$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/TE1p2OQ7d9VD0cHYL2071kDTk58.cer File: TE1p2OQ7d9VD0cHYL2071kDTk58.cer (raw, json) Hash identifier: haTyMjHcE3JFaVNaEVk1hhfUUh6XzzN0inTWX7MH11Y= Subject key identifier: 4C:4D:69:D8:E4:3B:77:D5:43:D1:C1:D8:2F:6D:3B:D6:40:D3:93:9F Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 1534 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20275/TE1p2OQ7d9VD0cHYL2071kDTk58.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20275/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:37:14 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 192.135.92.0/24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5428 (0x1534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Mar 15 01:37:14 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=4C4D69D8E43B77D543D1C1D82F6D3BD640D3939F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:bd:da:79:57:e2:1d:19:e2:03:2e:0f:0a: fb:26:13:a7:6a:49:dd:5b:b2:68:d5:c9:c7:03:22: 93:3f:a2:0a:17:c2:e5:0a:25:f5:bf:a4:ce:ba:17: 5b:df:ec:6e:ac:01:3f:37:2f:60:13:d6:dc:67:74: c1:56:42:38:59:61:6e:25:c4:c2:24:90:c2:df:1e: 31:ee:91:8d:7b:6e:e6:db:e0:f3:e4:06:91:f3:ce: 7b:e6:62:6d:be:fe:41:70:7d:c9:0e:62:00:34:4f: 74:22:12:d0:3e:0c:91:49:08:e1:38:bb:81:64:c2: a5:4e:64:ce:80:36:0e:23:9f:9c:b3:3f:2a:16:36: e4:13:15:e4:94:af:c7:65:19:98:54:1e:e7:88:82: f0:01:a8:ed:d1:c0:b6:e0:5c:78:d6:46:8b:d1:ec: 69:b3:59:6c:d7:10:a8:3b:0f:9b:27:ea:14:19:b4: 3e:be:9d:e3:df:51:8a:4b:2c:01:ac:42:19:c5:03: ca:b8:9a:bc:2b:34:0b:cf:a5:55:ac:99:4d:ca:f4: b8:dd:d5:9a:4a:31:6d:2f:f5:94:a3:5e:85:55:6d: ec:2e:99:ee:5f:bb:86:bc:57:49:f0:ab:0f:86:3b: c6:83:7e:0b:37:26:a0:6c:e1:63:af:fb:78:65:3b: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4D:69:D8:E4:3B:77:D5:43:D1:C1:D8:2F:6D:3B:D6:40:D3:93:9F X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20275/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20275/TE1p2OQ7d9VD0cHYL2071kDTk58.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.135.92.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:f3:41:f4:2e:29:7a:da:4c:e8:2f:e6:dd:a6:1a:76:86:7c: 1b:b9:b2:d4:8a:b5:c5:75:5f:4f:7f:12:6b:c0:71:1c:12:a6: 1e:ae:5b:db:db:ad:02:ca:d9:89:3d:33:c4:61:2a:ef:70:0a: 83:1a:e0:26:62:ce:4a:32:a7:07:9f:eb:cd:df:70:89:d6:4d: a2:cf:ed:c3:01:66:3e:02:01:5c:65:ac:8f:3a:b9:ed:17:cc: 7b:83:74:d1:c8:9a:b9:30:04:25:25:72:04:b9:9a:fd:2e:26: 4e:07:51:64:d7:aa:1f:4d:31:8b:b4:88:af:11:cf:da:4a:ae: 94:d0:80:cd:e5:d9:31:01:d5:e3:5b:d2:db:4a:53:5c:3d:c3: 86:43:05:5a:cd:eb:82:93:b8:6c:8c:1f:42:25:a3:21:d4:79: 5c:54:b0:09:da:90:2d:cc:d9:0b:64:e9:a6:a5:53:10:e9:3f: 39:05:3a:f0:de:d7:2c:72:9b:cb:a5:42:b2:ae:11:bf:87:22: b6:51:ce:3a:71:43:db:c8:11:e8:8e:07:0e:21:5f:c2:dd:95: a2:0f:8c:3f:d0:42:45:af:81:b1:c7:2d:e0:e2:8a:b6:0e:f9: cf:4a:e4:a8:8c:4e:98:f3:e3:44:71:03:32:76:fa:91:93:cd: 62:14:de:f3 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFTQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI2MDMxNTAxMzcxNFoXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoNEM0RDY5RDhFNDNCNzdENTQzRDFDMUQ4MkY2RDNCRDY0MEQzOTM5 RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANhQvdp5V+IdGeIDLg8K +yYTp2pJ3VuyaNXJxwMikz+iChfC5Qol9b+kzroXW9/sbqwBPzcvYBPW3Gd0wVZC OFlhbiXEwiSQwt8eMe6RjXtu5tvg8+QGkfPOe+Zibb7+QXB9yQ5iADRPdCIS0D4M kUkI4Ti7gWTCpU5kzoA2DiOfnLM/KhY25BMV5JSvx2UZmFQe54iC8AGo7dHAtuBc eNZGi9HsabNZbNcQqDsPmyfqFBm0Pr6d499RikssAaxCGcUDyriavCs0C8+lVayZ Tcr0uN3VmkoxbS/1lKNehVVt7C6Z7l+7hrxXSfCrD4Y7xoN+CzcmoGzhY6/7eGU7 gqcCAwEAAaOCAoswggKHMB0GA1UdDgQWBBRMTWnY5Dt31UPRwdgvbTvWQNOTnzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyNzUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjc1L1RF MXAyT1E3ZDlWRDBjSFlMMjA3MWtEVGs1OC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAh1wwDQYJKoZIhvcN AQELBQADggEBAIrzQfQuKXraTOgv5t2mGnaGfBu5stSKtcV1X09/EmvAcRwSph6u W9vbrQLK2Yk9M8RhKu9wCoMa4CZizkoypwef683fcInWTaLP7cMBZj4CAVxlrI86 ue0XzHuDdNHImrkwBCUlcgS5mv0uJk4HUWTXqh9NMYu0iK8Rz9pKrpTQgM3l2TEB 1eNb0ttKU1w9w4ZDBVrN64KTuGyMH0IloyHUeVxUsAnakC3M2Qtk6aalUxDpPzkF OvDe1yxym8ulQrKuEb+HIrZRzjpxQ9vIEeiOBw4hX8LdlaIPjD/QQkWvgbHHLeDi irYO+c9K5KiMTpjz40RxAzJ2+pGTzWIU3vM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:31:24 2026 by rpki-client