$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer File: XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer (raw, json) Hash identifier: 1oLO7k47sDoDyyRi8qY8zVsTfuxoyyhf8QxS+WnIn+4= Subject key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5B99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:42:56 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 202.231.128.0 -- 202.231.175.255 IP: 210.141.160.0/20 IP: 210.156.128.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 12:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23449 (0x5b99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:42:56 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:ac:d8:e1:d7:7d:e2:f5:80:ee:80:ff:bd: 72:a7:12:bc:ba:f5:43:40:cf:de:2e:da:f4:0f:e3: a6:40:9b:c7:fd:3a:2d:c8:52:e7:49:f6:90:32:d1: a4:5a:aa:23:8c:61:21:65:f2:7d:89:28:f5:07:d0: f7:39:c9:39:f4:82:4d:c4:19:5c:9a:51:6f:fd:fd: 79:98:93:e2:95:0f:9d:40:65:a0:24:4f:3f:ba:88: 25:cd:aa:35:47:c8:b0:d3:bd:3f:c8:66:11:79:a0: a1:dc:b5:34:d6:59:32:ae:cd:62:28:50:9f:7f:38: fb:8e:4c:1e:38:13:15:1e:fe:bf:95:d6:f0:e0:8a: 1f:fc:b2:5e:36:35:33:ad:cc:ed:89:91:57:ad:d1: 01:39:9a:e5:8b:e3:dd:ef:e4:b3:1d:09:50:fd:cf: 16:e9:dc:4f:03:d4:5a:ef:c6:f3:d9:4c:1a:5d:ab: 86:d5:fe:35:6f:a6:30:e8:fb:b4:d4:08:9b:4a:8c: 99:12:fd:05:d4:dc:9c:3d:46:5a:d9:ff:10:b3:7e: 5d:fa:95:fd:a4:52:db:87:fc:df:ae:d5:4e:0e:da: 0f:01:97:91:84:2d:eb:e1:65:d2:f1:ed:94:64:3a: fc:27:fb:6b:04:14:61:a1:77:b2:61:fa:4b:a9:9e: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.231.128.0-202.231.175.255 210.141.160.0/20 210.156.128.0/20 Signature Algorithm: sha256WithRSAEncryption 80:99:4a:c6:04:fa:63:d5:3a:d3:26:4f:5f:06:28:bf:cb:6d: fb:d7:c3:b0:69:c4:4e:90:76:9c:45:7a:3d:90:0b:4b:7b:4e: d0:a3:d4:89:5b:9a:5d:fd:4e:16:01:71:52:a8:1c:c8:ea:8e: 91:86:b3:4d:24:9a:76:0f:7b:c9:ac:45:06:dc:50:21:bc:54: cb:3d:21:ed:10:9f:82:d3:3f:c2:da:41:c7:be:84:fe:99:b3: fe:45:30:8d:b1:6d:41:e0:4d:bb:17:17:a1:a6:f2:e5:f1:1c: a7:ce:11:73:2f:84:4e:f4:86:f6:fb:2d:a9:f3:39:3d:60:da: 5e:ff:ad:49:40:a7:9e:fd:e5:42:80:89:f3:b8:18:f7:81:46: 17:88:71:80:d9:40:27:87:9b:e2:2d:84:4e:74:76:d3:32:b4: aa:55:46:44:2d:d2:5a:b7:4d:e0:e3:55:fd:5c:17:cb:46:23: cc:8e:84:7c:ec:f5:9b:52:6c:48:da:af:dd:24:28:a2:cb:37: e9:4a:85:a3:8a:9b:40:b2:30:fa:3e:69:e2:db:16:a5:21:58: 6c:2c:61:4a:ac:01:4b:81:03:95:60:3f:24:5c:9d:ff:35:55: 73:74:57:b8:f9:dd:9f:70:53:7c:35:f1:76:e0:83:a1:87:0a: 60:66:d9:92 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICW5kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxNDI1NloXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoNUQ4RjQ4Rjk5QzVCMDc0NUI3N0Y4QkNBNzU0RTYzODg1Q0FEQzQx ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQsrNjh133i9YDugP+9 cqcSvLr1Q0DP3i7a9A/jpkCbx/06LchS50n2kDLRpFqqI4xhIWXyfYko9QfQ9znJ OfSCTcQZXJpRb/39eZiT4pUPnUBloCRPP7qIJc2qNUfIsNO9P8hmEXmgody1NNZZ Mq7NYihQn384+45MHjgTFR7+v5XW8OCKH/yyXjY1M63M7YmRV63RATma5Yvj3e/k sx0JUP3PFuncTwPUWu/G89lMGl2rhtX+NW+mMOj7tNQIm0qMmRL9BdTcnD1GWtn/ ELN+XfqV/aRS24f8367VTg7aDwGXkYQt6+Fl0vHtlGQ6/Cf7awQUYaF3smH6S6me K4UCAwEAAaOCApgwggKUMB0GA1UdDgQWBBRdj0j5nFsHRbd/i8p1TmOIXK3EGDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH9BggrBgEFBQcBCwSB8DCB 7TBBBggrBgEFBQcwBYY1cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC81NC8wYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBraS1y ZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTQvWFk5SS1aeGJC MFczZjR2S2RVNWppRnl0eEJnLm1mdDBGBggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtp LXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAz BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQHyueAAwQEyuegAwQE0o2gAwQE 0pyAMA0GCSqGSIb3DQEBCwUAA4IBAQCAmUrGBPpj1TrTJk9fBii/y23718OwacRO kHacRXo9kAtLe07Qo9SJW5pd/U4WAXFSqBzI6o6RhrNNJJp2D3vJrEUG3FAhvFTL PSHtEJ+C0z/C2kHHvoT+mbP+RTCNsW1B4E27FxehpvLl8RynzhFzL4RO9Ib2+y2p 8zk9YNpe/61JQKee/eVCgInzuBj3gUYXiHGA2UAnh5viLYROdHbTMrSqVUZELdJa t03g41X9XBfLRiPMjoR87PWbUmxI2q/dJCiiyzfpSoWjiptAsjD6Pmni2xalIVhs LGFKrAFLgQOVYD8kXJ3/NVVzdFe4+d2fcFN8NfF24IOhhwpgZtmS -----END CERTIFICATE-----Generated at Mon Oct 20 14:13:35 2025 by rpki-client