyFOcXSB5a+w2tqK3pV 2O3uzTtWFEJxyVtceETJJMkgt5kOOTXams1ByCAre5SPrfn3/dxb3s7zdX/cPNe9 eUhv35xsQLeLx9xYVSwbWzG/9Ncg/Ee+Oj0r0Y4Qyj+ufTbP64oLZhnIvQ6a/XXi VGPWCVMCs2deztmdyL9jvChOxij767gK36d1g5bNveDvXSksuWVtPLlV3mmLfbPg BvENz0Uc5MJGvnIAz+6cqMf6n+QLQfBQOAUhP5ZT/78BtZvpcXCbiVjMobw7JqvV W/cCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQXeOaxdjJcBfOhfNfaoSf2As5aATAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwMjIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDIyL0Yz am1zWFl5WEFYem9YelgycUVuOWdMT1dnRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQJ4MA0GCSqGSIb3 DQEBCwUAA4IBAQCKK3aLlYADWssF+XCQvvO62IFwSU5lluScvThJLMtlYIa+em0Y TK3fhef0NcHTh5XjirIkWg8UZiaZho3CK4QR5JcnnFo1gcS8YFVw0xPKjegNfnNk PyPbclMtF2CmPioAirsADYb/ZutdDgis36dZmJO3FEnC7Zr8ZIYpGayCqTcascyL +0DkPuNQjMoW/P9b6Wfm+D/fKlIjqwEfdo8x8w431j7a2tJXOoLtKj5FD06iYH5i lbb7F0JVwH/Vz1KL1vrpEKiy+dJHXwTM4r2EHJ535tbcshRFTLsVMvqlb6WT96XY 8bdZyUiZR7XjvevkpKqbTkvcv3746rTuxXEP -----END CERTIFICATE-----Generated at Thu Mar 26 11:53:39 2026 by rpki-client