$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer File: h80v1ZxgQ8yDCWlYE4HXooB-8sc.cer (raw, json) Hash identifier: 7czs6w0awuh+fRrL4iFt823vSpb37UhypmcuQXsXjbY= Subject key identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 5A80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Oct 2025 01:33:59 +0000 Certificate not after: Thu 15 Oct 2026 01:30:02 +0000 Subordinate resources: IP: 133.3.0.0/16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23168 (0x5a80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:33:59 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=87CD2FD59C6043CC830969581381D7A2807EF2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:4f:31:ae:59:98:c1:7b:6a:71:6f:9a:40: c7:02:de:fb:83:db:25:88:62:df:1b:eb:7b:c4:18: 55:11:2b:04:23:fc:6f:1a:4e:b0:cc:3e:a7:0c:6a: a2:54:f9:fb:d4:83:85:fc:3f:89:0e:88:55:16:5c: 85:78:55:10:a2:73:26:ad:88:4c:a1:69:2b:98:42: ed:c4:6f:2f:c2:1f:22:f3:ac:fa:7a:ca:c5:49:19: bb:17:fc:0a:99:1d:e0:14:79:42:f2:86:c1:04:1c: 0b:ad:6a:81:03:7a:7f:0f:16:2d:c3:38:9b:69:f3: 68:23:a3:5c:ff:43:87:a9:bd:25:32:01:99:ab:da: 7a:f9:68:91:6c:26:73:13:db:1a:91:c8:54:91:9f: 38:9a:3a:ed:56:01:4c:40:bb:0f:71:5c:91:f2:c2: ee:95:e3:ef:29:52:0d:73:06:e6:93:6d:ec:c9:c3: 0c:57:a6:67:73:9a:9c:8a:53:90:f5:a4:de:6d:c9: 16:c3:15:a5:c9:c0:db:ca:13:34:df:b1:29:ed:2e: c1:68:90:22:2b:73:fb:0d:83:ad:b4:a1:d2:15:ec: 97:f4:d2:60:25:9c:75:9e:61:1e:fb:57:48:93:e8: 61:0c:7f:a6:ba:99:54:a6:7b:82:e6:21:f8:f8:fb: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:2F:D5:9C:60:43:CC:83:09:69:58:13:81:D7:A2:80:7E:F2:C7 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/h80v1ZxgQ8yDCWlYE4HXooB-8sc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 37:f3:bf:8c:90:2f:7c:5d:21:57:78:87:f3:b9:27:7d:ad:c3: 13:2a:ed:51:e8:1e:0a:3a:ff:28:24:ec:a3:b3:d6:08:c6:f1: 03:bc:aa:f0:0d:f5:0b:02:7a:a7:c6:d9:40:9f:04:ff:5f:c3: 53:ab:01:fe:39:49:41:04:c7:fe:28:6b:01:4b:45:db:55:41: c4:99:47:a5:71:e2:a2:ee:8e:a0:ec:02:06:1c:f5:aa:23:e8: 5a:96:17:5c:0d:24:28:9d:61:29:7c:8b:bc:db:e2:e4:19:d3: e2:25:f2:db:a8:5d:cf:b1:af:c4:6b:8b:a0:a0:56:8c:dc:d0: 35:76:e7:15:6f:ea:9e:81:79:77:af:2d:64:c9:16:d3:18:cd: e3:5d:cf:50:f2:06:4b:fb:b9:fc:93:95:74:fa:6b:af:3c:c1: 05:ff:09:b7:ce:08:a8:0a:11:85:61:f7:c1:cf:70:4b:d3:a5: 4c:5e:94:04:cb:6e:f2:5c:dc:4e:4c:ba:43:2d:2e:1e:d4:bb: 20:3f:7d:ef:d7:21:9c:80:e8:e2:b0:0e:5c:0e:3a:f7:22:23: a5:ad:fe:1a:c9:d0:41:42:8c:51:d7:fd:d9:70:fb:e7:94:51: 5d:1b:26:1e:8f:25:0d:21:2d:cf:d8:b2:b4:70:6e:b7:f6:f8: 87:ad:f1:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICWoAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MTAxNTAxMzM1OVoXDTI2MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoODdDRDJGRDU5QzYwNDNDQzgzMDk2OTU4MTM4MUQ3QTI4MDdFRjJD NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgrTzGuWZjBe2pxb5pA xwLe+4PbJYhi3xvre8QYVRErBCP8bxpOsMw+pwxqolT5+9SDhfw/iQ6IVRZchXhV EKJzJq2ITKFpK5hC7cRvL8IfIvOs+nrKxUkZuxf8Cpkd4BR5QvKGwQQcC61qgQN6 fw8WLcM4m2nzaCOjXP9Dh6m9JTIBmavaevlokWwmcxPbGpHIVJGfOJo67VYBTEC7 D3FckfLC7pXj7ylSDXMG5pNt7MnDDFemZ3OanIpTkPWk3m3JFsMVpcnA28oTNN+x Ke0uwWiQIitz+w2DrbSh0hXsl/TSYCWcdZ5hHvtXSJPoYQx/prqZVKZ7guYh+Pj7 498CAwEAAaOCAogwggKEMB0GA1UdDgQWBBSHzS/VnGBDzIMJaVgTgdeigH7yxzAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAQYIKwYBBQUHAQsEgfQw gfEwQwYIKwYBBQUHMAWGN3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMTk0OS8wYgYIKwYBBQUHMAqGVnJzeW5jOi8vcnBr aS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTk0OS9oODB2 MVp4Z1E4eURDV2xZRTRIWG9vQi04c2MubWZ0MEYGCCsGAQUFBzANhjpodHRwczov L3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24u eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhQMwDQYJKoZIhvcNAQEL BQADggEBADfzv4yQL3xdIVd4h/O5J32twxMq7VHoHgo6/ygk7KOz1gjG8QO8qvAN 9QsCeqfG2UCfBP9fw1OrAf45SUEEx/4oawFLRdtVQcSZR6Vx4qLujqDsAgYc9aoj 6FqWF1wNJCidYSl8i7zb4uQZ0+Il8tuoXc+xr8Rri6CgVozc0DV25xVv6p6BeXev LWTJFtMYzeNdz1DyBkv7ufyTlXT6a688wQX/CbfOCKgKEYVh98HPcEvTpUxelATL bvJc3E5MukMtLh7UuyA/fe/XIZyA6OKwDlwOOvciI6Wt/hrJ0EFCjFHX/dlw++eU UV0bJh6PJQ0hLc/YsrRwbrf2+Iet8XY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:57 2025 by rpki-client