$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer File: YYky9kHWUNyGDXQRrIrrbDXInQQ.cer (raw, json) Hash identifier: UnHyNylzZ8f76QdlrT/5V6ron9g+5VmFMRCZExFA3S8= Subject key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6E19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Jul 2026 01:42:38 +0000 Certificate not after: Thu 15 Jul 2027 01:30:02 +0000 Subordinate resources: IP: 2407:d600::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 13:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28185 (0x6e19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:42:38 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:36:4e:71:f5:6f:02:0e:78:a4:03:a8:43: 00:b4:fe:28:05:32:e4:96:b6:a9:68:37:b1:31:fd: de:ed:f9:7a:6f:d2:a8:ea:d2:bc:d6:ed:31:15:7f: 1e:d9:a5:61:bf:18:db:a5:9f:74:a2:ba:a4:5c:c3: 18:4e:20:80:7c:a3:2c:49:a2:cf:59:2d:38:a0:a5: b8:a1:de:61:90:0b:ba:da:4f:cd:04:d5:f6:6a:16: ed:78:f1:19:18:0a:46:46:9f:80:21:96:8f:4d:a9: d5:da:6f:2b:cc:58:09:50:64:a8:92:fd:27:34:70: 8f:99:a9:a9:ce:71:45:2e:7d:1c:83:7b:ca:4a:a6: 7c:1e:ef:41:79:7c:67:a1:82:9a:98:d5:5a:45:d1: 16:e9:bb:af:92:c3:33:6a:7b:f5:15:4f:27:3a:ae: 6d:0a:38:5b:12:10:d1:7a:82:44:8e:d3:6b:7f:e0: 02:d9:92:08:55:1e:0b:e5:76:68:c7:27:f9:bc:9d: a6:de:8a:1d:20:c2:80:13:d1:00:fa:ea:fe:29:61: e9:3d:e7:05:03:5e:3e:f8:e7:59:22:6b:04:cb:2a: 9c:b1:3c:67:57:e9:66:99:b2:a5:18:39:7b:9f:4d: 2a:b9:7e:db:c0:e3:40:d0:28:f9:89:8d:98:80:8d: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d600::/32 Signature Algorithm: sha256WithRSAEncryption 51:4b:f8:02:16:7d:2c:08:e7:66:d0:a0:86:ca:58:d1:4e:8f: 65:23:3d:10:e6:ed:1f:a4:b6:f7:3a:79:4d:76:b2:96:1a:ca: 4f:cb:7c:46:54:08:44:03:93:8e:51:98:9e:78:d3:75:01:97: c7:75:b6:d6:dc:17:72:92:7d:ec:a1:14:68:da:f7:63:aa:04: af:a2:f4:e9:0a:7f:9c:1e:5d:93:1b:f3:4c:20:e8:5e:b4:e0: 9b:2a:ff:16:c7:1c:fb:25:17:2e:02:22:80:79:13:93:27:8c: 7a:44:4a:de:92:07:f1:1c:53:3e:b4:6d:78:6e:f4:29:0a:fd: 4c:ea:a2:0c:11:12:d0:94:20:a2:3b:af:5d:32:0b:0d:b0:a9: f9:77:9c:42:7e:59:9e:5e:c5:bc:11:0a:10:c0:9e:2c:6a:1a: 02:8a:ef:ac:2b:27:20:fd:c9:80:27:62:61:23:30:8a:85:be: bb:65:45:ad:77:ad:c1:47:90:6f:2a:0c:7c:26:e2:41:b6:61: 81:65:92:b5:eb:38:4d:13:c7:33:84:7b:c7:ef:1c:07:48:c4: fd:04:a7:b1:04:7c:0d:22:f7:c4:f3:ce:ff:23:bf:ee:58:c3: 20:77:53:7b:fe:15:f0:c5:7f:8f:b2:78:fc:3f:e6:83:16:cb: 0f:f0:b4:8e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICbhkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDcxNTAxNDIzOFoXDTI3MDcxNTAxMzAwMlowMzEx MC8GA1UEAxMoNjE4OTMyRjY0MUQ2NTBEQzg2MEQ3NDExQUM4QUVCNkMzNUM4OUQw NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJWBNk5x9W8CDnikA6hD ALT+KAUy5Ja2qWg3sTH93u35em/SqOrSvNbtMRV/HtmlYb8Y26WfdKK6pFzDGE4g gHyjLEmiz1ktOKCluKHeYZALutpPzQTV9moW7XjxGRgKRkafgCGWj02p1dpvK8xY CVBkqJL9JzRwj5mpqc5xRS59HIN7ykqmfB7vQXl8Z6GCmpjVWkXRFum7r5LDM2p7 9RVPJzqubQo4WxIQ0XqCRI7Ta3/gAtmSCFUeC+V2aMcn+bydpt6KHSDCgBPRAPrq /ilh6T3nBQNePvjnWSJrBMsqnLE8Z1fpZpmypRg5e59NKrl+28DjQNAo+YmNmICN 1/ECAwEAAaOCAowwggKIMB0GA1UdDgQWBBRhiTL2QdZQ3IYNdBGsiutsNcidBDAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxODAvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTgwL1lZ a3k5a0hXVU55R0RYUVJySXJyYkRYSW5RUS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB9YAMA0GCSqGSIb3 DQEBCwUAA4IBAQBRS/gCFn0sCOdm0KCGyljRTo9lIz0Q5u0fpLb3OnlNdrKWGspP y3xGVAhEA5OOUZieeNN1AZfHdbbW3Bdykn3soRRo2vdjqgSvovTpCn+cHl2TG/NM IOhetOCbKv8Wxxz7JRcuAiKAeROTJ4x6RErekgfxHFM+tG14bvQpCv1M6qIMERLQ lCCiO69dMgsNsKn5d5xCflmeXsW8EQoQwJ4sahoCiu+sKycg/cmAJ2JhIzCKhb67 ZUWtd63BR5BvKgx8JuJBtmGBZZK16zhNE8czhHvH7xwHSMT9BKexBHwNIvfE887/ I7/uWMMgd1N7/hXwxX+Psnj8P+aDFssP8LSO -----END CERTIFICATE-----Generated at Fri Jul 24 14:22:48 2026 by rpki-client