$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer File: M9LCyIFvMOa1gmK5PHF8hVE1BcU.cer (raw, json) Hash identifier: cViWOJURaMVFMzl4t5XJqfk6B5SLdOMTM6aPyc48SBU= Subject key identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 63F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:30:10 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 103.142.12.0/23 IP: 133.247.112.0/20 IP: 202.233.68.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25591 (0x63f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:30:10 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=33D2C2C8816F30E6B58262B93C717C85513505C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:1d:34:ac:99:fa:0f:7c:f4:c0:39:e0:e8: 95:e8:08:f1:95:37:a9:57:1a:81:c1:53:36:b7:0d: 69:47:7b:cf:59:6c:a0:60:40:84:e0:57:53:a3:bd: 4a:48:eb:12:fc:21:bc:ee:64:de:77:16:ce:1a:96: 69:dd:6c:06:9f:92:40:78:2f:c7:1b:4d:40:f9:a2: 2c:97:a9:4d:a2:b8:57:af:e4:a7:e4:ee:8a:f8:ee: 92:cc:fd:1b:43:65:85:66:b9:d8:70:75:5d:f6:11: ed:b6:ae:ee:de:54:0f:b0:a5:1e:ce:b2:20:17:f9: 13:b8:89:a9:09:d0:f8:40:a7:cb:85:e5:81:17:02: c1:34:99:dd:b2:da:d3:08:89:22:2d:78:b9:8e:2d: c9:03:1f:7b:21:ef:ef:18:bb:fc:13:74:3c:83:32: eb:32:4b:32:9c:c2:de:17:6e:cd:5f:0e:a1:6d:ae: 40:82:46:76:45:38:e0:b3:2b:9f:a7:4e:cd:fe:f3: a3:72:83:0c:f0:55:6c:f0:02:f2:d6:0f:3f:94:00: 99:48:b0:1e:62:0d:78:30:e3:c5:25:22:2b:2e:47: f7:8a:7c:64:03:47:b5:45:d7:0e:76:02:21:fd:da: f3:f0:e4:b5:d1:0a:3f:12:ed:34:a4:e7:fa:25:0a: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D2:C2:C8:81:6F:30:E6:B5:82:62:B9:3C:71:7C:85:51:35:05:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/M9LCyIFvMOa1gmK5PHF8hVE1BcU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.12.0/23 133.247.112.0/20 202.233.68.0/22 Signature Algorithm: sha256WithRSAEncryption 20:00:0e:53:53:67:f1:01:61:de:5e:e3:25:2f:ef:07:be:72: 4e:41:bc:08:a9:b8:59:1c:b2:2d:04:4f:4b:55:7a:f1:c9:f9: 1e:09:ce:63:fa:69:c0:fd:98:32:d1:2e:02:e0:ef:52:d5:8f: d7:1e:92:09:9f:a4:66:41:2e:9c:fa:6d:d4:55:0c:b2:ef:c0: 25:2a:10:1c:4f:9d:5a:52:68:81:7b:a0:91:72:73:6a:a9:82: 35:ca:bb:54:83:72:b6:25:ad:c9:a4:75:a3:35:96:72:2c:0b: 5f:51:57:3a:94:7e:17:91:e0:3c:ef:6f:58:87:72:59:32:44: 3a:c6:33:52:e7:2d:16:bd:89:b0:27:99:4b:09:78:fa:f3:e2: b6:42:23:e5:7a:b5:65:82:c1:01:79:05:b2:b6:77:d5:b7:f0: b3:34:60:ee:98:fb:71:f5:e2:1b:f6:a8:41:ce:05:fb:23:13: 27:0a:27:d8:6a:19:6a:41:ac:8a:e8:b7:e9:a6:23:24:d3:6d: 95:a3:08:74:22:91:5c:8d:5a:a5:f7:73:09:b7:27:63:68:5c: 5a:42:b4:ee:4d:9f:93:fa:0a:1f:fa:58:f3:d5:d2:1d:82:70: 85:13:2d:82:9f:0a:85:c4:48:73:e1:11:1c:df:27:2a:a9:7e: 7c:7d:39:0b -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICY/cwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzAxMFoXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzNEMkMyQzg4MTZGMzBFNkI1ODI2MkI5M0M3MTdDODU1MTM1MDVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeZHTSsmfoPfPTAOeDo legI8ZU3qVcagcFTNrcNaUd7z1lsoGBAhOBXU6O9SkjrEvwhvO5k3ncWzhqWad1s Bp+SQHgvxxtNQPmiLJepTaK4V6/kp+Tuivjuksz9G0NlhWa52HB1XfYR7bau7t5U D7ClHs6yIBf5E7iJqQnQ+ECny4XlgRcCwTSZ3bLa0wiJIi14uY4tyQMfeyHv7xi7 /BN0PIMy6zJLMpzC3hduzV8OoW2uQIJGdkU44LMrn6dOzf7zo3KDDPBVbPAC8tYP P5QAmUiwHmINeDDjxSUiKy5H94p8ZANHtUXXDnYCIf3a8/DktdEKPxLtNKTn+iUK rr0CAwEAAaOCApcwggKTMB0GA1UdDgQWBBQz0sLIgW8w5rWCYrk8cXyFUTUFxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTAyL005 TEN5SUZ2TU9hMWdtSzVQSEY4aFZFMUJjVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAFnjgwDBASF93ADBALK 6UQwDQYJKoZIhvcNAQELBQADggEBACAADlNTZ/EBYd5e4yUv7we+ck5BvAipuFkc si0ET0tVevHJ+R4JzmP6acD9mDLRLgLg71LVj9cekgmfpGZBLpz6bdRVDLLvwCUq EBxPnVpSaIF7oJFyc2qpgjXKu1SDcrYlrcmkdaM1lnIsC19RVzqUfheR4Dzvb1iH clkyRDrGM1LnLRa9ibAnmUsJePrz4rZCI+V6tWWCwQF5BbK2d9W38LM0YO6Y+3H1 4hv2qEHOBfsjEycKJ9hqGWpBrIrot+mmIyTTbZWjCHQikVyNWqX3cwm3J2NoXFpC tO5Nn5P6Ch/6WPPV0h2CcIUTLYKfCoXESHPhERzfJyqpfnx9OQs= -----END CERTIFICATE-----Generated at Thu Mar 26 06:43:27 2026 by rpki-client