$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer File: UrIcP3vIfuQhVlQCwqMPsivcnjw.cer (raw, json) Hash identifier: 1hNHrxt6zN8KQK8mYvR9fxJyJhKpeoRLaPg2h9zZ8Ws= Subject key identifier: 52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Mar 2026 01:31:32 +0000 Certificate not after: Mon 15 Mar 2027 01:30:02 +0000 Subordinate resources: IP: 202.126.24.0/21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25640 (0x6428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Mar 15 01:31:32 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:19:56:18:a4:e8:2d:0e:ec:18:78:e1:fe: 5f:f8:96:68:c2:29:11:d1:74:b8:28:d6:62:64:1d: 62:79:f0:6c:cd:7e:f3:94:19:ca:08:f7:46:39:90: 6c:43:10:17:a7:42:64:e1:97:5a:2d:42:b9:0f:fc: 60:82:c7:65:92:45:43:e0:2f:9d:08:94:51:11:af: 38:cf:b9:10:c7:c6:5d:97:c6:40:26:39:9d:3c:8a: ee:1c:f4:d3:25:4e:f0:a3:95:5a:89:8c:62:3e:44: 4e:9f:f2:a2:b4:34:4b:b4:44:36:5b:d6:45:83:ff: 28:4d:fa:a5:ee:a8:59:9e:59:15:15:00:4f:0c:99: 50:4d:aa:c6:0c:f5:4f:74:59:46:ec:c7:7d:3e:8f: 80:48:56:5c:7e:6a:84:ca:59:b0:d2:ce:7a:e1:4a: f9:d0:fa:61:07:cb:1d:7f:ae:fc:3e:03:31:12:4f: 25:8f:29:f2:bc:5b:48:4f:e5:cb:a1:23:88:0e:9d: c5:b6:cb:b2:34:15:a5:20:9e:7d:2a:91:fd:f3:88: cf:b0:25:bd:23:ea:1b:95:e6:54:9f:62:73:ad:24: 87:69:7f:cf:d7:a6:37:14:2e:01:75:42:60:d2:06: 9a:6e:b0:4e:99:38:99:4c:42:6b:70:98:30:a7:f7: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.126.24.0/21 Signature Algorithm: sha256WithRSAEncryption 84:69:17:ec:c4:3c:cf:19:4b:da:41:04:00:5d:d3:21:6c:ec: d3:4b:4f:3e:70:a7:44:6b:b0:b2:80:7d:c7:9c:dc:50:50:1f: 07:40:b8:1d:02:29:73:0f:d3:c8:fc:4a:11:bd:cc:45:f6:5f: 25:09:44:ea:f2:8f:d5:c7:c3:82:5c:6c:b4:63:d7:e9:57:14: 30:c8:37:10:a8:f9:e9:38:c3:85:af:fc:b9:cc:dd:f3:34:fb: 82:f5:8d:17:f8:2a:2e:1d:03:a0:07:fe:ab:e4:7b:92:73:ee: 13:16:91:cd:39:33:9c:48:a2:10:22:b8:16:97:a0:96:8e:12: ae:07:fb:e8:e9:e1:d0:68:e3:a7:52:1e:c9:0e:e0:09:5c:c9: 29:17:6b:9d:ca:51:e1:b3:e3:89:d7:3d:37:ca:83:67:5b:09: a5:93:55:4b:cb:74:0f:22:ce:7b:0c:c1:d1:0a:cf:d5:34:a6: 22:1b:cb:7b:52:41:4f:e0:1a:64:3d:9a:02:c3:24:51:44:5f: 05:f6:0f:97:c7:87:34:b7:32:74:d9:72:f5:77:ca:8a:1f:1e: 2e:d5:ba:3f:a9:65:89:bf:0d:50:dd:ec:68:19:20:6c:85:4c: 24:c6:6e:0a:6e:93:96:b5:69:9c:66:2a:fb:47:34:3f:ed:67: c6:65:51:b8 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICZCgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDMxNTAxMzEzMloXDTI3MDMxNTAxMzAwMlowMzEx MC8GA1UEAxMoNTJCMjFDM0Y3QkM4N0VFNDIxNTY1NDAyQzJBMzBGQjIyQkRDOUUz QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtlGVYYpOgtDuwYeOH+ X/iWaMIpEdF0uCjWYmQdYnnwbM1+85QZygj3RjmQbEMQF6dCZOGXWi1CuQ/8YILH ZZJFQ+AvnQiUURGvOM+5EMfGXZfGQCY5nTyK7hz00yVO8KOVWomMYj5ETp/yorQ0 S7RENlvWRYP/KE36pe6oWZ5ZFRUATwyZUE2qxgz1T3RZRuzHfT6PgEhWXH5qhMpZ sNLOeuFK+dD6YQfLHX+u/D4DMRJPJY8p8rxbSE/ly6EjiA6dxbbLsjQVpSCefSqR /fOIz7AlvSPqG5XmVJ9ic60kh2l/z9emNxQuAXVCYNIGmm6wTpk4mUxCa3CYMKf3 hNcCAwEAAaOCAoYwggKCMB0GA1UdDgQWBBRSshw/e8h+5CFWVALCow+yK9yePDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC85MzgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzkzOC9VckljUDN2 SWZ1UWhWbFFDd3FNUHNpdmNuancubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyn4YMA0GCSqGSIb3DQEBCwUA A4IBAQCEaRfsxDzPGUvaQQQAXdMhbOzTS08+cKdEa7CygH3HnNxQUB8HQLgdAilz D9PI/EoRvcxF9l8lCUTq8o/Vx8OCXGy0Y9fpVxQwyDcQqPnpOMOFr/y5zN3zNPuC 9Y0X+CouHQOgB/6r5HuSc+4TFpHNOTOcSKIQIrgWl6CWjhKuB/vo6eHQaOOnUh7J DuAJXMkpF2udylHhs+OJ1z03yoNnWwmlk1VLy3QPIs57DMHRCs/VNKYiG8t7UkFP 4BpkPZoCwyRRRF8F9g+Xx4c0tzJ02XL1d8qKHx4u1bo/qWWJvw1Q3exoGSBshUwk xm4KbpOWtWmcZir7RzQ/7WfGZVG4 -----END CERTIFICATE-----Generated at Thu Mar 26 13:29:47 2026 by rpki-client