$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/OZoUEIJMac77ZJBH7ZcBhY7iEJA.cer File: OZoUEIJMac77ZJBH7ZcBhY7iEJA.cer (raw, json) Hash identifier: 2F58n8kkJNYM9m1a5mDOjj0fluVxKDsLm5qEi/U2RrI= Subject key identifier: 39:9A:14:10:82:4C:69:CE:FB:64:90:47:ED:97:01:85:8E:E2:10:90 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/OZoUEIJMac77ZJBH7ZcBhY7iEJA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 12 May 2026 01:30:28 +0000 Certificate not after: Wed 12 May 2027 01:23:50 +0000 Subordinate resources: IP: 163.128.154.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26660 (0x6824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 12 01:30:28 2026 GMT Not After : May 12 01:23:50 2027 GMT Subject: CN=399A1410824C69CEFB649047ED9701858EE21090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:3f:b5:aa:c3:11:e5:28:f0:a6:8a:02:30: 8a:e2:95:5e:92:f3:b6:75:cf:9e:57:56:02:58:5d: 04:35:7e:91:d4:6d:ef:87:48:be:9c:60:6f:64:04: a6:8e:33:5c:9e:05:1e:34:b8:61:f5:dc:80:02:06: fd:14:6c:f4:c8:60:90:53:c7:69:62:43:f1:61:dd: 1d:62:17:d0:99:be:ef:0d:41:a0:15:ae:3f:4a:de: f0:bb:b1:9e:73:ff:82:97:3b:83:2e:d4:8a:fd:9b: 47:39:3b:8b:fc:a3:ef:7a:91:ab:d2:56:52:4b:31: 5f:2d:c1:2c:6b:f9:f9:38:4b:a8:b5:39:10:86:40: ab:31:e6:08:c5:5f:30:78:87:af:55:32:5c:75:a6: 70:dc:bb:e7:5d:44:d3:0a:d5:6b:3f:23:31:18:c9: 88:3e:20:b3:98:59:43:92:4a:7d:f3:3d:27:88:12: 03:35:0f:03:a1:8d:72:f7:a6:74:13:da:f8:dc:c8: 32:78:4c:43:f3:b6:b5:c5:f8:9a:02:29:6b:6e:b4: 97:c3:93:b5:09:b2:bf:0d:c4:c5:0a:11:b1:e6:b7: 38:ac:1a:5f:5a:ca:3a:d4:c0:f2:41:bd:9a:64:75: 2e:7b:72:51:1e:47:2e:f9:1c:a2:0d:24:db:8b:38: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:14:10:82:4C:69:CE:FB:64:90:47:ED:97:01:85:8E:E2:10:90 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/OZoUEIJMac77ZJBH7ZcBhY7iEJA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.128.154.0/23 Signature Algorithm: sha256WithRSAEncryption 78:8b:dc:06:96:10:81:82:e7:8b:af:11:f3:7c:e7:dc:38:a2: 60:47:b7:42:47:30:c3:d6:fb:71:c7:38:96:55:67:6f:a5:da: 23:72:43:a7:89:9a:9c:47:6d:ed:16:74:dd:0e:11:98:ae:c4: 6a:33:14:05:a0:62:3c:8e:a6:80:b0:79:3a:9e:5c:df:b9:ca: bf:21:c6:8c:ef:ad:ba:cc:01:9c:c7:8f:e6:1e:43:5b:1d:42: c6:15:e2:57:93:e2:4a:8e:ec:b8:9a:2b:fb:fd:c2:6d:43:64: 34:6f:91:8d:1a:45:76:7d:0b:da:0e:ca:a3:9c:af:6f:99:8d: 3a:4b:d4:9a:05:6a:be:cf:ca:27:08:be:d5:9d:78:df:cf:e8: c1:3e:6d:e1:5d:cf:7e:f5:c3:b8:60:34:ec:b7:28:9f:2e:bd: 63:f7:9a:c4:04:25:4c:14:cc:57:97:47:22:ca:46:47:ee:7c: 8f:a0:63:cf:f2:50:97:9f:34:36:e3:e6:79:9b:60:1b:98:2a: 97:48:d4:7c:fe:c4:86:88:e0:68:9c:17:cf:ff:87:77:8d:b9: 72:c0:25:21:43:1d:a2:09:e5:34:d1:84:e5:85:78:26:05:e4: af:28:ed:e7:8b:f7:cb:94:8a:2e:52:20:1e:e3:ad:22:42:78: e6:86:52:56 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICaCQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDUxMjAxMzAyOFoXDTI3MDUxMjAxMjM1MFowMzEx MC8GA1UEAxMoMzk5QTE0MTA4MjRDNjlDRUZCNjQ5MDQ3RUQ5NzAxODU4RUUyMTA5 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJsP7WqwxHlKPCmigIw iuKVXpLztnXPnldWAlhdBDV+kdRt74dIvpxgb2QEpo4zXJ4FHjS4YfXcgAIG/RRs 9MhgkFPHaWJD8WHdHWIX0Jm+7w1BoBWuP0re8LuxnnP/gpc7gy7Uiv2bRzk7i/yj 73qRq9JWUksxXy3BLGv5+ThLqLU5EIZAqzHmCMVfMHiHr1UyXHWmcNy7511E0wrV az8jMRjJiD4gs5hZQ5JKffM9J4gSAzUPA6GNcvemdBPa+NzIMnhMQ/O2tcX4mgIp a260l8OTtQmyvw3ExQoRsea3OKwaX1rKOtTA8kG9mmR1LntyUR5HLvkcog0k24s4 QUcCAwEAAaOCAoswggKHMB0GA1UdDgQWBBQ5mhQQgkxpzvtkkEftlwGFjuIQkDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyOTIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjkyL09a b1VFSUpNYWM3N1pKQkg3WmNCaFk3aUVKQS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGjgJowDQYJKoZIhvcN AQELBQADggEBAHiL3AaWEIGC54uvEfN859w4omBHt0JHMMPW+3HHOJZVZ2+l2iNy Q6eJmpxHbe0WdN0OEZiuxGozFAWgYjyOpoCweTqeXN+5yr8hxozvrbrMAZzHj+Ye Q1sdQsYV4leT4kqO7LiaK/v9wm1DZDRvkY0aRXZ9C9oOyqOcr2+ZjTpL1JoFar7P yicIvtWdeN/P6ME+beFdz371w7hgNOy3KJ8uvWP3msQEJUwUzFeXRyLKRkfufI+g Y8/yUJefNDbj5nmbYBuYKpdI1Hz+xIaI4GicF8//h3eNuXLAJSFDHaIJ5TTRhOWF eCYF5K8o7eeL98uUii5SIB7jrSJCeOaGUlY= -----END CERTIFICATE-----Generated at Tue May 12 22:03:27 2026 by rpki-client