$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer File: VfNagqI2vO2BkIjU2QiH4Lllx88.cer (raw, json) Hash identifier: kURJvl8XC/xh0/S5lNIytar97Zek79gVobJXyxFZ4JA= Subject key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6E1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Jul 2026 01:42:47 +0000 Certificate not after: Thu 15 Jul 2027 01:30:02 +0000 Subordinate resources: IP: 180.235.140.0/22 IP: 202.70.176.0/20 IP: 210.255.240.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28191 (0x6e1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:42:47 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=55F35A82A236BCED819088D4D90887E0B965C7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:38:6d:64:24:44:de:7c:c1:82:21:45:3b: 3d:bb:b7:35:48:54:65:a9:37:0e:70:62:32:8e:e6: 3e:f7:4b:18:9f:20:11:9f:0c:f3:93:5d:d1:a6:01: 05:ae:8b:d3:0c:cc:49:f3:5e:96:3e:93:f1:9e:0c: a2:1d:ce:5f:32:f3:57:fa:78:85:10:40:65:8d:8e: bb:f9:ba:92:f2:3c:a9:5e:7d:32:32:da:26:fe:2e: 04:f9:48:d6:31:a1:8e:f6:fb:52:92:95:14:34:62: ac:dc:55:eb:63:aa:0f:0f:5e:8e:c1:14:c1:33:f4: 07:b5:19:2d:36:09:46:10:52:14:5b:5a:e3:ac:01: 76:6f:ca:27:21:c2:8e:84:4c:2e:e1:e1:14:b1:ca: c5:5a:7f:f0:6e:da:5f:52:71:45:ee:6d:ab:e2:60: 5b:cf:ff:a3:b1:96:a5:0b:85:cf:da:ae:25:36:ab: 64:8e:b9:64:f4:4c:00:f9:12:e1:90:0a:5c:ab:a2: 90:e1:21:ea:b0:8d:19:01:74:bf:7d:84:67:98:7a: 1e:82:b3:6d:a5:29:da:8b:da:49:a0:c5:33:bb:09: af:4d:6e:fb:58:98:e5:23:6b:f8:23:c6:c1:83:92: cb:e2:5d:20:8f:df:21:e1:f7:12:f7:75:62:7d:11: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.235.140.0/22 202.70.176.0/20 210.255.240.0/20 Signature Algorithm: sha256WithRSAEncryption 6c:b5:94:c1:c6:c3:a1:22:98:b6:32:5c:44:fe:ba:72:81:5c: 81:14:3e:ee:27:a7:ba:12:59:4f:46:91:bb:5d:9c:5c:38:49: ad:4d:35:98:a2:2c:9d:63:6f:14:4a:44:93:76:c5:7f:9c:0c: 70:04:14:c6:28:c3:4a:9e:07:86:0f:64:ef:97:3c:81:b0:b1: 4b:f0:5c:73:ca:dc:70:82:e9:0b:11:6a:ea:e4:97:c4:1e:2a: 98:f3:e4:10:59:20:f2:e1:23:c4:d9:ec:83:33:d2:44:2c:ca: da:03:a0:4e:c9:02:94:5f:c8:dd:bd:15:88:45:70:06:2a:69: 78:b0:62:2c:92:b1:af:17:c2:38:80:b9:4d:64:8a:05:b5:91: d5:ee:fd:6e:6b:e4:7a:ae:0d:50:95:00:38:9e:19:e6:cc:80: 1b:c7:a3:af:a9:1a:e2:15:52:53:70:bf:94:81:86:4f:0c:76: 59:21:99:38:33:14:ee:eb:ee:d4:1b:48:d9:38:a0:5b:76:ac: 1d:8f:c5:13:72:36:18:f1:41:19:2a:a1:47:ca:31:dd:53:51: ee:11:17:a5:0b:b4:bf:c2:0c:53:8b:8c:db:00:1a:62:1e:09: 5f:49:09:98:ce:1c:b9:7f:66:3f:c0:5d:8e:90:d8:22:f8:c5: 4b:25:9d:18 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICbh8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDcxNTAxNDI0N1oXDTI3MDcxNTAxMzAwMlowMzEx MC8GA1UEAxMoNTVGMzVBODJBMjM2QkNFRDgxOTA4OEQ0RDkwODg3RTBCOTY1QzdD RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALItOG1kJETefMGCIUU7 Pbu3NUhUZak3DnBiMo7mPvdLGJ8gEZ8M85Nd0aYBBa6L0wzMSfNelj6T8Z4Moh3O XzLzV/p4hRBAZY2Ou/m6kvI8qV59MjLaJv4uBPlI1jGhjvb7UpKVFDRirNxV62Oq Dw9ejsEUwTP0B7UZLTYJRhBSFFta46wBdm/KJyHCjoRMLuHhFLHKxVp/8G7aX1Jx Re5tq+JgW8//o7GWpQuFz9quJTarZI65ZPRMAPkS4ZAKXKuikOEh6rCNGQF0v32E Z5h6HoKzbaUp2ovaSaDFM7sJr01u+1iY5SNr+CPGwYOSy+JdII/fIeH3Evd1Yn0R RFECAwEAAaOCApIwggKOMB0GA1UdDgQWBBRV81qCoja87YGQiNTZCIfguWXHzzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NDgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg0OC9WZk5hZ3FJ MnZPMkJrSWpVMlFpSDRMbGx4ODgubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCtOuMAwQEykawAwQE0v/wMA0G CSqGSIb3DQEBCwUAA4IBAQBstZTBxsOhIpi2MlxE/rpygVyBFD7uJ6e6EllPRpG7 XZxcOEmtTTWYoiydY28USkSTdsV/nAxwBBTGKMNKngeGD2TvlzyBsLFL8Fxzytxw gukLEWrq5JfEHiqY8+QQWSDy4SPE2eyDM9JELMraA6BOyQKUX8jdvRWIRXAGKml4 sGIskrGvF8I4gLlNZIoFtZHV7v1ua+R6rg1QlQA4nhnmzIAbx6OvqRriFVJTcL+U gYZPDHZZIZk4MxTu6+7UG0jZOKBbdqwdj8UTcjYY8UEZKqFHyjHdU1HuERelC7S/ wgxTi4zbABpiHglfSQmYzhy5f2Y/wF2OkNgi+MVLJZ0Y -----END CERTIFICATE-----Generated at Fri Jul 24 06:09:49 2026 by rpki-client