$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer File: VfNagqI2vO2BkIjU2QiH4Lllx88.cer (raw, json) Hash identifier: s/ZZ2NhmO66GfvcsnbLkjhIvTqJZ8H4XgHuxZyiNLOI= Subject key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5A49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:32:24 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 180.235.140.0/22 IP: 202.70.176.0/20 IP: 210.255.240.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 12:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23113 (0x5a49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:32:24 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=55F35A82A236BCED819088D4D90887E0B965C7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:38:6d:64:24:44:de:7c:c1:82:21:45:3b: 3d:bb:b7:35:48:54:65:a9:37:0e:70:62:32:8e:e6: 3e:f7:4b:18:9f:20:11:9f:0c:f3:93:5d:d1:a6:01: 05:ae:8b:d3:0c:cc:49:f3:5e:96:3e:93:f1:9e:0c: a2:1d:ce:5f:32:f3:57:fa:78:85:10:40:65:8d:8e: bb:f9:ba:92:f2:3c:a9:5e:7d:32:32:da:26:fe:2e: 04:f9:48:d6:31:a1:8e:f6:fb:52:92:95:14:34:62: ac:dc:55:eb:63:aa:0f:0f:5e:8e:c1:14:c1:33:f4: 07:b5:19:2d:36:09:46:10:52:14:5b:5a:e3:ac:01: 76:6f:ca:27:21:c2:8e:84:4c:2e:e1:e1:14:b1:ca: c5:5a:7f:f0:6e:da:5f:52:71:45:ee:6d:ab:e2:60: 5b:cf:ff:a3:b1:96:a5:0b:85:cf:da:ae:25:36:ab: 64:8e:b9:64:f4:4c:00:f9:12:e1:90:0a:5c:ab:a2: 90:e1:21:ea:b0:8d:19:01:74:bf:7d:84:67:98:7a: 1e:82:b3:6d:a5:29:da:8b:da:49:a0:c5:33:bb:09: af:4d:6e:fb:58:98:e5:23:6b:f8:23:c6:c1:83:92: cb:e2:5d:20:8f:df:21:e1:f7:12:f7:75:62:7d:11: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.235.140.0/22 202.70.176.0/20 210.255.240.0/20 Signature Algorithm: sha256WithRSAEncryption 90:d7:39:5b:60:8d:70:5e:45:27:fb:e8:bb:a5:ab:d6:37:11: aa:76:a6:d3:a7:66:6f:cb:18:8b:95:81:15:8c:51:3e:b3:f8: de:cc:3b:78:9a:84:2c:f0:5e:ea:bb:b2:95:b1:e0:a9:a8:be: 4e:ec:0e:de:46:1f:98:43:3b:02:c6:5e:f4:0f:29:66:fa:c3: fa:ef:c6:91:92:b6:6a:08:72:b1:79:28:e8:76:2e:e4:4d:d2: 3d:b8:5e:19:68:0c:8c:c4:e8:70:1d:da:89:2d:e9:e9:96:8b: f1:9a:e3:b5:4b:76:fc:f9:1d:11:56:a4:31:fb:72:cc:07:53: b8:1f:35:ca:13:7a:e9:8d:d4:ce:a3:47:58:f8:f5:1f:2d:a0: 96:89:04:1c:98:97:6c:21:c1:ad:c3:90:67:d8:5c:51:3e:12: 33:70:27:cd:7a:d6:6f:86:9c:05:40:c1:6a:3c:91:05:18:a9: 90:13:2f:85:9f:81:70:de:a3:11:e9:a1:90:b3:b1:f4:5b:66: 30:b3:71:09:29:07:fe:dc:ad:b4:44:f2:b7:4b:d2:25:57:bc: 92:90:84:76:e6:22:24:3b:ce:1f:05:f9:3a:db:63:64:ba:d7: 58:77:78:3e:ac:4a:0b:ff:1a:fd:4c:86:10:8c:18:2d:d1:35: 10:3c:0d:91 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICWkkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxMzIyNFoXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoNTVGMzVBODJBMjM2QkNFRDgxOTA4OEQ0RDkwODg3RTBCOTY1QzdD RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALItOG1kJETefMGCIUU7 Pbu3NUhUZak3DnBiMo7mPvdLGJ8gEZ8M85Nd0aYBBa6L0wzMSfNelj6T8Z4Moh3O XzLzV/p4hRBAZY2Ou/m6kvI8qV59MjLaJv4uBPlI1jGhjvb7UpKVFDRirNxV62Oq Dw9ejsEUwTP0B7UZLTYJRhBSFFta46wBdm/KJyHCjoRMLuHhFLHKxVp/8G7aX1Jx Re5tq+JgW8//o7GWpQuFz9quJTarZI65ZPRMAPkS4ZAKXKuikOEh6rCNGQF0v32E Z5h6HoKzbaUp2ovaSaDFM7sJr01u+1iY5SNr+CPGwYOSy+JdII/fIeH3Evd1Yn0R RFECAwEAAaOCApIwggKOMB0GA1UdDgQWBBRV81qCoja87YGQiNTZCIfguWXHzzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84NDgvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg0OC9WZk5hZ3FJ MnZPMkJrSWpVMlFpSDRMbGx4ODgubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCtOuMAwQEykawAwQE0v/wMA0G CSqGSIb3DQEBCwUAA4IBAQCQ1zlbYI1wXkUn++i7pavWNxGqdqbTp2ZvyxiLlYEV jFE+s/jezDt4moQs8F7qu7KVseCpqL5O7A7eRh+YQzsCxl70Dylm+sP678aRkrZq CHKxeSjodi7kTdI9uF4ZaAyMxOhwHdqJLenplovxmuO1S3b8+R0RVqQx+3LMB1O4 HzXKE3rpjdTOo0dY+PUfLaCWiQQcmJdsIcGtw5Bn2FxRPhIzcCfNetZvhpwFQMFq PJEFGKmQEy+Fn4Fw3qMR6aGQs7H0W2Yws3EJKQf+3K20RPK3S9IlV7ySkIR25iIk O84fBfk622NkutdYd3g+rEoL/xr9TIYQjBgt0TUQPA2R -----END CERTIFICATE-----Generated at Mon Oct 20 14:05:54 2025 by rpki-client