$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer File: OmLEe2ORFPaCyeWihWvA-cM-xkg.cer (raw, json) Hash identifier: ER45uHG/dDT5cF0UbaEuE+n5zTUg1/+S1JcTmGS6ikg= Subject key identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 150A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:31:29 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 138.252.48.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5386 (0x150a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Mar 15 01:31:29 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:0f:3d:a2:b2:8f:8e:37:aa:e4:c1:5b:9f: 4d:46:5b:31:3f:9b:1e:bc:9d:3a:ef:1a:a2:55:ae: 3b:76:01:fe:ac:bb:76:9d:d4:1f:1e:a9:87:c8:e4: c0:1f:db:b8:3e:de:66:33:80:da:13:cf:76:66:58: 39:54:65:b6:f2:61:9b:3f:4b:95:33:76:c6:a0:af: 41:9a:f9:08:be:5e:13:56:4a:28:64:5d:2f:3f:11: 10:a9:69:55:a3:5c:f5:b0:fb:a7:e9:d6:10:39:58: 2e:0b:8c:f5:3d:d7:4e:3e:4b:49:ce:d7:c5:38:a9: 05:36:6d:fa:22:4f:a3:ff:d3:b4:36:39:24:53:f3: a7:a7:66:2f:85:f0:b2:aa:0c:8d:93:31:c0:3a:ea: 2a:92:4b:e1:0e:76:8b:d2:ed:70:91:f8:e2:fd:bc: 82:21:59:16:55:cb:da:81:db:70:e5:34:85:1e:c0: fc:60:eb:ae:44:a9:ff:d2:83:7d:c6:35:2a:25:30: d2:49:29:d2:07:28:a6:66:36:c6:79:c8:11:97:ef: 00:36:c2:5e:58:c0:11:ad:53:d7:89:a0:26:3b:12: 7b:81:9b:d8:fc:ac:13:35:94:f5:97:ad:e1:29:d8: 1b:5c:9e:6f:e4:c6:05:51:0a:ec:ce:ca:a9:46:f6: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.48.0/23 Signature Algorithm: sha256WithRSAEncryption 49:28:e0:c6:fd:5e:95:35:77:9a:8b:05:60:42:08:c8:13:12: ca:95:b7:82:b7:9f:c6:6e:b9:6b:ef:fd:23:d5:36:ff:a7:95: 46:68:ed:12:c4:36:8b:7c:e2:0a:bf:f9:5d:f5:b2:1d:a4:d3: ea:02:6b:77:d1:60:5b:03:35:dd:6e:ea:b5:c6:53:f9:0e:19: 7b:3a:a9:6e:ee:51:4a:80:cc:12:fd:a7:32:4a:db:bc:65:a0: de:52:2b:d8:ab:7a:ce:e5:66:05:44:cb:b6:b8:3c:35:db:10: 72:0e:f7:1b:51:68:a1:f6:f1:0f:86:40:df:91:84:71:98:fb: f8:ba:e2:78:44:97:40:a4:c2:ac:9c:01:6c:91:ab:1a:b4:44: 43:4d:4d:8b:22:73:51:df:d0:12:1f:10:a3:30:a0:97:32:fb: 52:b6:2b:d0:ed:be:19:a3:e8:bc:5b:7e:a3:d6:bf:bb:1c:60: 63:48:59:97:f3:cb:ff:7e:52:58:b3:47:45:34:2c:86:c5:38: ff:fe:92:97:c5:e7:29:60:a3:d6:b9:66:f5:2c:bd:c0:1f:e0: b0:00:9f:a8:83:14:58:d9:a0:a2:85:bc:6d:d6:bc:d2:d2:36: 80:ee:c7:63:2b:f8:fa:e2:d6:8a:f4:82:0e:dd:d8:2d:54:d9: cb:11:5b:9b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFQowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI2MDMxNTAxMzEyOVoXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoM0E2MkM0N0I2MzkxMTRGNjgyQzlFNUEyODU2QkMwRjlDMzNFQzY0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyeDz2iso+ON6rkwVuf TUZbMT+bHrydOu8aolWuO3YB/qy7dp3UHx6ph8jkwB/buD7eZjOA2hPPdmZYOVRl tvJhmz9LlTN2xqCvQZr5CL5eE1ZKKGRdLz8REKlpVaNc9bD7p+nWEDlYLguM9T3X Tj5LSc7XxTipBTZt+iJPo//TtDY5JFPzp6dmL4XwsqoMjZMxwDrqKpJL4Q52i9Lt cJH44v28giFZFlXL2oHbcOU0hR7A/GDrrkSp/9KDfcY1KiUw0kkp0gcopmY2xnnI EZfvADbCXljAEa1T14mgJjsSe4Gb2PysEzWU9Zet4SnYG1yeb+TGBVEK7M7KqUb2 YfsCAwEAAaOCAoswggKHMB0GA1UdDgQWBBQ6YsR7Y5EU9oLJ5aKFa8D5wz7GSDAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyODIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjgyL09t TEVlMk9SRlBhQ3llV2loV3ZBLWNNLXhrZy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK/DAwDQYJKoZIhvcN AQELBQADggEBAEko4Mb9XpU1d5qLBWBCCMgTEsqVt4K3n8ZuuWvv/SPVNv+nlUZo 7RLENot84gq/+V31sh2k0+oCa3fRYFsDNd1u6rXGU/kOGXs6qW7uUUqAzBL9pzJK 27xloN5SK9ires7lZgVEy7a4PDXbEHIO9xtRaKH28Q+GQN+RhHGY+/i64nhEl0Ck wqycAWyRqxq0RENNTYsic1Hf0BIfEKMwoJcy+1K2K9Dtvhmj6LxbfqPWv7scYGNI WZfzy/9+UlizR0U0LIbFOP/+kpfF5ylgo9a5ZvUsvcAf4LAAn6iDFFjZoKKFvG3W vNLSNoDux2Mr+Pri1or0gg7d2C1U2csRW5s= -----END CERTIFICATE-----Generated at Thu Mar 26 11:51:22 2026 by rpki-client