$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer File: ivQg8ZIA4Rvkro2RTroqy0KRe24.cer (raw, json) Hash identifier: yFSo7gH+dwdFv9GH0v4zyphxFaYSsP8tJsJrn7KfZJ4= Subject key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6D26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 Jul 2026 01:35:08 +0000 Certificate not after: Thu 15 Jul 2027 01:30:02 +0000 Subordinate resources: IP: 103.40.128.0/22 IP: 202.140.192.0/19 IP: 219.100.132.0/22 IP: 220.152.96.0/20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 05:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27942 (0x6d26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jul 15 01:35:08 2026 GMT Not After : Jul 15 01:30:02 2027 GMT Subject: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:3f:61:7a:77:16:e2:83:a2:e3:0f:a1:09: 92:4c:52:9a:b5:de:72:f7:fe:c0:db:b9:39:d4:fb: cf:33:db:f5:b3:7d:8a:24:71:f1:7f:fa:fc:7e:b7: 19:52:f3:82:0f:83:cc:9a:ec:91:6d:9b:b4:ae:b1: 1e:84:a0:a9:95:8f:7e:aa:01:31:59:91:97:46:4d: 1e:9e:ba:f0:94:ee:dd:a6:74:37:47:21:41:11:fe: 8b:86:84:f6:ec:fe:c7:df:88:71:2d:b6:fa:67:3e: 37:57:c7:85:dc:a4:e9:81:3f:d4:5d:d6:22:02:b2: 77:ab:99:5c:c1:ab:fa:8d:50:f3:05:04:60:86:03: 81:5e:af:f4:dc:2b:4b:8f:a4:f4:d7:a0:e2:01:cc: 1e:99:d3:80:10:f1:77:40:2a:3d:70:05:a3:5e:c8: e5:11:88:55:54:67:fb:37:4d:cc:a4:e1:4b:4b:f3: c8:56:4b:c9:4d:44:83:9a:03:fc:7e:2e:b1:4e:8d: d6:4c:9b:c1:3e:52:d1:aa:c5:b2:ff:28:7a:24:f8: f3:bb:b5:4f:a1:7f:35:c0:a7:63:e9:ef:9a:23:50: 2c:28:f4:3d:80:2c:ab:33:e9:ca:92:e2:df:d7:c9: e9:40:d5:96:6c:40:7d:3b:c8:04:ca:d3:98:56:4f: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.128.0/22 202.140.192.0/19 219.100.132.0/22 220.152.96.0/20 Signature Algorithm: sha256WithRSAEncryption 1e:22:88:cc:34:c9:07:72:8c:a5:72:a2:01:5f:d0:ea:6d:71: ec:5d:0f:3a:57:9d:17:6b:55:f6:6b:6f:4c:c8:5a:4e:8f:e3: 4c:df:34:1d:3e:8c:11:dc:e4:16:aa:d6:cf:b1:ba:b9:c4:0d: 24:f5:5a:a8:33:7a:82:83:51:26:ea:b7:e0:50:b3:8e:64:34: 73:05:17:ad:c8:08:6e:2e:67:92:f0:c9:b2:45:b4:a6:2a:bc: 1b:e8:ee:99:14:1c:56:44:6f:4e:e1:9f:11:28:9a:c0:fc:38: 83:99:9d:de:bf:6f:7a:f1:dd:f4:35:96:f4:75:fc:0b:fa:8b: d6:a6:4a:26:00:c3:d6:b6:a3:94:77:80:ab:e3:fe:89:2b:14: 55:3b:e6:15:c1:51:74:f8:7d:62:27:0c:ee:48:c3:28:3f:1b: aa:b0:ad:8a:5d:8f:f2:01:7f:1f:1c:cc:da:0e:54:4e:4a:8e: 3a:b7:79:59:0b:f8:22:50:52:89:84:43:df:16:7b:d4:02:b9: 55:03:03:99:65:e0:73:a4:80:81:97:b0:a4:0b:86:4b:41:1d: 82:62:3c:4d:dd:74:23:14:cd:70:2b:20:65:6f:e1:53:91:5b: 9d:e0:45:aa:54:e5:57:f0:2a:be:5b:77:df:45:93:87:06:9b: 3d:94:8d:d3 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICbSYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDcxNTAxMzUwOFoXDTI3MDcxNTAxMzAwMlowMzEx MC8GA1UEAxMoOEFGNDIwRjE5MjAwRTExQkU0QUU4RDkxNEVCQTJBQ0I0MjkxN0I2 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANKaP2F6dxbig6LjD6EJ kkxSmrXecvf+wNu5OdT7zzPb9bN9iiRx8X/6/H63GVLzgg+DzJrskW2btK6xHoSg qZWPfqoBMVmRl0ZNHp668JTu3aZ0N0chQRH+i4aE9uz+x9+IcS22+mc+N1fHhdyk 6YE/1F3WIgKyd6uZXMGr+o1Q8wUEYIYDgV6v9NwrS4+k9Neg4gHMHpnTgBDxd0Aq PXAFo17I5RGIVVRn+zdNzKThS0vzyFZLyU1Eg5oD/H4usU6N1kybwT5S0arFsv8o eiT487u1T6F/NcCnY+nvmiNQLCj0PYAsqzPpypLi39fJ6UDVlmxAfTvIBMrTmFZP 550CAwEAAaOCApgwggKUMB0GA1UdDgQWBBSK9CDxkgDhG+SujZFOuirLQpF7bjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIH/BggrBgEFBQcBCwSB8jCB 7zBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpw L2FwL0E5MUE3MzgxMDAwMC84ODQvMGEGCCsGAQUFBzAKhlVyc3luYzovL3Jwa2kt cmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzg4NC9pdlFnOFpJ QTRSdmtybzJSVHJvcXkwS1JlMjQubWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1s MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCZyiAAwQFyozAAwQC22SEAwQE 3JhgMA0GCSqGSIb3DQEBCwUAA4IBAQAeIojMNMkHcoylcqIBX9DqbXHsXQ86V50X a1X2a29MyFpOj+NM3zQdPowR3OQWqtbPsbq5xA0k9VqoM3qCg1Em6rfgULOOZDRz BRetyAhuLmeS8MmyRbSmKrwb6O6ZFBxWRG9O4Z8RKJrA/DiDmZ3ev2968d30NZb0 dfwL+ovWpkomAMPWtqOUd4Cr4/6JKxRVO+YVwVF0+H1iJwzuSMMoPxuqsK2KXY/y AX8fHMzaDlROSo46t3lZC/giUFKJhEPfFnvUArlVAwOZZeBzpICBl7CkC4ZLQR2C YjxN3XQjFM1wKyBlb+FTkVud4EWqVOVX8Cq+W3ffRZOHBps9lI3T -----END CERTIFICATE-----Generated at Fri Jul 24 07:35:47 2026 by rpki-client