$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer File: iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer (raw, json) Hash identifier: mxhf89h/RanWBOeMbrYhauC2sa8YyPLqZdzGI1WNV4s= Subject key identifier: 88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 7356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer CRL Distribution Point: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/iKxYJ-pQhsWFNVOABbEqUfzR8PA.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 Oct 2026 01:31:00 +0000 Certificate not after: Fri 15 Oct 2027 01:30:02 +0000 Subordinate resources: IP: 2401:5300::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29526 (0x7356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Oct 15 01:31:00 2026 GMT Not After : Oct 15 01:30:02 2027 GMT Subject: CN=88AC5827EA5086C58535538005B12A51FCD1F0F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:2d:f8:2c:41:44:8b:d5:26:b1:03:a5:ed: 7e:f2:d7:1d:50:56:c5:f9:4d:3a:14:32:42:2a:bf: 87:e8:af:33:ef:71:cb:a6:c6:33:77:aa:a5:46:b6: ee:8f:3e:02:45:1c:d7:cb:37:c9:51:42:6f:b1:6a: 27:01:b5:28:b8:25:76:6b:1b:08:ee:49:af:b6:9d: 88:e0:7e:b1:d7:cb:7e:cc:d2:60:08:8c:4d:7a:fd: ef:24:4d:de:ae:58:71:19:96:b3:37:5b:d7:bb:45: 1f:4d:12:4c:cd:0b:a0:b8:c1:34:06:05:6f:1c:78: 2f:18:61:6f:60:63:5f:12:fb:9b:b4:24:18:a3:1e: 6f:da:5d:26:bd:95:70:ef:dc:9d:40:f5:6d:b9:b2: b8:19:23:2b:0f:2a:c3:9e:03:28:57:c6:d0:9e:57: 46:4a:8e:ea:7a:3a:41:de:52:4c:f0:7b:16:ff:ac: f4:3f:f8:c4:82:ca:fe:94:dc:80:ab:c5:27:33:3a: 04:a9:ec:a5:c0:eb:89:f0:ff:2d:8a:39:b3:7f:5c: 60:49:aa:5f:2a:84:ee:46:e2:ad:e3:b6:03:43:ff: 39:99:09:48:1b:c1:ad:93:24:0f:52:7d:5a:23:2a: 36:f5:a2:d6:48:ff:b5:f9:cf:32:7e:0b:2c:f8:bc: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/iKxYJ-pQhsWFNVOABbEqUfzR8PA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:5300::/32 Signature Algorithm: sha256WithRSAEncryption 37:0c:ad:de:f3:48:02:11:97:32:f3:53:5a:40:d5:2b:54:f4: 5f:10:be:2d:4c:da:58:dc:5d:a9:d9:1f:37:94:4a:a4:80:eb: 50:ec:13:12:ab:5f:5a:c3:53:30:5c:95:73:77:d1:21:71:be: c3:56:98:b9:e0:a0:f3:c7:03:a6:da:52:19:e3:fb:6d:7f:c4: c7:e2:0d:0b:00:e3:9f:ae:3a:20:4a:f8:88:d3:38:d5:69:06: dd:35:4d:d3:bd:db:57:b8:ca:e5:97:cf:69:b5:e7:01:5e:26: 72:25:49:7b:b7:4f:0c:f3:d7:14:7e:9c:48:86:7f:6b:be:b9: 02:80:b6:95:a1:05:6d:bf:98:b9:ea:b6:9f:05:a0:67:5b:29: ac:60:8e:f7:24:cc:99:bd:9a:57:a3:33:e2:f9:b9:81:08:b2: 4a:32:71:63:ec:e8:71:29:aa:fe:5d:ed:80:47:69:35:ed:91: 90:c1:cc:f5:9f:5a:40:a1:06:74:55:d2:9b:67:5f:80:49:06: 5d:7c:68:d7:aa:e4:87:0f:7a:1a:41:0c:11:cd:6b:88:0a:20: 1e:3f:a3:64:ad:d4:f9:d1:8e:b1:59:54:7a:bb:85:33:ad:cd: 5e:aa:a0:cd:11:26:e1:a4:0e:37:3e:a9:4a:01:7c:27:0a:7b: fb:ae:c9:36 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICc1YwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MTAxNTAxMzEwMFoXDTI3MTAxNTAxMzAwMlowMzEx MC8GA1UEAxMoODhBQzU4MjdFQTUwODZDNTg1MzU1MzgwMDVCMTJBNTFGQ0QxRjBG MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALWLLfgsQUSL1SaxA6Xt fvLXHVBWxflNOhQyQiq/h+ivM+9xy6bGM3eqpUa27o8+AkUc18s3yVFCb7FqJwG1 KLgldmsbCO5Jr7adiOB+sdfLfszSYAiMTXr97yRN3q5YcRmWszdb17tFH00STM0L oLjBNAYFbxx4Lxhhb2BjXxL7m7QkGKMeb9pdJr2VcO/cnUD1bbmyuBkjKw8qw54D KFfG0J5XRkqO6no6Qd5STPB7Fv+s9D/4xILK/pTcgKvFJzM6BKnspcDrifD/LYo5 s39cYEmqXyqE7kbireO2A0P/OZkJSBvBrZMkD1J9WiMqNvWi1kj/tfnPMn4LLPi8 lMUCAwEAAaOCAowwggKIMB0GA1UdDgQWBBSIrFgn6lCGxYU1U4AFsSpR/NHw8DAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAxOTQvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMTk0L2lL eFlKLXBRaHNXRk5WT0FCYkVxVWZ6UjhQQS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAVMAMA0GCSqGSIb3 DQEBCwUAA4IBAQA3DK3e80gCEZcy81NaQNUrVPRfEL4tTNpY3F2p2R83lEqkgOtQ 7BMSq19aw1MwXJVzd9Ehcb7DVpi54KDzxwOm2lIZ4/ttf8TH4g0LAOOfrjogSviI 0zjVaQbdNU3TvdtXuMrll89ptecBXiZyJUl7t08M89cUfpxIhn9rvrkCgLaVoQVt v5i56rafBaBnWymsYI73JMyZvZpXozPi+bmBCLJKMnFj7OhxKar+Xe2AR2k17ZGQ wcz1n1pAoQZ0VdKbZ1+ASQZdfGjXquSHD3oaQQwRzWuICiAeP6NkrdT50Y6xWVR6 u4Uzrc1eqqDNESbhpA43PqlKAXwnCnv7rsk2 -----END CERTIFICATE-----Generated at Sat Nov 14 20:40:32 2026 by rpki-client