$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/OZoUEIJMac77ZJBH7ZcBhY7iEJA.cer File: OZoUEIJMac77ZJBH7ZcBhY7iEJA.cer (raw, json) Hash identifier: QKMymzKDb+vTgZ6gDy6ZNyRlUrYhgcUqYJWi3KNzwxE= Subject key identifier: 39:9A:14:10:82:4C:69:CE:FB:64:90:47:ED:97:01:85:8E:E2:10:90 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6D7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/OZoUEIJMac77ZJBH7ZcBhY7iEJA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Jul 2026 01:37:35 +0000 Certificate not after: Thu 15 Jul 2027 01:30:02 +0000 Subordinate resources: IP: 163.128.154.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28026 (0x6d7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:37:35 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=399A1410824C69CEFB649047ED9701858EE21090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:3f:b5:aa:c3:11:e5:28:f0:a6:8a:02:30: 8a:e2:95:5e:92:f3:b6:75:cf:9e:57:56:02:58:5d: 04:35:7e:91:d4:6d:ef:87:48:be:9c:60:6f:64:04: a6:8e:33:5c:9e:05:1e:34:b8:61:f5:dc:80:02:06: fd:14:6c:f4:c8:60:90:53:c7:69:62:43:f1:61:dd: 1d:62:17:d0:99:be:ef:0d:41:a0:15:ae:3f:4a:de: f0:bb:b1:9e:73:ff:82:97:3b:83:2e:d4:8a:fd:9b: 47:39:3b:8b:fc:a3:ef:7a:91:ab:d2:56:52:4b:31: 5f:2d:c1:2c:6b:f9:f9:38:4b:a8:b5:39:10:86:40: ab:31:e6:08:c5:5f:30:78:87:af:55:32:5c:75:a6: 70:dc:bb:e7:5d:44:d3:0a:d5:6b:3f:23:31:18:c9: 88:3e:20:b3:98:59:43:92:4a:7d:f3:3d:27:88:12: 03:35:0f:03:a1:8d:72:f7:a6:74:13:da:f8:dc:c8: 32:78:4c:43:f3:b6:b5:c5:f8:9a:02:29:6b:6e:b4: 97:c3:93:b5:09:b2:bf:0d:c4:c5:0a:11:b1:e6:b7: 38:ac:1a:5f:5a:ca:3a:d4:c0:f2:41:bd:9a:64:75: 2e:7b:72:51:1e:47:2e:f9:1c:a2:0d:24:db:8b:38: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:14:10:82:4C:69:CE:FB:64:90:47:ED:97:01:85:8E:E2:10:90 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20292/OZoUEIJMac77ZJBH7ZcBhY7iEJA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.128.154.0/23 Signature Algorithm: sha256WithRSAEncryption 02:d1:6b:95:3a:a8:96:9c:d5:0b:a8:da:5b:f8:e5:7f:ba:90: a2:99:1a:a8:d8:4f:6d:eb:ad:1d:22:7f:0f:51:29:b6:ae:bf: 66:83:85:e7:85:08:8c:5f:b4:59:51:82:e1:d3:a9:9d:bc:b1: 0e:36:27:7f:30:0f:34:36:e9:ff:fa:b5:66:4a:e5:68:12:75: 3b:f5:b9:a4:f1:3a:b3:c8:5a:68:c8:27:19:c8:62:57:f3:85: 8b:40:15:31:68:7a:d8:c4:a4:b4:d4:a9:44:f4:df:43:3b:cf: c2:7d:a7:fe:16:e8:87:95:42:95:35:76:0e:ee:f8:2e:90:15: b9:90:9a:26:0e:27:2f:e6:f7:b3:97:d7:a9:35:a0:27:39:04: 07:0f:53:82:5b:35:93:09:1c:76:cc:c5:1a:78:f6:d1:8b:84: e3:d9:11:52:df:0a:49:78:06:1a:db:5e:29:00:05:5f:24:ba: fb:c1:4c:50:6b:83:2a:6a:99:07:da:de:e8:f9:4e:5f:45:17: b1:e0:6b:c1:29:99:17:e5:d7:ab:ad:13:bc:83:4d:51:7c:75: 5c:17:02:70:8a:1f:6f:0b:89:93:ad:e5:76:31:7c:45:e9:a1: 3a:45:6f:b5:df:0a:3a:53:ed:e2:7f:8c:b6:11:bf:82:40:66: f9:92:07:00 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICbXowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDcxNTAxMzczNVoXDTI3MDcxNTAxMzAwMlowMzEx MC8GA1UEAxMoMzk5QTE0MTA4MjRDNjlDRUZCNjQ5MDQ3RUQ5NzAxODU4RUUyMTA5 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJsP7WqwxHlKPCmigIw iuKVXpLztnXPnldWAlhdBDV+kdRt74dIvpxgb2QEpo4zXJ4FHjS4YfXcgAIG/RRs 9MhgkFPHaWJD8WHdHWIX0Jm+7w1BoBWuP0re8LuxnnP/gpc7gy7Uiv2bRzk7i/yj 73qRq9JWUksxXy3BLGv5+ThLqLU5EIZAqzHmCMVfMHiHr1UyXHWmcNy7511E0wrV az8jMRjJiD4gs5hZQ5JKffM9J4gSAzUPA6GNcvemdBPa+NzIMnhMQ/O2tcX4mgIp a260l8OTtQmyvw3ExQoRsea3OKwaX1rKOtTA8kG9mmR1LntyUR5HLvkcog0k24s4 QUcCAwEAAaOCAoswggKHMB0GA1UdDgQWBBQ5mhQQgkxpzvtkkEftlwGFjuIQkDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyOTIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjkyL09a b1VFSUpNYWM3N1pKQkg3WmNCaFk3aUVKQS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGjgJowDQYJKoZIhvcN AQELBQADggEBAALRa5U6qJac1Quo2lv45X+6kKKZGqjYT23rrR0ifw9RKbauv2aD heeFCIxftFlRguHTqZ28sQ42J38wDzQ26f/6tWZK5WgSdTv1uaTxOrPIWmjIJxnI YlfzhYtAFTFoetjEpLTUqUT030M7z8J9p/4W6IeVQpU1dg7u+C6QFbmQmiYOJy/m 97OX16k1oCc5BAcPU4JbNZMJHHbMxRp49tGLhOPZEVLfCkl4BhrbXikABV8kuvvB TFBrgypqmQfa3uj5Tl9FF7Hga8EpmRfl16utE7yDTVF8dVwXAnCKH28LiZOt5XYx fEXpoTpFb7XfCjpT7eJ/jLYRv4JAZvmSBwA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:10:20 2026 by rpki-client