$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer File: YNQ-Pv22Oi8kTw48OIxo2T7CWGU.cer (raw, json) Hash identifier: P7Lnidi7+8h1A4SuLUv/I3z6wLZWZC5UTjZUMRCsU1A= Subject key identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 16EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Jul 2026 01:34:22 +0000 Certificate not after: Thu 15 Jul 2027 01:30:02 +0000 Subordinate resources: IP: 166.119.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5870 (0x16ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Jul 15 01:34:22 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=60D43E3EFDB63A2F244F0E3C388C68D93EC25865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:8e:46:5c:04:6a:fb:78:41:bd:61:66:bf: aa:6c:5a:a4:09:a4:98:63:b6:33:72:ea:0a:3f:6b: 17:0c:38:83:3b:14:ce:2c:a2:57:75:b2:08:25:dd: 10:ec:f0:43:39:b9:8a:9c:e7:86:ef:de:73:32:a2: a4:7f:c5:bd:a5:f2:21:23:48:cd:b8:a9:65:23:92: fa:43:b7:18:b2:ca:b9:71:3d:0c:32:8a:7b:76:cb: f4:7b:d4:de:54:ab:89:2a:f7:f1:3e:17:f0:7f:93: f2:6d:cd:84:8b:a8:eb:e9:4a:e0:8c:fb:ba:61:34: b1:3b:a9:92:75:c4:9c:f8:43:80:26:e3:a6:92:94: d3:04:60:99:8c:96:42:52:a2:d4:b0:14:7a:97:89: f2:c5:21:fd:e1:b9:51:71:94:12:f9:5d:98:e4:b0: 25:7d:f4:ee:de:56:53:9c:1e:f2:07:18:89:6b:1a: 49:47:8e:a8:96:9f:a1:bf:a8:36:78:ee:2c:da:ce: f1:08:36:26:a7:f8:65:e4:7d:fa:fe:b3:eb:3e:53: 14:e9:e7:e0:03:32:5b:10:58:50:f3:be:db:ca:49: f8:03:dc:cd:68:44:a9:9c:33:af:8b:cd:e7:5d:35: f3:10:bc:fd:39:76:35:8e:40:ee:a2:c7:39:bc:2a: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:3E:3E:FD:B6:3A:2F:24:4F:0E:3C:38:8C:68:D9:3E:C2:58:65 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/YNQ-Pv22Oi8kTw48OIxo2T7CWGU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.119.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4f:4f:db:e6:02:9e:f2:78:92:76:7f:52:51:22:12:6f:38:49: f7:3d:94:93:37:15:8c:1a:b8:44:30:be:43:ec:18:1e:06:8d: d4:03:7c:45:7d:a9:13:e4:4c:8d:76:83:9e:f2:33:74:63:2c: c0:b1:e2:e0:5f:a1:d5:d2:e6:60:d8:15:98:82:eb:a5:30:d9: 3b:1c:25:04:cf:8b:97:83:40:ef:85:ad:ba:0d:47:96:d7:53: a6:16:c0:c0:9e:04:1f:d4:1b:a0:cf:1b:b9:24:9f:fd:09:cd: ef:d5:86:b4:92:0e:36:4f:c5:e4:b7:d7:df:95:92:12:c1:1a: da:cc:d9:2a:3b:12:5b:0d:93:92:18:25:f2:16:57:e0:86:fb: 20:00:9c:9c:9f:75:3a:55:05:c3:63:86:87:b8:1b:e0:5a:b7: dd:ee:0f:05:dd:39:e3:b6:86:9e:74:0f:4a:5a:79:d8:c4:a6: 69:4c:a7:1e:8b:56:a2:44:93:50:d0:df:5c:6b:8f:29:42:28: 28:71:5b:25:0f:52:f0:b9:52:9e:c5:fa:b4:b0:c1:21:56:f7: a0:15:73:e0:8c:cb:3b:0b:f1:8e:55:91:2b:4b:2f:10:b5:19: 25:15:ae:74:6e:c2:14:fd:3d:ff:ea:40:bb:6c:65:7a:cc:7d: 83:cf:99:fd -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICFu4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI2MDcxNTAxMzQyMloXDTI3MDcxNTAxMzAwMlowMzEx MC8GA1UEAxMoNjBENDNFM0VGREI2M0EyRjI0NEYwRTNDMzg4QzY4RDkzRUMyNTg2 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFZjkZcBGr7eEG9YWa/ qmxapAmkmGO2M3LqCj9rFww4gzsUziyiV3WyCCXdEOzwQzm5ipznhu/eczKipH/F vaXyISNIzbipZSOS+kO3GLLKuXE9DDKKe3bL9HvU3lSriSr38T4X8H+T8m3NhIuo 6+lK4Iz7umE0sTupknXEnPhDgCbjppKU0wRgmYyWQlKi1LAUepeJ8sUh/eG5UXGU EvldmOSwJX307t5WU5we8gcYiWsaSUeOqJafob+oNnjuLNrO8Qg2Jqf4ZeR9+v6z 6z5TFOnn4AMyWxBYUPO+28pJ+APczWhEqZwzr4vN51018xC8/Tl2NY5A7qLHObwq pj8CAwEAAaOCAoowggKGMB0GA1UdDgQWBBRg1D4+/bY6LyRPDjw4jGjZPsJYZTAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxODYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTg2L1lO US1QdjIyT2k4a1R3NDhPSXhvMlQ3Q1dHVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCmdzANBgkqhkiG9w0B AQsFAAOCAQEAT0/b5gKe8niSdn9SUSISbzhJ9z2UkzcVjBq4RDC+Q+wYHgaN1AN8 RX2pE+RMjXaDnvIzdGMswLHi4F+h1dLmYNgVmILrpTDZOxwlBM+Ll4NA74Wtug1H ltdTphbAwJ4EH9QboM8buSSf/QnN79WGtJIONk/F5LfX35WSEsEa2szZKjsSWw2T khgl8hZX4Ib7IACcnJ91OlUFw2OGh7gb4Fq33e4PBd0547aGnnQPSlp52MSmaUyn HotWokSTUNDfXGuPKUIoKHFbJQ9S8LlSnsX6tLDBIVb3oBVz4IzLOwvxjlWRK0sv ELUZJRWudG7CFP09/+pAu2xlesx9g8+Z/Q== -----END CERTIFICATE-----Generated at Fri Jul 24 03:57:58 2026 by rpki-client