$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/V4D5BWc46zQtpQxZ1ErpA4w2zwY.cer File: V4D5BWc46zQtpQxZ1ErpA4w2zwY.cer (raw, json) Hash identifier: sqvsrvo4tafTH3RsCtR2xhpm/vUyNhPakINu1hy4jI4= Subject key identifier: 57:80:F9:05:67:38:EB:34:2D:A5:0C:59:D4:4A:E9:03:8C:36:CF:06 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 75AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4314/V4D5BWc46zQtpQxZ1ErpA4w2zwY.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4314/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Nov 2026 01:31:10 +0000 Certificate not after: Mon 15 Nov 2027 01:30:02 +0000 Subordinate resources: IP: 202.11.252.0/24 IP: 202.244.224.0/21 IP: 202.251.248.0/22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30124 (0x75ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Nov 15 01:31:10 2026 GMT Not After : Nov 15 01:30:02 2027 GMT Subject: CN=5780F9056738EB342DA50C59D44AE9038C36CF06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:02:a0:f6:7c:d3:4b:d1:ab:fe:20:ba:96: 63:d7:65:d5:bb:dd:16:69:71:8d:44:37:6e:62:ba: 45:21:c8:3f:e6:65:39:e2:d9:47:a5:d2:51:50:2a: 60:d7:b3:30:98:5b:9e:d9:3e:92:c3:4e:8a:b9:32: a7:65:6c:55:a6:8e:40:59:52:8b:92:58:85:5a:71: a0:96:9c:5f:29:27:e7:72:b3:9b:54:67:a8:80:36: 72:3a:ae:35:eb:df:4a:8d:0e:32:6d:97:b9:40:c0: 8b:34:d9:18:82:f6:d5:00:41:6e:59:61:51:77:d7: a2:a3:bc:69:3e:53:3c:ff:90:f9:08:a0:fd:72:99: 4a:9e:fb:ed:6a:43:96:33:34:7e:28:c7:7b:f3:66: 6b:9f:41:bc:5a:4e:58:4b:ed:fb:53:d7:10:28:3b: 8e:42:ce:80:ba:26:ea:af:60:e0:b2:22:d3:cf:30: e1:8d:0e:93:cd:4c:c1:d5:be:31:0b:ef:2d:ed:6d: a7:85:a6:5c:f8:7c:06:19:32:17:60:a0:2b:76:e5: d9:42:fc:c0:b1:89:8a:bd:a2:89:27:f8:4d:82:af: bf:ae:49:2e:c8:9f:5a:f3:ac:06:ea:72:da:45:9a: 6f:73:76:48:41:48:f8:9c:e7:d5:0a:c8:89:0d:9b: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:80:F9:05:67:38:EB:34:2D:A5:0C:59:D4:4A:E9:03:8C:36:CF:06 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4314/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4314/V4D5BWc46zQtpQxZ1ErpA4w2zwY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.11.252.0/24 202.244.224.0/21 202.251.248.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:b1:e7:20:8c:fc:95:58:33:fa:37:cb:7b:f9:e5:f7:f2:92: 3c:88:c6:1b:a3:71:c0:5a:7d:15:7c:5e:2a:61:5e:30:70:62: 20:c7:08:e1:2e:47:9c:7a:92:6a:6e:22:95:42:2f:44:e1:5f: 94:98:75:e8:f3:a4:8b:fd:a6:9d:c6:76:b2:9f:1c:be:a4:3e: e0:8b:60:92:b0:ec:63:20:56:4d:a8:34:10:4a:ba:c8:f6:fe: c1:ae:46:c9:bf:aa:20:c3:99:5b:92:33:6a:77:f4:6f:89:58: 10:3f:a8:f8:0b:e6:bc:81:4a:32:38:58:57:57:b0:ad:23:c9: 6c:50:2e:c8:bf:c4:dc:9f:c9:cc:8f:88:ea:df:e9:a9:3f:e8: d1:a7:fd:b1:71:77:66:52:01:45:60:21:af:da:9d:5f:d6:ee: cc:44:e0:c5:04:b6:aa:fd:f6:3a:e5:e5:26:1f:c0:4a:ab:ea: 47:f9:af:56:c2:2c:11:e6:27:84:53:62:42:96:bd:a4:14:49: 84:6c:0d:82:2a:14:f1:97:29:6a:5b:a9:26:e7:a3:23:44:1e: db:ac:87:ef:b1:e0:7c:c9:2b:9d:a5:9d:b1:c5:55:39:1a:65: fc:44:1d:e0:ff:80:53:86:79:c8:3b:d2:b6:fe:4d:ee:a6:0d: ac:d3:15:ec -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICdawwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTExNTAxMzExMFoXDTI3MTExNTAxMzAwMlowMzEx MC8GA1UEAxMoNTc4MEY5MDU2NzM4RUIzNDJEQTUwQzU5RDQ0QUU5MDM4QzM2Q0Yw NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtyAqD2fNNL0av+ILqW Y9dl1bvdFmlxjUQ3bmK6RSHIP+ZlOeLZR6XSUVAqYNezMJhbntk+ksNOirkyp2Vs VaaOQFlSi5JYhVpxoJacXykn53Kzm1RnqIA2cjquNevfSo0OMm2XuUDAizTZGIL2 1QBBbllhUXfXoqO8aT5TPP+Q+Qig/XKZSp777WpDljM0fijHe/Nma59BvFpOWEvt +1PXECg7jkLOgLom6q9g4LIi088w4Y0Ok81MwdW+MQvvLe1tp4WmXPh8BhkyF2Cg K3bl2UL8wLGJir2iiSf4TYKvv65JLsifWvOsBupy2kWab3N2SEFI+Jzn1QrIiQ2b 1McCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRXgPkFZzjrNC2lDFnUSukDjDbPBjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvNDMxNC8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNDMxNC9WNEQ1 QldjNDZ6UXRwUXhaMUVycEE0dzJ6d1kubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAygv8AwQDyvTgAwQCyvv4 MA0GCSqGSIb3DQEBCwUAA4IBAQBasecgjPyVWDP6N8t7+eX38pI8iMYbo3HAWn0V fF4qYV4wcGIgxwjhLkecepJqbiKVQi9E4V+UmHXo86SL/aadxnaynxy+pD7gi2CS sOxjIFZNqDQQSrrI9v7BrkbJv6ogw5lbkjNqd/RviVgQP6j4C+a8gUoyOFhXV7Ct I8lsUC7Iv8Tcn8nMj4jq3+mpP+jRp/2xcXdmUgFFYCGv2p1f1u7MRODFBLaq/fY6 5eUmH8BKq+pH+a9WwiwR5ieEU2JClr2kFEmEbA2CKhTxlylqW6km56MjRB7brIfv seB8ySudpZ2xxVU5GmX8RB3g/4BThnnIO9K2/k3upg2s0xXs -----END CERTIFICATE-----Generated at Sun Nov 15 19:21:38 2026 by rpki-client