$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer File: G_-mDYo0HWFiEcOLuSUGEINtO50.cer (raw, json) Hash identifier: LMBC8k1UoRauMAi0LRZYeA+9PetZQ6a8+5zPSWKwlQM= Subject key identifier: 1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 641E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:31:13 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 43.229.16.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25630 (0x641e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:31:13 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=1BFFA60D8A341D616211C38BB9250610836D3B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:9c:1d:96:48:03:7e:94:60:b3:bc:09:32: 80:75:c3:00:cf:83:8b:ac:ee:f8:a2:b9:d9:bf:17: 51:6a:12:2a:c7:39:58:2b:b3:66:a9:ea:ad:7c:15: 27:a8:31:19:e8:49:11:f0:2e:c1:65:d6:bf:90:60: 57:5d:3b:ff:8e:87:f7:8c:2c:68:63:54:35:0f:24: e2:b4:2c:af:ea:48:a7:e7:01:32:fe:e3:23:5f:db: 29:06:cf:ed:19:21:b2:23:ec:f1:9d:82:f3:49:c2: 82:46:84:52:e4:7b:2c:68:70:93:e9:a4:64:9b:b7: b6:30:84:e9:63:46:f0:da:ed:24:db:24:de:aa:53: 94:79:0c:b9:08:c3:f1:9b:51:2c:0c:d2:7a:f8:5d: 80:c3:2d:32:c7:89:34:ab:b5:bc:d8:5c:fb:7f:23: 5e:b2:75:b8:c6:06:b4:a8:0c:cb:e8:00:cb:4f:6f: 2b:a6:d8:3a:dc:d8:2b:97:fe:9f:c1:31:3d:73:31: cd:1a:57:75:5c:e8:a4:ea:92:67:5b:b5:85:2a:e9: ac:83:9f:2d:1f:35:ba:a6:0b:6d:4b:8c:67:a9:7b: a2:f0:7d:99:bf:3c:57:a8:64:1c:17:ca:60:a5:69: 20:a2:cb:31:eb:dc:a5:6c:ba:52:c6:55:9f:6c:13: d4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.16.0/23 Signature Algorithm: sha256WithRSAEncryption 29:15:b6:1a:43:f4:bc:28:88:fa:d3:09:83:43:06:06:13:9c: 58:6f:bd:fe:e2:d4:5f:85:3a:c3:0d:8b:ae:d7:59:a9:70:05: 9a:cb:80:72:5c:e4:fe:87:67:4d:db:e8:7f:4c:79:fd:a3:9f: d9:09:96:53:28:ab:5f:ad:16:ff:68:24:12:c8:e3:15:55:4f: bb:b0:52:86:fb:d9:86:32:d4:20:a6:aa:b1:e0:3a:af:ad:72: 9b:59:72:ca:6f:20:70:8d:ec:39:0f:ea:a3:ef:e1:b0:a2:b2: e7:6e:f6:ee:71:9a:70:01:35:8d:55:67:0e:63:36:33:04:4e: 76:fb:ca:5d:36:cc:2c:66:64:5d:fe:0b:36:b7:26:46:09:1d: 93:a3:84:8c:26:17:f0:d5:88:8c:2e:bf:ca:e4:4e:2b:e6:5a: cc:66:7d:77:14:bc:43:76:e7:f3:4c:7f:13:74:d3:67:c7:1a: b3:ca:43:1b:49:22:1e:e6:5c:3b:c0:d0:e1:02:cb:7e:09:1c: af:de:97:3b:18:55:5a:57:f7:68:36:b4:77:82:19:8d:ba:7c: e8:cf:1e:bf:89:90:9c:36:1d:1a:aa:58:93:96:30:8c:c7:02: 4e:91:32:b2:8f:a9:12:a8:11:0a:3d:c9:a9:37:cc:b4:f8:51: 52:7d:60:04 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICZB4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzExM1oXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoMUJGRkE2MEQ4QTM0MUQ2MTYyMTFDMzhCQjkyNTA2MTA4MzZEM0I5 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANQZnB2WSAN+lGCzvAky gHXDAM+Di6zu+KK52b8XUWoSKsc5WCuzZqnqrXwVJ6gxGehJEfAuwWXWv5BgV107 /46H94wsaGNUNQ8k4rQsr+pIp+cBMv7jI1/bKQbP7RkhsiPs8Z2C80nCgkaEUuR7 LGhwk+mkZJu3tjCE6WNG8NrtJNsk3qpTlHkMuQjD8ZtRLAzSevhdgMMtMseJNKu1 vNhc+38jXrJ1uMYGtKgMy+gAy09vK6bYOtzYK5f+n8ExPXMxzRpXdVzopOqSZ1u1 hSrprIOfLR81uqYLbUuMZ6l7ovB9mb88V6hkHBfKYKVpIKLLMevcpWy6UsZVn2wT 1CcCAwEAAaOCAoswggKHMB0GA1UdDgQWBBQb/6YNijQdYWIRw4u5JQYQg207nTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyODEvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjgxL0df LW1EWW8wSFdGaUVjT0x1U1VHRUlOdE81MC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEr5RAwDQYJKoZIhvcN AQELBQADggEBACkVthpD9LwoiPrTCYNDBgYTnFhvvf7i1F+FOsMNi67XWalwBZrL gHJc5P6HZ03b6H9Mef2jn9kJllMoq1+tFv9oJBLI4xVVT7uwUob72YYy1CCmqrHg Oq+tcptZcspvIHCN7DkP6qPv4bCisudu9u5xmnABNY1VZw5jNjMETnb7yl02zCxm ZF3+Cza3JkYJHZOjhIwmF/DViIwuv8rkTivmWsxmfXcUvEN25/NMfxN002fHGrPK QxtJIh7mXDvA0OECy34JHK/elzsYVVpX92g2tHeCGY26fOjPHr+JkJw2HRqqWJOW MIzHAk6RMrKPqRKoEQo9yak3zLT4UVJ9YAQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:32:57 2026 by rpki-client